Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/79_OASmTM9jYGh_mxFyF6MP10JM.roa
File: 79_OASmTM9jYGh_mxFyF6MP10JM.roa (raw, json)
Hash identifier: lNkdMrEuNLVwz5Lte5Tx17qmdPrrwkVqbf8FHadZsnY=
Subject key identifier: EF:DF:CE:01:29:93:33:D8:D8:1A:1F:E6:C4:5C:85:E8:C3:F5:D0:93
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 01857139C9A0BDE61FD481CAAA81B6AAB551
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/79_OASmTM9jYGh_mxFyF6MP10JM.roa
Signing time: Mon 02 Jan 2023 06:44:50 +0000
ROA not before: Mon 02 Jan 2023 06:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212947
IP address blocks: 206.204.107.0/24 maxlen: 24
206.204.106.0/24 maxlen: 24
93.157.187.0/24 maxlen: 24
206.204.104.0/24 maxlen: 24
206.204.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c9:a0:bd:e6:1f:d4:81:ca:aa:81:b6:aa:b5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Jan 2 06:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efdfce01299333d8d81a1fe6c45c85e8c3f5d093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:72:b5:1b:0e:77:31:1c:3e:72:48:b4:e5:
fe:eb:30:82:db:61:c5:1c:16:76:6f:84:a6:86:db:
ec:49:fd:3c:75:56:1a:f9:70:a3:e5:38:66:67:32:
fd:a9:8d:ca:42:90:39:c8:d2:66:ab:20:fc:1f:7e:
18:a8:3c:7b:3b:2a:00:3e:de:26:fa:2e:3b:d7:92:
cf:65:06:fb:85:1b:da:f6:19:e6:91:dd:0b:4f:8d:
84:a6:ec:ea:9a:74:a7:23:25:e0:e2:fb:00:3a:1d:
ce:ab:2b:20:f3:08:61:54:3c:aa:6b:3c:0c:e9:04:
40:93:56:78:8d:cc:03:6b:8a:15:2f:1a:5e:13:7f:
1c:38:f1:4b:a6:bb:3b:d6:05:0c:46:dc:d1:89:5e:
c0:e9:10:14:83:39:37:fc:af:d7:68:05:33:11:8c:
64:3f:3c:c5:47:5e:9a:02:04:2d:11:83:37:53:b9:
c0:cc:97:d3:61:99:45:b2:a7:c0:85:a1:02:01:48:
34:07:e7:ec:8e:af:e3:24:4a:de:dd:f5:0a:c6:a5:
e8:4d:4b:f6:12:8f:31:06:56:77:85:42:d7:6a:17:
c2:71:02:ac:e8:be:a7:92:4a:45:16:07:b5:c8:34:
ed:d5:e5:2a:30:9e:41:4b:ad:2d:90:f0:3e:7b:b4:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DF:CE:01:29:93:33:D8:D8:1A:1F:E6:C4:5C:85:E8:C3:F5:D0:93
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/79_OASmTM9jYGh_mxFyF6MP10JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.187.0/24
206.204.104.0/22
Signature Algorithm: sha256WithRSAEncryption
66:00:4d:6d:43:2c:1d:36:60:7d:88:80:fd:33:0c:73:39:eb:
36:29:1d:56:e9:16:cf:06:a8:0d:d0:0a:f7:d7:f1:63:1f:fe:
a1:09:7c:60:6d:ea:4a:89:43:e3:a2:92:8a:56:93:0b:4a:6c:
51:c8:84:a4:1a:44:e9:a7:c6:c5:84:ed:95:25:65:52:77:44:
70:30:a7:5e:96:40:21:64:12:52:dd:80:ee:50:1e:40:77:31:
7a:28:35:4d:36:b2:a5:22:af:0d:1c:91:e4:97:9c:34:b9:61:
2a:48:e5:1e:93:71:f2:f0:82:f0:4d:15:b9:f7:b8:3b:e2:82:
9b:7a:fb:f3:41:4a:cf:a9:32:8f:f4:ca:42:da:ab:f0:68:c8:
63:bc:d5:91:44:01:f4:cc:71:f3:7b:09:25:3a:1a:fc:4b:e3:
c1:64:90:8a:3f:d6:d9:27:52:cc:2d:a4:f6:9a:37:7b:30:52:
5c:fc:2c:45:28:73:2b:85:bc:9b:01:8a:74:0b:b6:8d:08:35:
5b:f5:dc:8a:35:30:cd:90:fa:ea:85:de:e9:19:4a:5f:07:4d:
55:bc:34:1c:7e:d0:45:1c:12:66:df:15:8d:24:90:40:b2:e5:
ff:21:a0:a2:52:1b:d7:c7:46:21:35:91:3a:da:4e:49:e6:0a:
bf:c3:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:56 2024 by rpki-client on console-ams.rpki-client.org