Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/Ne5dFau1qXdkxzo2Nq-JqEyBHm4.roa
File: Ne5dFau1qXdkxzo2Nq-JqEyBHm4.roa (raw, json)
Hash identifier: 1vBDsrOuGsoH8xzJYmldYCOycmdC3n2KCvtWyiVcJQA=
Subject key identifier: 35:EE:5D:15:AB:B5:A9:77:64:C7:3A:36:36:AF:89:A8:4C:81:1E:6E
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 018C5ECE96534FFCED2612918AC75C7CA51F
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/Ne5dFau1qXdkxzo2Nq-JqEyBHm4.roa
Signing time: Tue 12 Dec 2023 16:14:06 +0000
ROA not before: Tue 12 Dec 2023 16:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202650
IP address blocks: 79.174.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:ce:96:53:4f:fc:ed:26:12:91:8a:c7:5c:7c:a5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Dec 12 16:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35ee5d15abb5a97764c73a3636af89a84c811e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:90:b2:14:34:fc:51:d2:b6:83:27:0d:60:
7e:de:5c:9e:11:fa:71:90:b1:1e:ee:b6:14:0a:b2:
17:c2:d6:b1:4c:ed:37:b4:8a:fe:3b:1c:d4:db:0f:
3b:5c:69:eb:1a:3a:0f:70:19:11:50:cb:60:18:6e:
55:0f:70:ca:fa:ad:bb:69:3a:fe:80:30:7f:68:95:
e2:70:2d:11:9f:66:b5:85:a5:73:c9:eb:d1:11:79:
21:0c:ca:54:a2:52:28:9e:26:f1:10:c1:45:7f:ff:
75:04:c9:45:b3:5d:1f:3d:52:f4:3f:f2:a7:e5:28:
4d:70:5d:3a:27:c8:19:05:96:db:a8:ca:69:e1:51:
32:f3:04:c5:7e:69:ce:55:25:15:80:78:45:c2:ec:
86:fb:21:83:42:dc:ed:aa:bc:56:a6:4c:6b:ec:2a:
57:7d:8d:85:df:c9:e4:2a:f1:21:59:4e:21:3f:b5:
c9:f2:51:cb:13:a3:e5:e1:4c:00:8a:10:0a:31:be:
78:e0:53:ec:6b:3d:13:f9:71:85:ad:f9:12:0d:de:
4c:a4:4a:c5:24:c3:78:17:63:5e:c3:3d:aa:37:23:
01:fa:16:97:8f:2c:b0:b5:12:1d:33:3f:4b:9f:13:
d7:41:1d:fc:82:ed:24:12:e1:3b:cf:5d:88:f6:b9:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EE:5D:15:AB:B5:A9:77:64:C7:3A:36:36:AF:89:A8:4C:81:1E:6E
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/Ne5dFau1qXdkxzo2Nq-JqEyBHm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.191.0/24
Signature Algorithm: sha256WithRSAEncryption
29:42:64:38:bc:a6:43:72:97:9f:92:0c:94:31:c4:0c:a9:34:
0b:f0:36:41:64:58:0f:36:39:5a:5b:e5:df:74:97:f0:ae:02:
fa:68:f1:9f:dc:6a:51:6e:d2:e8:ee:7c:de:ff:3c:aa:f3:d6:
9e:6a:4d:d7:46:7b:17:4e:d0:85:38:96:76:9c:08:f2:b4:ff:
5b:82:5c:2b:dd:19:8f:ed:17:c2:c0:ca:7d:60:ad:19:0a:9f:
aa:58:6d:c3:48:b2:54:ec:b6:a4:2f:82:ca:15:bd:dd:39:79:
18:2b:a3:98:7a:f0:b7:99:15:56:86:6c:3d:59:cc:f9:00:a7:
0f:d1:bd:14:46:d6:f0:bb:ed:e0:6e:3b:d7:c6:50:a0:22:0f:
05:62:59:d0:99:dd:fb:82:21:55:24:1a:53:cd:2c:1e:e0:22:
c8:6d:63:ea:09:30:8a:bf:85:1a:45:45:1a:96:b4:47:40:bc:
96:81:08:f3:3e:5a:e4:3b:52:b1:57:34:a7:8b:f0:21:5e:41:
46:17:16:82:51:81:ef:19:61:b2:77:03:3c:d9:58:d1:b5:32:
40:ea:a7:1c:1d:50:ed:3d:69:2b:40:45:fa:67:e6:37:7e:f2:
c1:e2:05:82:f2:54:80:66:f5:b7:c9:af:18:16:55:1c:ec:d0:
27:fc:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org