Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/R_HnrxQTULTBt3l_JtKJRKF-zAQ.roa
File: R_HnrxQTULTBt3l_JtKJRKF-zAQ.roa (raw, json)
Hash identifier: J1bwPAtjmk1PKCaL/RQAISrOfSh3aJeV3D64fUG5ecU=
Subject key identifier: 47:F1:E7:AF:14:13:50:B4:C1:B7:79:7F:26:D2:89:44:A1:7E:CC:04
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018AD2ABC63C5B3717015B0E1C5BDB465789
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/R_HnrxQTULTBt3l_JtKJRKF-zAQ.roa
Signing time: Tue 26 Sep 2023 18:06:27 +0000
ROA not before: Tue 26 Sep 2023 18:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 79.139.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 16:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:ab:c6:3c:5b:37:17:01:5b:0e:1c:5b:db:46:57:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Sep 26 18:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47f1e7af141350b4c1b7797f26d28944a17ecc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:4c:b2:6f:74:93:fd:ca:e8:5a:6e:8e:9f:
9b:62:a8:b7:eb:4d:cc:99:65:6a:8e:bb:36:fa:7a:
e1:eb:7d:0b:65:79:61:d2:5c:ce:ad:e9:c6:94:a0:
b5:a4:fd:e4:2b:2b:af:f6:a1:8f:57:5a:26:d8:c3:
5c:67:34:7a:25:74:96:76:bb:6b:9d:da:42:75:1c:
d1:f0:31:e8:bf:00:3f:2c:b5:b0:58:9f:a5:84:89:
1a:5e:4a:d0:fb:6d:07:e2:d3:74:34:92:a2:96:ad:
30:46:7a:74:de:ee:47:a8:5f:7e:33:55:a2:85:97:
15:98:44:10:40:c3:52:b9:5f:ac:4f:4d:c2:8f:55:
46:db:ce:77:d3:a4:d7:c3:3e:eb:93:58:e0:31:43:
92:92:56:d8:d6:4b:cc:ba:51:e1:20:74:42:76:59:
58:35:ca:59:41:02:90:4d:f2:d3:fc:b6:bf:f9:f6:
e3:94:7c:96:a7:b5:2c:1b:57:b1:9d:4f:0e:5a:2d:
65:b9:15:18:ae:df:3b:26:23:8f:87:7f:8a:03:4d:
7b:a4:40:62:d5:79:1d:ce:53:17:97:85:45:0d:e6:
d6:f3:84:3c:89:7a:4c:64:3b:fc:2f:c7:8a:33:70:
81:f3:1d:5d:1f:37:d3:61:26:6f:2a:47:90:41:b3:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:E7:AF:14:13:50:B4:C1:B7:79:7F:26:D2:89:44:A1:7E:CC:04
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/R_HnrxQTULTBt3l_JtKJRKF-zAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.86.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b0:2a:b7:f0:e5:83:74:a9:b9:8c:34:05:d1:6d:7b:06:68:
a9:0f:6e:d8:48:72:70:9f:98:83:8d:62:a9:78:01:c7:77:a3:
a7:40:b4:1d:3a:29:fa:b1:b0:58:41:d6:75:42:96:46:2b:20:
bf:3c:1a:02:e0:87:f3:95:bf:50:cc:9f:2d:e5:96:85:55:e8:
90:89:33:52:de:f6:d9:27:a0:07:97:e8:93:45:21:77:21:dd:
9c:51:d4:18:91:8b:ed:8d:ae:46:43:0a:8c:c0:44:73:70:ec:
38:08:f3:dc:aa:7e:b1:d6:19:5f:6d:8a:9e:80:e4:3c:d8:65:
da:b4:6b:b2:ce:f8:a7:2c:c4:20:c7:d1:49:00:83:66:af:59:
ab:b3:aa:20:cd:e5:98:5c:d6:5e:d0:4a:03:a0:48:af:9d:17:
1f:f7:04:6e:c2:bb:a4:6d:e4:fe:a8:52:ee:d5:e3:53:cf:89:
f4:b7:9f:a0:10:fa:12:4d:29:c4:7c:4f:dd:af:18:9d:93:ca:
0b:7e:70:26:44:1c:c7:bf:7d:30:09:ba:09:75:07:a8:e1:7e:
02:8a:ab:9a:50:14:d8:41:a3:d5:b9:a7:5d:e2:82:b8:5b:96:
61:4b:c1:15:2e:8a:c6:28:69:70:b2:a2:35:9e:1e:93:b3:7b:
66:ce:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org