Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/X7gaeplkx9-Dwj7nD4L7M2AteMw.roa
File: X7gaeplkx9-Dwj7nD4L7M2AteMw.roa (raw, json)
Hash identifier: uVeo+nhQnOfE2G56CoE4z0U8BEy1tkXp0F/NDE+scxA=
Subject key identifier: 5F:B8:1A:7A:99:64:C7:DF:83:C2:3E:E7:0F:82:FB:33:60:2D:78:CC
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01856EA6B7DBFCD6F10C239AA0DAA0ADBA9A
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/X7gaeplkx9-Dwj7nD4L7M2AteMw.roa
Signing time: Sun 01 Jan 2023 18:44:57 +0000
ROA not before: Sun 01 Jan 2023 18:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35348
IP address blocks: 89.44.228.0/24 maxlen: 24
89.44.229.0/24 maxlen: 24
89.44.230.0/24 maxlen: 24
89.36.20.0/24 maxlen: 24
89.36.198.0/24 maxlen: 24
85.204.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 14:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:b7:db:fc:d6:f1:0c:23:9a:a0:da:a0:ad:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 18:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fb81a7a9964c7df83c23ee70f82fb33602d78cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:b9:c4:d5:fd:4c:72:a7:e5:db:78:3d:31:
95:7e:f4:04:fc:6d:8d:6e:f6:b1:14:8f:d7:c0:f1:
69:d9:00:4d:0b:7c:ac:d1:79:36:33:65:e5:1e:19:
8f:2e:b9:fe:dc:a8:13:90:2d:f7:85:c2:54:10:69:
a8:ef:bf:50:40:55:7f:09:fe:0f:27:4c:b6:dc:16:
7b:cb:4b:fb:de:81:23:64:b5:7f:45:d7:88:75:7a:
f1:39:fa:dc:58:a0:a9:cf:ba:d9:e6:e6:27:5c:f1:
59:27:f1:3e:b6:50:0d:f9:4e:4b:8e:79:a0:31:e1:
35:d6:6e:6b:9a:96:59:81:77:4d:0b:3f:71:c7:21:
64:54:26:3d:e6:db:d0:af:d3:6c:6d:ba:bc:80:14:
ee:72:eb:a5:a7:59:5a:53:3d:b6:cf:f7:ef:42:a2:
24:f6:e6:dc:d7:0a:a5:94:b1:1a:78:fd:ae:4c:df:
f7:71:dd:5c:23:23:ff:ad:79:b5:57:fd:25:89:6b:
ca:b1:0d:84:58:45:7e:5a:b7:22:fa:b7:73:f7:22:
60:e2:62:9f:dc:01:a9:b8:28:b9:e1:af:c9:78:79:
08:18:47:7d:6b:69:98:50:94:04:69:68:e5:ea:b9:
d9:d0:7b:e4:de:da:40:33:eb:11:2b:16:9b:e7:32:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:1A:7A:99:64:C7:DF:83:C2:3E:E7:0F:82:FB:33:60:2D:78:CC
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/X7gaeplkx9-Dwj7nD4L7M2AteMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.98.0/24
89.36.20.0/24
89.36.198.0/24
89.44.228.0-89.44.230.255
Signature Algorithm: sha256WithRSAEncryption
b7:a4:e5:8c:b7:07:07:c8:41:a8:9d:6d:94:94:c1:8e:fa:99:
70:eb:88:30:79:41:66:b0:6b:c3:34:f4:ac:fe:97:de:f9:d5:
e6:d3:90:7a:ad:f7:2d:70:bf:75:16:89:e3:7e:0f:a3:1a:33:
50:72:c9:85:e4:23:ae:52:50:e3:77:1c:f1:73:52:02:57:a1:
41:3e:22:08:f5:5b:fe:19:f4:49:3d:c7:52:56:ae:41:6a:1b:
7f:c1:1c:a4:0a:6c:71:e1:87:84:55:be:30:f5:b6:0a:81:5e:
cb:4f:c1:fb:e4:fa:92:71:56:c7:5d:a5:da:3f:89:82:85:38:
3b:90:48:01:70:d1:07:03:a5:f6:fb:de:13:0c:1c:b9:b5:2a:
46:23:25:7e:2a:42:79:72:db:f9:87:f4:11:97:15:8f:8f:90:
6e:1d:eb:34:37:9a:dd:25:ea:3d:fa:af:3c:4f:c9:63:71:a2:
6c:32:4e:28:0e:15:4d:ff:a5:59:cb:ee:d4:dd:6a:80:d7:6d:
65:e4:d7:da:a3:4d:20:b9:aa:b2:79:ed:1a:06:67:d5:71:09:
63:d3:87:79:b6:4a:b6:96:e5:e3:de:15:84:7c:2d:fb:71:d8:
d5:bb:85:49:e6:9e:23:ba:77:51:f7:20:a8:b7:f4:22:05:e9:
3d:8f:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org