Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/tNDmfeiCrQdN5x4lVi5rsXyQVRI.roa
File: tNDmfeiCrQdN5x4lVi5rsXyQVRI.roa (raw, json)
Hash identifier: UWhqanCzmSlhgrtAXysbPPQBiM/AH1kGlX4FzmBx8co=
Subject key identifier: B4:D0:E6:7D:E8:82:AD:07:4D:E7:1E:25:56:2E:6B:B1:7C:90:55:12
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 0193006B71ABBDA3FE8F286F318AE6212137
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/tNDmfeiCrQdN5x4lVi5rsXyQVRI.roa
Signing time: Wed 06 Nov 2024 07:41:01 +0000
ROA not before: Wed 06 Nov 2024 07:41:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 79.137.194.0/23 maxlen: 23
79.137.196.0/22 maxlen: 22
79.137.202.0/23 maxlen: 23
79.137.204.0/23 maxlen: 23
79.137.206.0/24 maxlen: 24
79.137.207.0/24 maxlen: 24
79.137.248.0/24 maxlen: 24
85.192.24.0/24 maxlen: 24
85.192.25.0/24 maxlen: 24
85.192.26.0/24 maxlen: 24
85.192.27.0/24 maxlen: 24
85.192.28.0/24 maxlen: 24
85.192.29.0/24 maxlen: 24
85.192.31.0/24 maxlen: 24
85.192.40.0/23 maxlen: 23
85.192.42.0/24 maxlen: 24
85.192.56.0/24 maxlen: 24
85.192.60.0/24 maxlen: 24
85.192.61.0/24 maxlen: 24
85.192.63.0/24 maxlen: 24
89.208.96.0/24 maxlen: 24
89.208.97.0/24 maxlen: 24
89.208.103.0/24 maxlen: 24
89.208.104.0/22 maxlen: 22
185.125.100.0/24 maxlen: 24
185.125.101.0/24 maxlen: 24
185.125.102.0/24 maxlen: 24
185.125.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 13:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:6b:71:ab:bd:a3:fe:8f:28:6f:31:8a:e6:21:21:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Nov 6 07:41:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4d0e67de882ad074de71e25562e6bb17c905512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:c2:41:76:89:ac:2b:2e:d5:c2:ca:d3:c3:
18:af:68:a5:e4:b9:65:30:ad:00:20:5d:af:cc:25:
4b:1d:f1:18:f7:33:dc:0e:f6:83:31:9e:08:56:98:
2b:42:e5:07:6e:9c:20:05:e3:22:b3:b3:40:1f:e5:
e1:df:0d:0e:73:34:a4:b8:f8:8b:70:22:ff:ff:08:
27:0b:dd:c0:66:ea:3d:c4:d9:14:13:95:53:e8:dc:
3b:7d:80:19:78:76:c4:0d:51:8e:41:b4:59:02:85:
84:47:24:0d:5c:9c:df:28:8b:0e:18:78:07:3e:06:
11:c7:e4:a3:05:da:aa:55:03:62:bd:dc:14:c9:25:
59:04:79:db:bd:36:c2:c2:35:c9:8b:37:14:15:d6:
cc:41:20:7d:8f:77:4a:b2:75:46:dd:25:8b:51:a2:
ef:a5:a2:38:f2:ee:ad:83:81:65:e1:d8:01:69:94:
e2:3a:a7:9a:eb:bb:5b:70:92:bf:38:c0:91:f7:fd:
83:45:69:9d:c6:80:2d:e3:db:76:5e:a1:7a:82:66:
b0:86:36:53:e3:82:a4:fc:0a:08:82:52:65:4e:25:
42:c4:d7:bc:12:56:11:29:59:cf:a2:2e:e5:ba:24:
e0:9e:06:ec:db:9c:d7:d7:fa:d2:66:a4:9f:1b:c8:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:E6:7D:E8:82:AD:07:4D:E7:1E:25:56:2E:6B:B1:7C:90:55:12
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/tNDmfeiCrQdN5x4lVi5rsXyQVRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.194.0-79.137.199.255
79.137.202.0-79.137.207.255
79.137.248.0/24
85.192.24.0-85.192.29.255
85.192.31.0/24
85.192.40.0-85.192.42.255
85.192.56.0/24
85.192.60.0/23
85.192.63.0/24
89.208.96.0/23
89.208.103.0-89.208.107.255
185.125.100.0/22
Signature Algorithm: sha256WithRSAEncryption
10:13:5a:bf:28:92:d3:ee:0b:23:1c:4d:e6:d3:0e:46:48:08:
ce:2f:07:74:b3:70:db:3c:5c:52:1a:f2:fb:41:6e:ad:5f:58:
25:b3:f0:bf:a1:97:e3:9c:b8:24:e0:00:8b:da:d4:df:35:5a:
d2:57:bf:11:7a:3f:b2:ba:3c:ea:df:8b:26:e5:91:50:0f:19:
02:7b:1f:cd:9c:72:c2:75:12:93:b9:c8:1a:2b:f9:c6:ce:0b:
d2:7e:96:f0:69:fa:79:61:39:79:6d:be:4a:73:80:5e:36:d3:
dc:24:aa:9e:25:25:c3:46:5d:15:9e:60:96:79:14:d8:cc:c4:
4f:34:19:f6:04:28:91:1e:23:7a:db:ad:b7:6f:0f:a4:fc:e4:
a4:d3:63:a9:19:23:23:7f:d6:8c:95:d3:90:58:89:4e:ab:5e:
09:3b:38:25:09:47:f7:d2:4b:a2:81:62:45:6b:e6:06:0d:7c:
5a:69:56:7b:25:8b:b6:4e:a2:47:da:f8:92:1c:a5:8e:1a:72:
9d:a8:c1:a9:1a:79:61:00:53:00:df:be:fc:04:a4:f3:19:c8:
43:f8:3c:57:90:5a:ef:b9:a1:4b:79:a3:37:17:cb:49:93:cb:
c4:ae:dd:4f:97:d1:10:bd:bc:e4:78:fa:b4:f2:3b:72:f7:b4:
ed:63:1c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 18:02:45 2024 by rpki-client on console-fra.rpki-client.org