Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/09v-0nEzXQF3-oq07kSfBFX6-fQ.roa
File: 09v-0nEzXQF3-oq07kSfBFX6-fQ.roa (raw, json)
Hash identifier: 5JUjry7sHZsvRTHTscaotzOIMKRmj3a3ShSv+khc5MA=
Subject key identifier: D3:DB:FE:D2:71:33:5D:01:77:FA:8A:B4:EE:44:9F:04:55:FA:F9:F4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187517C03C5A2AEAEEDF9D17EE2D7983FC3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/09v-0nEzXQF3-oq07kSfBFX6-fQ.roa
Signing time: Wed 05 Apr 2023 12:54:54 +0000
ROA not before: Wed 05 Apr 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 16:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:7c:03:c5:a2:ae:ae:ed:f9:d1:7e:e2:d7:98:3f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 5 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3dbfed271335d0177fa8ab4ee449f0455faf9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:7b:83:b7:53:f1:e7:c5:04:a8:74:a4:4e:
3e:02:72:1e:69:5c:c5:1e:71:ee:15:d0:82:7e:d5:
c4:a6:ed:f3:4f:4c:16:09:7b:dd:f7:7d:f7:a0:e0:
16:6f:e4:ef:bb:e7:4a:2c:42:ee:5c:98:d8:98:b9:
57:0c:00:8a:3f:1d:21:eb:c1:f8:3a:63:91:0b:ff:
77:10:8e:45:34:32:98:44:26:a6:4f:29:28:a7:c0:
4c:4f:9b:b3:06:77:13:e0:f6:1a:b6:4e:d5:8d:48:
3a:d3:1e:be:7e:d6:e3:11:d3:ee:5e:60:f6:49:a9:
91:b3:e0:a5:79:5d:ac:05:83:5b:be:c8:05:44:0b:
3b:9f:cc:05:92:d1:04:b1:ae:0c:15:51:fb:14:27:
f9:93:13:7f:b8:3a:cf:00:c1:8c:5a:44:01:0e:5d:
93:2f:d8:7f:7b:2a:07:e8:0c:59:4f:68:95:c1:08:
d1:4b:d0:a2:4e:86:e7:2f:d1:01:8f:4b:cc:2f:77:
e3:7f:66:77:8c:f5:cb:93:9c:1e:1d:9b:97:33:04:
d2:52:a8:04:2e:32:44:c7:ca:9f:30:0f:31:e6:88:
30:78:f2:60:12:cd:d8:4a:26:5c:be:1b:14:8e:11:
6f:85:2d:98:69:2f:9f:ff:16:e6:75:f1:28:79:30:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DB:FE:D2:71:33:5D:01:77:FA:8A:B4:EE:44:9F:04:55:FA:F9:F4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/09v-0nEzXQF3-oq07kSfBFX6-fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
77.81.100.0/24
86.107.51.0/24
86.107.100.0/24
89.34.202.0/24
89.34.219.0/24
89.35.119.0/24
89.35.129.0-89.35.131.255
89.40.70.0/24
89.45.35.0/24
89.47.55.0/24
94.198.171.0/24
176.223.188.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:3d:90:ee:eb:ae:73:55:9a:a4:79:85:ff:75:d9:86:7d:97:
28:ff:51:d6:cf:2e:94:25:72:91:28:6e:58:1d:79:74:ec:cf:
2b:86:fd:3c:6b:53:8c:67:5b:6b:ad:e6:24:4e:74:9d:fb:bd:
b8:a5:03:a9:84:4d:56:a9:be:ce:d1:df:12:be:e8:fd:d7:60:
b9:86:ba:83:75:3d:1a:4b:27:55:fd:8e:e9:cc:43:cd:45:6a:
62:62:f0:d5:b1:8b:4b:8c:51:3b:86:78:b4:fe:d9:ac:4a:9a:
45:c6:1e:ba:cd:cb:21:17:cb:92:63:39:52:2b:cb:d2:8f:40:
d6:8a:99:61:01:43:10:94:81:7b:18:2f:a4:af:3f:e8:07:47:
86:36:f6:b6:50:16:7e:3d:5c:35:9c:5c:52:12:97:a0:b9:31:
45:5f:ee:15:56:83:e9:6a:4b:01:59:b2:d3:3a:3b:3a:6d:26:
55:9c:4e:fa:b6:a8:5b:b6:ab:39:5c:da:30:1c:ce:d9:17:aa:
17:78:82:d0:24:be:8d:60:53:73:20:6d:06:8f:5e:b0:36:ea:
fe:fe:c6:b0:dc:fa:46:74:67:0b:ae:c7:ce:98:c2:32:6a:1b:
02:a9:76:dc:fb:b4:c0:49:e3:89:9a:74:50:8d:a3:57:da:96:
e6:f9:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org