Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/f4NFQejeUhbBwvam1XkVvLVpBpE.roa
File: f4NFQejeUhbBwvam1XkVvLVpBpE.roa (raw, json)
Hash identifier: TpbKYY4RFRgxR/WRXz9WqrsxPvgxfg+yQ00jP2kPLo8=
Subject key identifier: 7F:83:45:41:E8:DE:52:16:C1:C2:F6:A6:D5:79:15:BC:B5:69:06:91
Certificate issuer: /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial: 0191FA35B2D5A803E4289AC4B05770D4909E
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/f4NFQejeUhbBwvam1XkVvLVpBpE.roa
Signing time: Mon 16 Sep 2024 09:41:48 +0000
ROA not before: Mon 16 Sep 2024 09:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200304
IP address blocks: 79.110.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 12:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:35:b2:d5:a8:03:e4:28:9a:c4:b0:57:70:d4:90:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Validity
Not Before: Sep 16 09:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f834541e8de5216c1c2f6a6d57915bcb5690691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:93:31:71:56:28:11:28:0b:b7:71:d5:2a:
e3:d3:6d:b9:50:19:ed:3a:78:8c:bb:6b:e1:64:97:
45:c2:5c:c2:43:82:35:b1:47:fe:e2:c8:41:42:91:
07:9e:d1:25:f6:bc:90:12:30:2e:12:2f:50:cf:c6:
52:3b:92:64:92:07:85:cb:a6:23:d0:58:3e:3e:d6:
24:54:a4:ae:12:2a:59:65:f2:a5:d2:36:65:01:61:
12:d7:ef:58:7a:54:91:61:da:09:68:87:31:e6:58:
44:e8:a5:c3:e2:4c:54:69:b9:14:5c:35:97:4e:b1:
96:56:42:67:0f:b2:57:48:6c:75:38:5d:77:f4:21:
20:bd:7f:92:98:95:f6:af:09:04:3f:5b:6d:ee:31:
f5:db:5b:8e:df:11:db:76:53:82:1a:cb:11:97:3b:
ff:b5:ed:89:a7:53:8c:04:84:3a:8b:39:12:84:dd:
6d:0d:d1:8e:b8:20:f5:d9:f2:c7:fb:bc:6b:f3:52:
7a:72:3f:12:72:33:6b:81:da:e3:e4:f4:90:f0:8f:
c7:47:00:1e:bf:09:0f:95:26:4d:84:20:96:3d:bc:
9b:f1:1e:a2:c5:f1:bb:85:b0:23:3b:37:2c:3d:73:
d0:c2:4b:84:e7:83:55:1a:ef:9e:66:65:25:73:40:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:83:45:41:E8:DE:52:16:C1:C2:F6:A6:D5:79:15:BC:B5:69:06:91
X509v3 Authority Key Identifier:
keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/f4NFQejeUhbBwvam1XkVvLVpBpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.163.0/24
Signature Algorithm: sha256WithRSAEncryption
62:20:48:02:58:e6:e5:80:53:25:c5:98:d4:7a:64:76:a7:33:
68:0a:30:c5:c8:0d:f8:ea:d9:de:bd:07:60:97:55:4b:4a:8f:
19:ef:83:ab:19:f3:71:9c:f8:e2:b9:53:6e:bd:9a:37:d6:1f:
d2:d4:43:a0:d3:bb:22:10:93:3c:97:07:e4:0f:ab:e2:e0:95:
3b:bb:81:57:b5:60:df:16:cc:b1:50:78:bb:ee:f1:b4:a1:d5:
ea:4d:79:43:f7:ea:b1:7a:3d:70:4e:ed:71:b4:74:f2:1d:47:
49:e9:f1:80:9e:2b:be:e3:6c:9a:b7:66:2c:29:44:7b:c1:89:
cb:7b:57:06:36:d2:5b:fa:a3:3b:cc:d3:7d:59:d3:78:17:d2:
82:1e:ac:de:7a:f1:b4:b1:6f:4f:22:42:14:41:97:8f:91:3d:
3f:fa:77:cd:c4:13:85:b2:48:0d:38:e7:9e:48:57:e0:e9:77:
83:69:2c:63:d3:51:33:13:a2:e5:dd:7c:fe:9c:3a:b5:b1:d7:
9b:27:02:48:17:e9:36:01:77:46:31:c8:1a:3f:65:1d:45:f2:
d2:9c:9a:8d:22:41:cc:f5:94:9a:00:79:f3:dd:c0:6a:97:fd:
4f:a2:72:94:8e:2a:ed:57:15:28:f1:7d:00:73:b1:09:a9:8c:
d2:ec:2b:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZH6NbLVqAPkKJrEsFdw1JCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2U1OTdmN2JhMTRhZGEzNWY0ZjZjNTBmOGE2NTgzYTA0
ZmNjMzUwHhcNMjQwOTE2MDk0MTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjgzNDU0MWU4ZGU1MjE2YzFjMmY2YTZkNTc5MTViY2I1NjkwNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y2TMXFWKBEoC7dx1Srj0225UBnt
OniMu2vhZJdFwlzCQ4I1sUf+4shBQpEHntEl9ryQEjAuEi9Qz8ZSO5JkkgeFy6Yj
0Fg+PtYkVKSuEipZZfKl0jZlAWES1+9YelSRYdoJaIcx5lhE6KXD4kxUabkUXDWX
TrGWVkJnD7JXSGx1OF139CEgvX+SmJX2rwkEP1tt7jH121uO3xHbdlOCGssRlzv/
te2Jp1OMBIQ6izkShN1tDdGOuCD12fLH+7xr81J6cj8ScjNrgdrj5PSQ8I/HRwAe
vwkPlSZNhCCWPbyb8R6ixfG7hbAjOzcsPXPQwkuE54NVGu+eZmUlc0DEmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+DRUHo3lIWwcL2ptV5Fby1aQaRMB8GA1UdIwQY
MBaAFOk+WX97oUraNfT2xQ+KZYOgT8w1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZjM1NjEtMWNlNy00M2UxLTg5ZGIt
MDcwYjQyNTYyNjJiLzEvZjRORlFlamVVaGJCd3ZhbTFYa1Z2TFZwQnBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83ZjM1NjEtMWNlNy00M2UxLTg5ZGItMDcwYjQyNTYyNjJi
LzEvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26jMA0G
CSqGSIb3DQEBCwUAA4IBAQBiIEgCWOblgFMlxZjUemR2pzNoCjDFyA346tnevQdg
l1VLSo8Z74OrGfNxnPjiuVNuvZo31h/S1EOg07siEJM8lwfkD6vi4JU7u4FXtWDf
FsyxUHi77vG0odXqTXlD9+qxej1wTu1xtHTyHUdJ6fGAniu+42yat2YsKUR7wYnL
e1cGNtJb+qM7zNN9WdN4F9KCHqzeevG0sW9PIkIUQZePkT0/+nfNxBOFskgNOOee
SFfg6XeDaSxj01EzE6Ll3Xz+nDq1sdebJwJIF+k2AXdGMcgaP2UdRfLSnJqNIkHM
9ZSaAHnz3cBql/1PonKUjirtVxUo8X0Ac7EJqYzS7CuR
-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org