Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Eo4cxyNv0d4H6YUVAoQ5LfNnv2A.roa
File: Eo4cxyNv0d4H6YUVAoQ5LfNnv2A.roa (raw, json)
Hash identifier: W/YM5cFbHC883/MYJQRObekx5f8eKf5Xw/BTqoMZ3FQ=
Subject key identifier: 12:8E:1C:C7:23:6F:D1:DE:07:E9:85:15:02:84:39:2D:F3:67:BF:60
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018E40FED03020D5821AE0D3F9E9695491DB
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Eo4cxyNv0d4H6YUVAoQ5LfNnv2A.roa
Signing time: Fri 15 Mar 2024 07:23:45 +0000
ROA not before: Fri 15 Mar 2024 07:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31554
IP address blocks: 89.33.5.0/24 maxlen: 24
89.33.248.0/23 maxlen: 23
89.35.160.0/23 maxlen: 23
89.37.156.0/23 maxlen: 23
89.39.110.0/24 maxlen: 24
89.44.214.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 18 Mar 2024 15:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:40:fe:d0:30:20:d5:82:1a:e0:d3:f9:e9:69:54:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 15 07:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128e1cc7236fd1de07e985150284392df367bf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:9d:a9:75:ef:74:04:f8:07:bb:79:f7:0d:
de:7b:ea:6b:60:08:f1:f8:dd:f1:53:28:28:71:f0:
d7:f2:1b:9e:5c:4d:42:5e:a8:ec:59:9d:51:11:59:
e9:2e:59:59:ac:a2:6d:85:ac:84:c4:7f:73:47:0c:
ff:83:28:c9:7f:70:6c:76:80:ea:0c:47:15:59:a0:
49:f6:0e:85:40:63:02:66:61:47:aa:12:a7:ed:39:
d8:b8:cd:45:2e:05:50:33:21:65:70:d0:f3:d9:32:
79:1e:37:ad:b7:a9:9a:da:55:c2:5d:87:42:ff:34:
cd:c6:4b:a9:24:49:29:1d:55:d1:0c:84:5b:e4:7e:
14:fb:b4:7b:a1:ee:d7:44:e4:0b:dd:0e:30:31:a9:
f0:a7:1c:4c:aa:d0:ad:2d:27:12:6b:14:6e:7b:93:
4c:e4:22:cc:80:ab:13:26:91:9b:d2:cd:f6:ea:d7:
23:49:f1:2d:97:19:b9:63:04:69:38:5e:e9:d1:00:
bd:98:1e:6d:5a:94:97:ff:82:e1:d5:2b:85:a3:fc:
7f:f6:6f:85:19:62:d7:6a:59:f0:65:68:8f:ff:85:
c1:09:78:17:e4:93:16:a9:94:46:09:07:9b:10:1f:
d2:3d:a0:64:da:72:c4:d6:45:65:6e:3a:dc:a3:36:
a5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8E:1C:C7:23:6F:D1:DE:07:E9:85:15:02:84:39:2D:F3:67:BF:60
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Eo4cxyNv0d4H6YUVAoQ5LfNnv2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.5.0/24
89.33.248.0/23
89.35.160.0/23
89.37.156.0/23
89.39.110.0/24
89.44.214.0/23
Signature Algorithm: sha256WithRSAEncryption
13:23:6b:cf:53:b8:17:35:4f:fa:6e:ec:cc:a5:13:6a:53:1c:
ba:97:a5:bf:28:4d:b0:d9:75:c5:07:2a:4c:7e:9d:b6:75:5f:
57:92:db:20:09:25:6d:77:16:90:e9:6b:36:74:4f:8e:c4:d3:
27:80:b6:e3:5d:a1:b0:cf:a8:b0:23:69:d3:08:93:b3:19:4d:
f9:90:38:02:40:cb:08:19:63:69:82:a7:02:59:07:73:dc:f9:
ed:8c:5e:c4:6f:a5:7b:c4:8c:41:23:3a:d0:52:01:57:c4:46:
0c:0a:4b:c1:0e:64:3e:94:cb:96:2f:2a:87:50:b9:a7:ee:14:
19:dc:8f:42:19:43:08:3d:56:ad:9e:3a:0e:3a:6a:45:dd:26:
b0:0b:0c:39:81:ee:4b:23:70:1d:56:b7:c8:71:f1:ce:97:57:
78:1e:7a:fa:fa:4d:e5:ed:cd:47:ef:78:54:66:1f:a1:31:65:
0b:5d:a8:cb:42:c6:99:ec:d3:86:85:14:a9:df:49:df:e9:bb:
56:b7:d4:2d:96:a7:76:9f:65:4a:6a:89:a9:a5:89:c4:f6:64:
d3:6c:86:87:07:5c:8b:9e:aa:40:f1:3c:09:1e:97:bd:4c:e7:
f7:e0:c1:43:7d:de:25:cb:57:81:36:d7:7b:e8:7f:5c:a6:cc:
79:5f:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org