Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/7SO3we_GBdqTgWSZg2xkLLrQFJ0.roa
File: 7SO3we_GBdqTgWSZg2xkLLrQFJ0.roa (raw, json)
Hash identifier: Z6RVVjLU/Mzd9/Zfce6kvIm1qI0hn3lmZyAYl0L3KrA=
Subject key identifier: ED:23:B7:C1:EF:C6:05:DA:93:81:64:99:83:6C:64:2C:BA:D0:14:9D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018ED1E592D30AF6CABC909F729AFDDF84E0
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/7SO3we_GBdqTgWSZg2xkLLrQFJ0.roa
Signing time: Fri 12 Apr 2024 10:41:07 +0000
ROA not before: Fri 12 Apr 2024 10:41:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25531
IP address blocks: 89.17.32.0/24 maxlen: 24
89.17.34.0/24 maxlen: 24
89.17.36.0/22 maxlen: 22
89.17.40.0/22 maxlen: 22
89.17.44.0/24 maxlen: 24
89.17.47.0/24 maxlen: 24
89.17.50.0/24 maxlen: 24
217.15.58.0/23 maxlen: 23
217.15.60.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 15 Apr 2024 10:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:e5:92:d3:0a:f6:ca:bc:90:9f:72:9a:fd:df:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 12 10:41:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed23b7c1efc605da93816499836c642cbad0149d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:28:e8:76:61:6c:0a:84:bb:32:a9:ea:2a:
96:41:dd:1e:1e:cb:8a:26:b7:43:67:ee:b8:b2:03:
4a:8b:cd:0a:52:48:8c:56:f4:fa:2f:72:1a:5b:e5:
71:65:e9:a0:af:49:fe:9f:a5:f5:c1:af:7e:aa:20:
87:75:21:b7:2c:3f:46:05:d3:39:73:da:51:6a:d7:
3d:b5:1b:1e:c8:07:e8:8d:4a:db:d9:d3:f3:d8:c8:
62:9b:49:6e:4a:3a:e3:40:d6:8e:7f:55:c5:39:ce:
b6:70:d4:45:94:26:65:0c:d9:4b:5f:83:b0:3b:4f:
a3:70:53:fc:d8:1e:67:96:a8:59:7e:39:91:f5:a6:
d5:5c:75:05:8f:35:c9:d7:e2:d3:64:fb:f2:b7:c3:
05:a2:d4:bf:44:c5:f9:43:45:5e:77:f1:be:bc:55:
ab:2a:8d:37:a2:50:bf:7d:ef:ba:03:f7:72:e6:c3:
61:c9:66:81:83:0c:c9:a9:4e:9c:1c:e7:78:04:e9:
18:ab:dd:bb:49:4f:bf:39:41:e9:57:b0:4a:7c:b7:
eb:74:4c:af:90:17:d3:2a:f1:49:3f:e4:cd:e5:38:
9a:37:1f:7a:fa:88:81:8c:f1:62:36:04:83:bd:fa:
46:74:8b:e0:9a:72:73:c4:cb:3d:3e:e8:7f:ec:86:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:B7:C1:EF:C6:05:DA:93:81:64:99:83:6C:64:2C:BA:D0:14:9D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/7SO3we_GBdqTgWSZg2xkLLrQFJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.17.32.0/24
89.17.34.0/24
89.17.36.0-89.17.44.255
89.17.47.0/24
89.17.50.0/24
217.15.58.0-217.15.61.255
Signature Algorithm: sha256WithRSAEncryption
1a:74:74:d0:d5:9d:7e:fc:ba:8c:1f:79:15:49:0c:6f:8a:50:
64:db:b5:5a:35:f0:5f:33:c1:80:fd:9c:8e:ae:15:6a:df:7a:
d4:50:ac:96:ad:af:d7:a5:53:ab:e0:3d:0b:ee:e6:2e:0a:dc:
a0:d7:84:ec:78:09:21:c5:d3:1e:e7:d8:10:28:c7:e4:41:6d:
66:bb:c7:04:be:25:79:e4:0e:cb:98:17:bb:82:f6:5e:e8:11:
da:27:7e:30:81:ed:1c:8e:6e:45:79:0a:2a:4d:74:84:57:9f:
eb:0a:14:88:43:4f:ee:5e:33:6a:79:8c:e6:06:e5:86:38:94:
2e:eb:92:57:e1:72:a0:15:dd:e8:69:ca:f8:d5:45:2d:fd:1d:
b9:e0:70:54:96:38:3c:e3:9f:f4:87:c6:17:98:90:ca:82:bc:
5b:b9:26:cd:e9:e3:1e:b6:d4:58:e3:46:a0:f7:45:65:d1:c4:
0d:8d:c1:a7:27:7a:5b:9e:b4:d4:d0:4f:00:ed:f8:28:80:a0:
5c:af:f7:0d:fc:9a:ae:f6:4b:0c:ca:0c:dc:55:f4:aa:90:93:
7e:41:1f:8d:89:64:46:70:08:9f:5f:86:ce:50:0d:5e:e2:37:
16:4f:51:43:9b:1f:b4:c5:0f:d3:e9:c5:12:6c:e8:a5:a7:b8:
00:12:6d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:24 2024 by rpki-client on console-ams.rpki-client.org