Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/NR8Q7wf59qj3jvj1U2QLW7b1uGM.roa
File: NR8Q7wf59qj3jvj1U2QLW7b1uGM.roa (raw, json)
Hash identifier: kRAlY96S0VsGKPyQkfXIvscB6tJZxG0Y00HEISpMhSg=
Subject key identifier: 35:1F:10:EF:07:F9:F6:A8:F7:8E:F8:F5:53:64:0B:5B:B6:F5:B8:63
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0188902BD879116649898450FEAF2B2BB24C
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/NR8Q7wf59qj3jvj1U2QLW7b1uGM.roa
Signing time: Tue 06 Jun 2023 10:06:12 +0000
ROA not before: Tue 06 Jun 2023 10:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31469
IP address blocks: 79.124.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:2b:d8:79:11:66:49:89:84:50:fe:af:2b:2b:b2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jun 6 10:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=351f10ef07f9f6a8f78ef8f553640b5bb6f5b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:f6:8f:9b:2e:21:7e:e0:f1:b1:e9:be:49:
ac:8a:37:46:6a:94:72:46:65:2b:f3:a5:f3:2f:1f:
91:63:a7:46:1b:ae:ef:52:21:8a:d2:e0:1a:70:44:
de:8b:9b:a3:7c:c7:7c:8b:e5:ad:a6:4f:5e:56:96:
87:82:2a:95:be:3c:f2:f8:cd:6e:d5:b2:a5:c9:8c:
27:7d:33:82:6e:cf:08:d4:36:95:ea:6c:a6:06:4b:
84:0f:43:e9:40:6c:79:71:92:f4:66:81:f8:c3:7b:
5b:19:a7:e8:84:87:b9:bc:22:26:76:99:48:20:f0:
95:ec:1f:34:26:d0:18:82:29:83:e0:f4:2d:a5:53:
83:01:51:32:a4:85:92:63:7d:36:bc:13:55:f3:af:
4d:71:12:85:6b:af:87:7a:49:7f:3b:cf:bc:b3:dc:
d9:8a:c6:3b:63:4c:36:59:85:be:96:4b:2b:20:e2:
44:db:c1:b1:0d:80:22:a1:0e:3f:ad:89:dc:30:28:
5d:7c:f5:13:7f:c4:c7:6c:db:55:b7:6e:a4:20:ae:
08:63:fa:08:fc:22:1b:a8:f2:08:00:cf:2a:27:9a:
6e:35:fa:52:00:86:91:b9:03:ee:1f:3e:cb:31:74:
20:93:cf:6a:49:d3:c1:ec:f2:30:90:ba:5e:44:10:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:10:EF:07:F9:F6:A8:F7:8E:F8:F5:53:64:0B:5B:B6:F5:B8:63
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/NR8Q7wf59qj3jvj1U2QLW7b1uGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:42:1f:3e:86:59:8b:20:32:36:e3:fe:1b:b3:3d:e9:90:9f:
93:f0:c6:31:0e:b3:e6:48:2c:c1:6e:a4:f9:0c:23:12:30:3d:
c2:92:de:10:38:6d:07:20:22:f5:25:5e:f5:45:ab:dc:4f:d8:
22:f2:09:2b:71:db:e1:5a:85:48:24:4c:63:61:a3:ca:38:62:
33:77:2c:4e:e6:5f:bd:5b:af:6e:58:8b:5a:1f:bb:ba:c2:61:
4b:3f:38:b1:e7:ae:59:5e:03:fa:a1:a5:2f:0f:95:0e:18:7a:
49:56:22:51:c3:6c:8f:2b:dd:a6:cb:d6:8c:f9:ef:b2:01:1a:
d7:73:99:14:22:74:7b:12:b6:dd:de:0b:c9:05:9f:ad:0b:b3:
c7:36:50:c3:38:f4:db:a4:e0:8f:b9:1c:d5:f5:e1:80:70:38:
36:10:ed:47:e5:79:ef:02:fb:e4:b3:54:e3:06:34:2d:b6:cf:
9a:9a:76:19:eb:75:6b:c4:ca:77:5a:65:22:a2:04:f8:9a:d0:
00:b8:7c:23:8f:93:fa:60:86:68:fa:76:4c:4d:96:8b:5d:be:
bb:fe:95:bd:b5:fb:d8:97:a4:d4:d8:b3:84:24:c8:a7:23:67:
e5:9e:2c:88:e8:2d:b1:e7:a5:c8:01:21:b8:9f:a3:6e:7b:8a:
b2:1a:67:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:30 2024 by rpki-client on console-fra.rpki-client.org