Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-pG7mjdgrNJmeBee2iVGGYKChwc.roa
File: 1-pG7mjdgrNJmeBee2iVGGYKChwc.roa (raw, json)
Hash identifier: bHwq8bVmupHfpttENQ5f+2r920eUUcTwkxzHs3SmmS4=
Subject key identifier: FA:91:BB:9A:37:60:AC:D2:66:78:17:9E:DA:25:46:19:82:82:87:07
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189F09DC77B958F791109AB55B1884FE8A0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-pG7mjdgrNJmeBee2iVGGYKChwc.roa
Signing time: Sun 13 Aug 2023 20:36:59 +0000
ROA not before: Sun 13 Aug 2023 20:36:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 188.213.0.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 05:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f0:9d:c7:7b:95:8f:79:11:09:ab:55:b1:88:4f:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 13 20:36:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa91bb9a3760acd26678179eda25461982828707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:ff:f9:4e:7a:a2:16:1d:93:8d:2a:aa:c6:
70:31:d8:b5:e8:ef:26:3c:d9:d9:69:a3:75:b5:c0:
e1:b8:f9:d6:cb:35:3d:5c:b2:f9:08:db:a6:b4:59:
7d:59:88:8a:83:ec:f1:ad:48:ee:ed:4a:b7:e5:8f:
57:d7:34:14:fa:82:89:1b:a4:fd:55:2c:ef:ea:da:
47:01:e9:9c:e9:4a:4f:31:09:03:5f:96:27:ad:e5:
b7:c8:99:cf:49:78:8c:65:7c:3b:5b:ed:f8:52:52:
1f:51:9b:52:5d:a1:38:ec:ae:45:c6:da:a4:1d:53:
ca:07:63:a4:d0:0d:22:5c:be:23:36:05:56:1b:2b:
7e:97:01:fb:a2:1e:b8:d0:d0:0a:25:f3:04:2d:31:
4f:39:a6:19:09:5c:9c:b5:60:84:cd:5d:15:90:48:
e2:94:62:e1:ba:67:05:ef:94:86:fb:79:c4:5e:db:
a2:3d:9b:85:38:65:1e:db:6a:2d:f0:a4:21:7d:aa:
9e:05:59:cb:dd:7e:ac:c3:fe:13:fe:a4:d8:73:01:
f8:35:61:64:ea:d4:c6:03:37:0f:cb:3c:50:0e:09:
ab:85:52:95:34:f9:b1:c2:12:3d:2a:dd:1b:dc:5d:
59:02:e2:a5:8a:5a:30:8a:87:07:51:d9:ff:32:2b:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:BB:9A:37:60:AC:D2:66:78:17:9E:DA:25:46:19:82:82:87:07
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-pG7mjdgrNJmeBee2iVGGYKChwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.65.0/24
188.213.0.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5d:7b:f7:97:c8:d9:0e:f8:b4:3d:a3:9b:f0:52:60:50:77:
bb:6a:7e:ba:fb:2e:2d:84:f3:96:fb:5f:c7:58:99:ad:16:47:
6d:fd:16:ed:59:1a:87:be:0c:7b:61:95:b2:ce:0d:62:a0:e6:
7b:ef:7e:b1:c2:43:bf:6b:b4:7f:dc:db:be:99:a4:ae:dd:d4:
2e:1a:05:81:c1:d7:53:94:5e:62:3b:1b:d9:89:61:a0:5b:d1:
ad:db:76:21:f1:a7:b0:8e:0e:12:79:8d:22:75:be:6d:db:0d:
55:0c:c8:ef:6e:e5:e6:3e:5a:09:63:24:e6:de:7f:1e:79:0b:
5a:e2:55:90:68:f6:d1:9f:d4:6a:08:97:0a:01:32:07:cb:5a:
b1:3d:f3:bb:a5:9b:9a:e1:05:00:0b:fe:77:db:cb:4b:53:c7:
6f:d2:51:dd:99:94:ac:af:14:d4:eb:c5:33:3a:3f:b9:95:85:
4c:d4:20:e1:80:cd:05:12:d3:74:b2:b6:cb:4c:49:09:a7:49:
ac:f7:d7:fd:a7:62:29:b9:3b:71:16:5c:9a:1e:3f:c9:49:43:
d6:f1:b5:d2:d8:37:d2:46:2c:af:38:9a:80:50:6e:c6:de:16:
bd:9e:58:bc:7d:de:4d:f5:b4:2e:80:86:d9:c8:d9:a5:17:cf:
a2:4b:bc:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:05 2024 by rpki-client on console-fra.rpki-client.org