Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/KFpdzT4kpqx6KwqorZ17OF8sm20.roa
File: KFpdzT4kpqx6KwqorZ17OF8sm20.roa (raw, json)
Hash identifier: jIhO3ZVN0+nMi7KmONFQ4cdX7oAok2kzx+fxQPAP27A=
Subject key identifier: 28:5A:5D:CD:3E:24:A6:AC:7A:2B:0A:A8:AD:9D:7B:38:5F:2C:9B:6D
Certificate issuer: /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial: 0191747BE66581F7E95DBE6DD6AF2403AE50
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/KFpdzT4kpqx6KwqorZ17OF8sm20.roa
Signing time: Wed 21 Aug 2024 10:29:22 +0000
ROA not before: Wed 21 Aug 2024 10:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208621
IP address blocks: 79.110.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 12:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:7b:e6:65:81:f7:e9:5d:be:6d:d6:af:24:03:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Validity
Not Before: Aug 21 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=285a5dcd3e24a6ac7a2b0aa8ad9d7b385f2c9b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:17:01:ef:1f:b5:1f:d2:69:6c:ed:81:11:c4:
e9:45:38:45:fc:51:91:9b:ba:0e:02:57:3c:8b:c7:
e6:8e:c6:d2:94:0b:7b:09:84:b6:c7:28:74:f7:98:
95:f2:4b:ff:76:f2:31:95:75:a5:bb:c6:01:d9:45:
a8:7e:21:7b:42:cb:ff:61:21:01:cc:26:b8:f3:e9:
49:6f:6e:35:9f:68:8b:91:5a:13:17:6e:90:67:20:
d9:d4:01:cd:19:a8:d7:7c:ea:8a:62:7a:a0:49:77:
20:88:08:ca:2c:e8:45:4f:aa:7b:af:30:76:92:00:
b5:d1:16:6f:0f:9d:80:30:0e:98:7d:95:ab:5c:97:
8e:48:b0:9d:4a:89:db:c0:cd:06:a5:79:f5:39:14:
c1:24:8d:2d:69:31:5d:f8:7f:95:77:77:58:f2:4d:
2d:e6:ec:5d:60:3e:54:0a:eb:80:9c:87:ec:5f:02:
6e:29:cc:73:ab:81:0a:8f:c0:91:a8:21:cb:96:da:
39:cc:f2:98:c2:21:d5:53:ba:19:14:51:9f:10:2d:
9f:59:6e:0c:f9:7a:39:09:b9:a2:f9:60:59:85:08:
b4:84:51:fa:88:c1:5d:89:71:19:a8:78:dc:81:36:
16:ce:fd:84:75:62:38:34:3c:7c:e5:83:28:70:f0:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:5D:CD:3E:24:A6:AC:7A:2B:0A:A8:AD:9D:7B:38:5F:2C:9B:6D
X509v3 Authority Key Identifier:
keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/KFpdzT4kpqx6KwqorZ17OF8sm20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:4e:3a:a8:2a:17:d9:c5:ed:61:fc:fb:1e:09:4c:9f:58:c1:
e0:e2:2a:8c:dc:ea:20:23:9a:b2:c3:b1:25:00:b1:25:46:c4:
d5:d1:17:37:b8:51:8f:57:62:4e:0f:c1:5f:49:fb:99:9b:c5:
83:94:89:05:17:c1:9f:8a:0f:7f:99:ec:94:d5:c5:11:0b:5c:
8c:02:4f:83:74:b0:48:d0:89:74:3c:26:68:c3:17:4b:a9:22:
a2:e9:98:90:c2:9a:9c:25:31:fa:33:e9:50:40:56:94:18:80:
d6:49:01:20:26:7c:56:2b:f0:e8:ee:82:6c:01:88:61:2a:fc:
80:a4:5e:c5:f7:c2:1c:f3:ef:77:3f:cd:23:9a:a0:c6:bc:ac:
92:94:21:1a:78:c0:a2:85:fc:e6:f5:af:65:9f:7f:f3:aa:8f:
fd:2a:79:a1:9e:61:88:74:c0:71:d2:f3:04:e7:8c:60:b4:54:
67:cb:fc:35:f8:20:ca:c7:41:c8:94:78:bc:86:a7:4d:5e:6d:
b4:e8:69:86:d0:c7:38:fc:84:e8:5e:42:55:12:ed:c7:dd:e4:
4e:d9:e1:29:66:a3:81:88:fa:e3:83:47:5d:31:f8:a3:74:4f:
43:89:d2:7d:51:66:14:fc:1f:41:20:66:3e:9d:80:12:b1:d6:
06:d7:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org