Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/APi4JXILH1__qLwm6T4O3a9dZq8.roa
File: APi4JXILH1__qLwm6T4O3a9dZq8.roa (raw, json)
Hash identifier: exrBxlpgSodPkTQwJ5u45zGrQtFmq+jY7e/JMe9OmCs=
Subject key identifier: 00:F8:B8:25:72:0B:1F:5F:FF:A8:BC:26:E9:3E:0E:DD:AF:5D:66:AF
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 0189E67C14EA396CC264814F2148FCE3ECBF
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/APi4JXILH1__qLwm6T4O3a9dZq8.roa
Signing time: Fri 11 Aug 2023 21:23:58 +0000
ROA not before: Fri 11 Aug 2023 21:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 79.110.166.0/24 maxlen: 24
79.110.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 18:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e6:7c:14:ea:39:6c:c2:64:81:4f:21:48:fc:e3:ec:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Aug 11 21:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00f8b825720b1f5fffa8bc26e93e0eddaf5d66af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:06:e9:1f:bf:0f:6f:fd:d9:cf:76:7d:d9:
04:bd:13:65:86:8c:94:d5:b3:01:e7:17:61:a0:7a:
f9:74:8d:4f:f1:1d:4f:c4:7b:a1:22:bd:d3:d7:35:
de:55:08:6d:21:f6:3c:10:cb:3b:15:45:18:c7:5a:
57:d4:35:69:11:d9:2a:d1:9f:c3:be:35:64:a2:a5:
a5:7e:93:e6:01:17:f4:14:e0:61:83:88:75:b3:cd:
30:31:f6:29:ae:33:7c:2e:b0:44:f6:c6:fa:8d:85:
2a:7f:12:04:fa:34:b7:68:ed:6a:81:55:16:72:8d:
35:f1:ce:f0:e7:a7:d7:19:03:4a:6b:21:6f:7e:7a:
5e:e3:6e:26:ac:6b:86:ea:66:73:9f:2e:16:a4:98:
e4:3e:af:ae:fe:2b:97:38:13:30:6b:64:e1:c0:93:
eb:67:54:f4:94:5d:51:a7:06:84:e5:77:7b:73:ce:
ed:c5:37:9f:9c:ef:03:a4:51:44:24:13:b8:b5:9e:
d0:cb:2e:52:aa:71:6c:b1:60:02:14:e5:94:4a:9c:
ab:a0:66:7e:d3:35:db:07:fd:94:37:8d:dd:e4:60:
fc:9a:70:fc:7d:f7:6b:68:49:5f:dc:f8:af:0f:bf:
96:b4:eb:25:c2:6a:64:b9:d2:a5:42:7e:75:ef:57:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F8:B8:25:72:0B:1F:5F:FF:A8:BC:26:E9:3E:0E:DD:AF:5D:66:AF
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/APi4JXILH1__qLwm6T4O3a9dZq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.166.0/23
Signature Algorithm: sha256WithRSAEncryption
43:88:78:95:ee:94:07:12:f5:40:ea:79:2f:65:af:fd:de:b8:
96:7d:d2:74:ef:7b:74:dc:82:e7:88:9a:57:0d:ad:07:52:d6:
22:d6:ea:22:96:62:91:f9:59:37:1e:96:d7:dc:38:33:0e:a4:
4d:50:ac:26:3e:0b:28:71:7a:0b:56:ff:63:7a:1c:b8:aa:be:
43:17:e8:74:ad:26:f8:66:60:48:df:e1:95:41:81:b0:3f:97:
12:f0:fa:2b:2f:30:2a:eb:e0:32:c9:cc:51:e5:fe:27:a8:09:
58:10:68:53:97:6d:64:7c:70:e0:97:31:22:b9:cf:4b:4a:6a:
26:24:95:d8:66:e8:e0:0e:90:b9:fe:e0:8e:cc:ee:d7:00:f7:
a8:93:e1:61:c4:97:bd:04:99:6e:8e:ec:45:f7:26:44:45:8e:
5a:77:0f:48:7d:4a:07:fd:71:cf:62:e3:58:e0:d3:5a:d9:3c:
a9:3a:85:cf:0e:7e:19:8d:63:49:0f:55:43:f2:fb:9e:ff:5c:
99:01:eb:07:09:34:64:2e:d0:f0:99:99:0c:f1:6f:43:50:02:
a1:c9:fe:73:bc:26:fd:f0:8c:87:ee:51:62:54:fd:d5:59:fc:
a6:39:81:44:9e:36:01:8f:9e:c8:a3:18:11:ad:ad:ef:5d:a7:
25:36:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:44 2024 by rpki-client on console-ams.rpki-client.org