Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/HRw1RJWD3rAJdSp5vtKcveJom08.roa
File: HRw1RJWD3rAJdSp5vtKcveJom08.roa (raw, json)
Hash identifier: wANSD+u6GTgGZVkLZDI++1pREL2PNzRgS0eriDnSqmo=
Subject key identifier: 1D:1C:35:44:95:83:DE:B0:09:75:2A:79:BE:D2:9C:BD:E2:68:9B:4F
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 01856CE63036C13CFE2313CDA2653C3AADE7
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/HRw1RJWD3rAJdSp5vtKcveJom08.roa
Signing time: Sun 01 Jan 2023 10:35:03 +0000
ROA not before: Sun 01 Jan 2023 10:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47385
IP address blocks: 79.174.64.0/19 maxlen: 20
79.174.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:30:36:c1:3c:fe:23:13:cd:a2:65:3c:3a:ad:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 1 10:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d1c35449583deb009752a79bed29cbde2689b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:42:03:2b:80:ba:e0:19:0f:cd:84:c2:aa:
7a:9d:2e:ad:ac:59:76:2b:5b:b1:8a:c1:11:f2:95:
53:9e:e4:cf:94:7a:9d:7b:d2:45:6a:f6:b1:9f:ff:
83:b7:2e:ca:df:f4:3c:da:4d:ac:f5:56:ab:42:55:
1c:f2:00:4d:18:7f:a4:60:34:ae:fe:67:0a:60:e7:
26:12:2e:1f:5e:bf:c8:c9:38:c9:58:ff:91:84:58:
8e:99:b7:88:49:c3:78:8d:9e:0b:65:33:35:89:b3:
be:f7:b4:23:f8:b4:da:a1:39:35:b3:6c:ec:74:b2:
11:9a:1f:39:86:54:bc:63:8c:96:ff:bf:ab:8f:bb:
83:90:8e:d4:be:2b:3f:13:d7:ee:b6:14:39:06:9a:
d9:d9:55:03:b5:61:cd:70:57:9c:b2:05:aa:e4:c4:
1f:ce:69:9c:c2:12:21:6f:ab:49:76:6f:18:1b:fb:
f0:ac:d8:58:95:30:bf:a0:94:18:ba:2d:74:71:b0:
4d:41:51:44:6c:f9:b7:f7:c8:ca:f6:f3:b8:3b:36:
a0:d1:da:94:fe:e0:e3:ab:43:49:33:7d:72:ba:cf:
3b:3c:36:7e:09:e9:f6:a4:8c:89:0a:23:c3:6c:47:
42:c4:e1:50:3e:4b:32:54:01:d9:41:68:c0:ae:d8:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1C:35:44:95:83:DE:B0:09:75:2A:79:BE:D2:9C:BD:E2:68:9B:4F
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/HRw1RJWD3rAJdSp5vtKcveJom08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:85:bc:31:ac:73:57:33:ff:d8:87:24:3e:af:88:a1:11:5a:
6b:6d:ea:ae:df:10:99:d1:e2:5b:e1:c2:bf:49:93:62:55:3b:
10:25:cf:86:6f:c0:99:a2:82:94:3d:ee:81:5a:6c:12:01:3f:
2c:73:f0:b4:bb:1f:e2:da:2e:d8:e5:d8:28:46:4a:86:73:0e:
6c:7a:ae:22:40:80:52:47:d1:04:84:d0:af:6b:e2:c3:b3:91:
26:c2:54:7b:76:fe:23:51:1c:e5:f2:f9:a2:57:ea:87:4c:eb:
9e:71:39:34:7f:f6:f6:43:81:d0:2e:79:1e:f8:98:4d:a8:0c:
f0:5f:97:dc:2f:94:30:6f:64:27:44:7f:08:b9:f9:f0:b3:94:
52:b6:fb:59:5a:59:23:7e:76:c5:6d:a6:d2:6b:34:eb:a1:2b:
71:66:56:7c:c1:72:b5:6a:cd:13:8f:a4:d7:67:00:8b:eb:73:
fa:62:ae:53:b8:87:e9:c9:76:f9:ef:2d:2b:d8:b8:73:ff:ec:
7e:cf:21:88:a9:52:9e:9f:9c:2b:63:c0:16:1b:31:31:e5:26:
12:a1:76:07:96:c5:ac:e5:a0:ba:f9:68:29:49:10:13:da:c2:
06:23:0d:29:fe:0f:48:c1:7f:9f:66:a3:12:fa:c7:82:64:41:
1c:cf:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org