Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/o7FS8SD41i-0QORm0fA6VAsTZ78.roa
File: o7FS8SD41i-0QORm0fA6VAsTZ78.roa (raw, json)
Hash identifier: aikhza/s7Ry9m7bY6/pMvEqWB2u8GD7CySH7tD9SQrw=
Subject key identifier: A3:B1:52:F1:20:F8:D6:2F:B4:40:E4:66:D1:F0:3A:54:0B:13:67:BF
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 018B9049C77ECEE6E65AE9C769FFDA1BC7D1
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/o7FS8SD41i-0QORm0fA6VAsTZ78.roa
Signing time: Thu 02 Nov 2023 13:47:16 +0000
ROA not before: Thu 02 Nov 2023 13:47:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 89.222.36.0/24 maxlen: 24
89.222.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:49:c7:7e:ce:e6:e6:5a:e9:c7:69:ff:da:1b:c7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Nov 2 13:47:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3b152f120f8d62fb440e466d1f03a540b1367bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:86:d3:07:9d:3a:97:1c:97:5c:7d:55:af:
79:0c:5d:8a:11:d5:01:ce:6a:dd:b6:ae:97:d8:c0:
3c:8d:6c:54:28:5a:3d:fb:d0:d4:00:f0:54:b0:89:
0b:84:34:27:1f:99:02:e6:50:92:00:c8:b1:eb:5e:
3d:90:5b:bf:18:ca:a7:33:ac:98:c2:dd:0a:a5:6f:
54:69:66:c3:bf:0d:a1:b4:03:b1:99:b5:ed:85:9c:
79:d3:82:43:59:cd:fa:00:14:a5:0c:2e:ba:76:b9:
9c:8b:f0:75:71:c0:09:bb:38:08:1b:79:64:48:72:
32:3e:90:5a:d4:c0:9e:74:bb:71:f7:ca:0c:87:03:
f6:d5:cc:5c:60:04:bb:ef:92:23:d1:1e:c3:e3:c5:
f0:9a:ed:95:b4:94:02:48:f4:70:dd:91:b8:f2:29:
c3:47:49:c6:94:b2:80:aa:f9:49:aa:61:17:e4:4a:
1a:7c:c2:d1:e1:ef:16:bb:d2:9d:cd:16:f6:57:95:
b1:e6:a9:8c:21:3b:fa:aa:8b:04:f3:11:d3:67:0a:
a4:87:0e:b8:4c:e5:9d:df:b6:ba:98:34:a2:ed:25:
2c:52:d7:4e:cf:99:0d:99:17:fc:e7:c1:07:8f:3f:
a5:6a:24:0b:0b:71:8d:73:23:d8:4f:80:66:e9:99:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B1:52:F1:20:F8:D6:2F:B4:40:E4:66:D1:F0:3A:54:0B:13:67:BF
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/o7FS8SD41i-0QORm0fA6VAsTZ78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.36.0/23
Signature Algorithm: sha256WithRSAEncryption
77:a7:4e:de:8b:47:ac:39:43:44:3f:e6:c8:cf:c9:ab:74:1b:
68:62:e5:fd:6d:db:0d:ff:d7:c3:29:4c:28:9b:da:82:68:f3:
67:19:07:f7:a1:04:68:16:c5:61:7f:bd:80:fb:2e:97:79:f3:
9f:b5:62:bf:fb:76:5b:52:d6:d4:1b:85:98:a3:02:5c:85:1a:
d1:b2:97:7d:c8:1e:f3:54:72:81:0e:86:9e:bb:91:66:bb:d0:
46:1c:35:33:b6:96:b6:1c:e3:6c:76:49:85:ba:f1:b9:b9:c5:
00:09:6a:54:07:37:cd:9b:c7:05:e6:83:0b:06:c4:67:3c:4f:
dc:6f:00:95:73:f8:1f:98:85:8e:10:51:3c:37:83:61:48:76:
bf:b7:59:ed:c0:7a:5a:6c:fd:6b:59:05:3d:af:f9:7e:28:1b:
f7:95:ac:95:c8:45:f0:e6:a6:13:14:8a:a6:2e:1e:96:70:bd:
e8:28:2b:7e:3c:0f:76:e6:f5:22:8e:ad:dc:fc:14:80:27:d7:
b3:ad:cf:25:c0:93:f2:e4:ec:3a:3a:bd:92:14:ca:f1:bf:a9:
95:2d:ed:15:81:2c:e8:38:65:30:fb:eb:d8:e4:9e:9a:c6:80:
1e:ec:14:3e:2a:95:0d:88:68:ff:2f:37:c8:a6:eb:98:69:ac:
fa:ed:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:51 2024 by rpki-client on console-ams.rpki-client.org