Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/EVmGtDFJM6c9yCf53dNTVB1CClw.roa
File: EVmGtDFJM6c9yCf53dNTVB1CClw.roa (raw, json)
Hash identifier: FKsZkXv7Kmvei3UE4dznKMs8aVAVhctV/URFoqTW4KA=
Subject key identifier: 11:59:86:B4:31:49:33:A7:3D:C8:27:F9:DD:D3:53:54:1D:42:0A:5C
Certificate issuer: /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial: 018CC4244970D53AB628A7641C675A3B0550
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/EVmGtDFJM6c9yCf53dNTVB1CClw.roa
Signing time: Mon 01 Jan 2024 08:29:21 +0000
ROA not before: Mon 01 Jan 2024 08:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202240
IP address blocks: 79.98.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:49:70:d5:3a:b6:28:a7:64:1c:67:5a:3b:05:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Validity
Not Before: Jan 1 08:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=115986b4314933a73dc827f9ddd353541d420a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:0e:93:50:cd:2f:66:7f:2e:fe:2f:5d:99:
fb:b9:90:91:6b:38:79:f7:5c:fb:ab:02:c3:15:37:
b9:bb:16:a8:6c:6d:81:5c:6b:4f:c7:fc:42:a2:ec:
5b:c2:13:bc:be:98:52:77:ca:29:f6:52:92:4b:dc:
8f:30:10:f9:b3:93:a3:20:25:3c:d2:1b:db:81:d6:
33:77:27:26:a4:c8:75:ef:da:45:7c:78:5e:9f:16:
2b:e3:ff:8d:de:34:73:96:a9:3b:f4:cf:22:7c:31:
52:b8:99:c9:55:fb:1d:d5:e7:9b:7a:b1:a2:64:5b:
7b:50:67:b6:19:25:6a:45:03:cb:3f:a0:98:af:30:
79:4b:ba:64:da:d8:af:3d:30:1e:3e:a9:f5:80:39:
c6:e9:78:fd:8e:59:dd:62:30:b6:a8:b6:02:6f:73:
cf:22:2f:2f:94:dc:bd:8d:49:85:73:80:37:5e:03:
c7:d2:c0:54:ad:4f:23:b1:d4:4d:e8:9b:c6:5b:a1:
d7:8c:ae:1c:61:bd:06:87:96:e0:66:e7:12:a8:12:
62:97:c6:1f:51:cc:05:18:98:f7:00:e2:b0:bd:9f:
22:3e:59:f2:36:6c:31:26:9c:ad:00:61:23:59:e3:
85:cd:52:40:e9:89:17:60:20:0b:e2:7b:53:7e:35:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:59:86:B4:31:49:33:A7:3D:C8:27:F9:DD:D3:53:54:1D:42:0A:5C
X509v3 Authority Key Identifier:
keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/EVmGtDFJM6c9yCf53dNTVB1CClw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:0d:bf:48:35:97:5e:7e:ef:23:30:9a:79:a9:17:d9:4d:b1:
fa:d8:d1:63:09:fd:5f:17:19:80:11:b8:69:78:7c:8e:8c:b0:
3b:c8:35:26:dc:df:dc:70:57:d2:1f:80:ef:b6:b1:04:b7:2b:
79:35:ba:5f:13:cd:80:05:05:a1:4f:76:01:fd:d0:93:9c:3f:
ad:9e:9c:20:73:d8:40:7c:c8:8b:f9:38:d3:f4:20:51:82:3b:
e0:5c:22:78:81:e7:d2:d2:e6:7c:7d:76:ef:d9:dc:6e:04:c6:
e1:7a:d1:3e:d8:48:aa:05:55:ba:6b:2e:3e:0e:54:05:90:31:
87:a6:26:3b:ca:6f:87:99:b8:8b:be:ca:ad:57:40:86:42:4f:
76:07:d1:bf:05:64:16:aa:34:7b:14:80:84:44:05:0c:db:4d:
f2:52:cc:bb:d9:68:a2:d2:ee:c7:49:ca:03:2d:c9:53:6a:d1:
e9:f5:4a:b9:33:f2:6a:5e:f7:bf:ed:68:dc:80:bd:ed:0c:c9:
93:0e:47:0b:45:ac:d1:f4:fe:ab:c5:2c:0e:67:58:14:d5:5d:
d3:3a:8b:19:9c:59:8e:cb:32:bc:6b:be:ed:8c:4d:7d:8b:bc:
11:84:5e:91:76:bd:5b:19:fc:29:10:8c:79:62:4f:18:0d:3b:
93:ff:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:52:57 2025 by rpki-client