Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/V-7nTDZnJnOu94Pv4khF2zn4zjs.roa
File: V-7nTDZnJnOu94Pv4khF2zn4zjs.roa (raw, json)
Hash identifier: fhqFENk/2Ojgcl3DRxzNEsHwhhbumWGquMuDsPpFXC4=
Subject key identifier: 57:EE:E7:4C:36:67:26:73:AE:F7:83:EF:E2:48:45:DB:39:F8:CE:3B
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 018CC9BCAFE331AE298786BFCC4DBDBFCE5F
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/V-7nTDZnJnOu94Pv4khF2zn4zjs.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197695
IP address blocks: 89.104.64.0/21 maxlen: 24
79.174.80.0/21 maxlen: 24
79.174.88.0/21 maxlen: 24
89.111.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 07:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:af:e3:31:ae:29:87:86:bf:cc:4d:bd:bf:ce:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57eee74c36672673aef783efe24845db39f8ce3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:fa:55:db:9b:a6:6f:38:95:d5:b0:b5:e0:
76:4d:f6:33:b9:76:42:b3:a7:13:c1:97:95:20:90:
27:fc:48:46:fa:a0:a1:64:a3:82:df:9e:67:5e:8a:
07:ba:d7:9e:98:04:0e:f2:34:fa:55:26:31:d4:46:
d8:13:6c:07:22:4c:c0:35:fe:b8:18:4a:da:20:bd:
33:7f:bb:55:71:86:83:ba:e4:7d:fc:d4:b1:0f:0a:
66:d5:c2:24:1a:c0:ae:58:a3:bd:7e:8a:2e:b2:fa:
f2:4d:84:a7:f3:4f:6d:c7:e2:31:a0:ec:cd:4c:fb:
03:2e:a7:fd:21:22:f2:34:a6:6d:85:77:a5:2d:10:
d2:1b:8c:76:56:91:55:fb:a6:59:7f:ef:49:c5:0c:
ff:d9:39:6c:77:a7:65:2f:29:ec:c1:8b:81:0a:68:
4b:f2:2b:90:63:12:fd:cc:73:d4:fa:ac:ab:f4:d4:
32:df:02:52:18:a5:a1:71:9d:dd:d7:06:61:24:9f:
cc:14:c9:d6:39:ad:18:7a:eb:7f:a3:89:6e:44:2f:
3d:69:c7:5a:b5:ed:d2:25:34:8e:32:7a:c9:9e:e9:
10:b3:04:06:e5:f3:c2:cd:f3:d7:ca:03:ee:2d:8a:
55:87:cd:44:e0:7d:68:73:95:bd:04:3c:b3:f7:0d:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EE:E7:4C:36:67:26:73:AE:F7:83:EF:E2:48:45:DB:39:F8:CE:3B
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/V-7nTDZnJnOu94Pv4khF2zn4zjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.80.0/20
89.104.64.0/21
89.111.168.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:a1:a5:f0:ab:ad:f9:a3:c4:f4:1d:ee:90:43:19:36:63:4a:
84:e9:17:18:fd:f7:83:0a:bb:4f:00:96:03:6b:16:02:38:ee:
a9:cb:a5:b1:bf:6f:81:86:a7:db:e9:cd:5b:df:b6:90:1a:ee:
8d:94:1c:79:cf:75:33:ba:19:c3:2b:38:9e:2b:4e:47:3e:ee:
21:50:ac:f2:64:98:48:4a:1a:c5:79:5c:20:0c:12:a5:28:2c:
6e:d4:a7:20:19:f0:54:f5:11:54:bc:3f:b5:d3:2f:5d:7a:cb:
a5:25:68:db:3b:e8:75:cb:16:e3:3e:27:d5:63:2e:f8:78:57:
34:b8:6c:7b:60:0a:f5:c7:a1:dc:61:2e:03:e1:60:7b:20:95:
0c:c9:7e:90:e1:63:9a:09:4a:16:19:27:9e:84:28:95:62:8d:
c8:a1:a8:25:6b:2c:10:ce:f6:79:cb:fa:c8:76:34:73:b9:71:
50:aa:cb:cc:a4:bc:4e:85:56:18:ac:7a:9a:9a:71:07:04:69:
e4:c0:28:f7:a5:a9:42:90:e5:c1:33:1c:10:9f:64:f3:8f:2c:
68:d0:18:ad:bc:c2:1b:25:ae:b1:d5:b1:ec:39:ac:90:36:bb:
87:ea:47:c9:e7:98:6c:d8:49:17:c5:ac:53:96:c7:7d:0e:0b:
06:b3:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:13 2024 by rpki-client on console-ams.rpki-client.org