Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/_Dxvd0K7tAaqZPGPhldXhqdIqV4.roa
File: _Dxvd0K7tAaqZPGPhldXhqdIqV4.roa (raw, json)
Hash identifier: VkfQ/EOPqRXse0FQaVN82g7k9+pvmPvExXfUXb1r3gs=
Subject key identifier: FC:3C:6F:77:42:BB:B4:06:AA:64:F1:8F:86:57:57:86:A7:48:A9:5E
Certificate issuer: /CN=7479df50a315029e80aa1947afe12db1e948628b
Certificate serial: 01856BCA13C5851009A81530CC0042DFA49D
Authority key identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/_Dxvd0K7tAaqZPGPhldXhqdIqV4.roa
Signing time: Sun 01 Jan 2023 05:24:43 +0000
ROA not before: Sun 01 Jan 2023 05:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30833
IP address blocks: 217.78.176.0/21 maxlen: 21
217.78.176.0/20 maxlen: 20
217.78.184.0/21 maxlen: 21
79.98.136.0/22 maxlen: 22
79.98.136.0/21 maxlen: 21
79.98.140.0/22 maxlen: 22
80.249.202.0/23 maxlen: 23
80.249.200.0/22 maxlen: 22
80.249.200.0/23 maxlen: 23
2a00:d98::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:13:c5:85:10:09:a8:15:30:cc:00:42:df:a4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7479df50a315029e80aa1947afe12db1e948628b
Validity
Not Before: Jan 1 05:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc3c6f7742bbb406aa64f18f86575786a748a95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:23:4b:e5:f8:7e:93:fc:ad:45:3c:70:d1:
05:0b:5a:46:a7:0f:8a:2a:1c:a9:44:47:1b:4c:8a:
a8:89:d6:f0:4b:60:bb:c2:f8:3c:0c:d6:54:77:e9:
e5:fc:12:6b:8d:6c:32:da:af:4f:a5:5a:b5:ef:fe:
34:26:d5:12:3a:d9:ec:ca:f2:d0:1c:d7:b3:02:f4:
23:b2:36:a6:2c:df:dd:90:48:9a:ee:3e:f2:cb:b1:
ad:ba:47:04:0a:04:86:b3:b3:7e:a0:8b:f7:f5:65:
54:34:c1:11:98:47:14:10:7a:f1:dd:e5:8c:a8:21:
66:17:25:79:4b:39:d0:a6:8b:55:4f:6a:70:06:59:
a0:60:18:d2:2a:11:41:b9:97:8e:1d:9e:f8:5d:6c:
fe:c6:6b:41:c2:c9:7a:1d:1f:7b:54:31:82:67:9e:
5a:88:a4:be:c5:57:50:66:da:73:3b:42:25:dd:6a:
0d:a6:c1:24:28:17:da:35:78:15:12:10:1d:4e:39:
5b:29:79:8b:fb:39:43:75:28:18:51:fd:6b:1a:24:
16:72:61:cb:e8:01:b1:1f:7f:31:aa:cc:25:48:57:
06:c1:6d:44:f6:a6:58:38:d4:80:99:b0:8e:14:5c:
03:57:40:f2:61:ee:50:9d:ac:5b:5f:1f:4f:3e:76:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3C:6F:77:42:BB:B4:06:AA:64:F1:8F:86:57:57:86:A7:48:A9:5E
X509v3 Authority Key Identifier:
keyid:74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/_Dxvd0K7tAaqZPGPhldXhqdIqV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.136.0/21
80.249.200.0/22
217.78.176.0/20
IPv6:
2a00:d98::/32
Signature Algorithm: sha256WithRSAEncryption
73:ad:c9:28:e3:72:64:d6:71:19:71:83:9f:42:e3:1e:78:16:
14:59:07:e1:85:20:d8:cc:42:3b:54:2b:84:9e:d5:59:4e:09:
5e:99:dd:bc:af:6b:8f:7e:0e:f4:d7:5e:89:fb:eb:05:57:e6:
78:7e:ef:8d:5f:68:01:1c:0b:91:35:09:59:e2:2d:69:24:5d:
02:58:a0:e5:87:62:84:69:c0:b6:39:06:af:0c:6d:67:7d:25:
76:17:44:fe:e7:23:77:23:07:29:41:d4:44:dc:85:29:91:1c:
f7:88:92:5b:33:4d:37:6f:58:6a:7a:88:bd:dd:e6:5f:01:2b:
e2:05:50:1e:b8:c0:7b:26:27:bd:a4:32:81:3d:a9:0b:4d:89:
f3:8a:62:b3:92:77:a4:c2:de:bb:85:d0:84:77:5c:60:13:05:
67:9d:04:85:c0:50:7f:7f:96:fd:7e:91:cc:c9:2e:54:f7:bc:
bb:66:e0:0c:6d:02:3a:b6:cf:28:87:5a:64:4c:16:6a:0c:16:
3c:53:e5:b4:a1:a7:f7:57:65:04:20:b0:f1:b7:28:e4:e0:0d:
e2:1b:8d:ae:ea:be:b0:a8:6b:d4:15:a3:d6:61:55:b2:44:84:
d0:46:93:92:af:01:60:cf:52:47:16:0a:69:95:9d:4a:a8:8b:
63:5c:c2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:42 2024 by rpki-client on console-ams.rpki-client.org