Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/NDQ8t2CcksQCJlhi6Gv-Khc7zzk.roa
File: NDQ8t2CcksQCJlhi6Gv-Khc7zzk.roa (raw, json)
Hash identifier: puWnn6o7RRz2Ev87aTFaV07uxVNIyRQTz/igU4DoBOQ=
Subject key identifier: 34:34:3C:B7:60:9C:92:C4:02:26:58:62:E8:6B:FE:2A:17:3B:CF:39
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 018A996076255CA9268FC188C4751439A62C
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/NDQ8t2CcksQCJlhi6Gv-Khc7zzk.roa
Signing time: Fri 15 Sep 2023 15:05:50 +0000
ROA not before: Fri 15 Sep 2023 15:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39600
IP address blocks: 79.110.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:60:76:25:5c:a9:26:8f:c1:88:c4:75:14:39:a6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Sep 15 15:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34343cb7609c92c402265862e86bfe2a173bcf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:33:2b:5a:81:12:d7:4d:77:89:e0:e3:ff:
8e:dd:a6:8b:83:32:ae:1b:4f:a5:cf:33:96:6c:88:
91:d2:6c:e7:56:ee:d7:ba:96:9b:2f:e9:3e:39:c7:
6c:d5:ee:21:7d:4c:f0:3b:db:55:f7:8f:f2:bc:bc:
14:a2:d5:ac:0b:d5:6e:42:db:c0:df:2c:ad:d9:ba:
fb:78:a5:c0:37:94:62:42:73:78:4d:b4:59:b1:d9:
18:a8:87:1d:f7:45:74:59:5a:f6:93:43:b5:34:2f:
bc:6e:db:25:ba:7e:8e:a1:c1:12:fb:f9:7d:f9:a4:
ef:4c:ac:17:17:aa:ca:6e:b7:17:99:15:16:1a:70:
c3:dc:ce:74:3f:80:4a:ef:29:bc:9b:b3:19:37:02:
6f:21:5f:61:04:6e:d4:b2:c4:70:37:b0:11:8f:c6:
a5:61:2f:ae:c3:f7:d6:c6:96:18:7a:b8:f9:c4:ec:
d9:d1:de:53:ea:26:2e:76:9d:06:00:33:cb:2b:a5:
6f:98:fa:f7:14:9b:8d:0c:3e:92:ae:10:d1:98:5e:
84:c3:e9:6a:7f:cc:a7:3f:6e:d1:6f:8d:e9:e0:df:
68:e3:b0:18:63:23:69:81:21:54:9b:f2:7e:0c:36:
f8:89:f4:95:3b:6d:57:df:22:78:7d:ee:8d:43:88:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:34:3C:B7:60:9C:92:C4:02:26:58:62:E8:6B:FE:2A:17:3B:CF:39
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/NDQ8t2CcksQCJlhi6Gv-Khc7zzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:46:c2:67:51:df:77:61:92:c1:23:2c:b9:88:c2:b5:ea:30:
53:cd:e3:06:ac:a5:26:d6:27:ab:b3:09:74:f2:fd:95:6b:d8:
52:6a:67:63:95:00:4e:7f:22:4e:3e:2d:c5:02:13:d5:5f:ec:
84:1c:8d:b1:fd:1e:32:8b:8c:62:d7:55:aa:f9:26:ff:04:89:
a6:ad:48:51:78:c5:c5:93:e3:f5:70:56:2e:bf:1b:8b:0f:d4:
3b:46:d2:f2:00:16:6a:9d:4d:40:cc:c1:e1:9b:60:ca:ee:40:
e9:94:96:b7:50:e5:47:98:3f:b4:ee:b9:28:d9:7a:d7:11:b4:
63:cc:62:3e:7a:1b:fd:c8:50:64:66:79:1a:1c:f0:f4:a3:20:
ac:cd:dc:8b:8d:96:ac:9f:a4:0f:a9:65:76:71:9f:9b:db:71:
63:c9:54:82:bf:5e:39:7b:68:c6:03:84:a8:02:d9:bf:9a:36:
b8:75:34:a6:18:9b:e9:64:66:2e:b0:86:30:23:21:ac:7b:8c:
56:87:89:04:8a:17:99:89:63:ec:29:e2:ed:cb:01:0a:bf:a9:
44:b5:c1:3a:29:c7:7d:e1:57:a8:0a:f1:86:d7:d6:4b:13:d9:
cf:1b:96:d4:49:c3:ec:d9:a2:ef:23:4d:cf:db:15:49:cd:3a:
f1:ca:d3:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqZYHYlXKkmj8GIxHUUOaYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjMwOTE1MTUwNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDM0M2NiNzYwOWM5MmM0MDIyNjU4NjJlODZiZmUyYTE3M2JjZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxgzK1qBEtdNd4ng4/+O3aaLgzKu
G0+lzzOWbIiR0mznVu7XupabL+k+Ocds1e4hfUzwO9tV94/yvLwUotWsC9VuQtvA
3yyt2br7eKXAN5RiQnN4TbRZsdkYqIcd90V0WVr2k0O1NC+8btslun6OocES+/l9
+aTvTKwXF6rKbrcXmRUWGnDD3M50P4BK7ym8m7MZNwJvIV9hBG7UssRwN7ARj8al
YS+uw/fWxpYYerj5xOzZ0d5T6iYudp0GADPLK6VvmPr3FJuNDD6SrhDRmF6Ew+lq
f8ynP27Rb43p4N9o47AYYyNpgSFUm/J+DDb4ifSVO21X3yJ4fe6NQ4jVSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQ0PLdgnJLEAiZYYuhr/ioXO885MB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvTkRROHQyQ2Nrc1FDSmxoaTZHdi1LaGM3enprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26nMA0G
CSqGSIb3DQEBCwUAA4IBAQAaRsJnUd93YZLBIyy5iMK16jBTzeMGrKUm1ierswl0
8v2Va9hSamdjlQBOfyJOPi3FAhPVX+yEHI2x/R4yi4xi11Wq+Sb/BImmrUhReMXF
k+P1cFYuvxuLD9Q7RtLyABZqnU1AzMHhm2DK7kDplJa3UOVHmD+07rko2XrXEbRj
zGI+ehv9yFBkZnkaHPD0oyCszdyLjZasn6QPqWV2cZ+b23FjyVSCv145e2jGA4So
Atm/mja4dTSmGJvpZGYusIYwIyGse4xWh4kEiheZiWPsKeLtywEKv6lEtcE6Kcd9
4VeoCvGG19ZLE9nPG5bUScPs2aLvI03P2xVJzTrxytNA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:44 2024 by rpki-client on console-ams.rpki-client.org