Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Dkzzx4m1bT2z3NL48EESyOtwGw.roa
File: 1Dkzzx4m1bT2z3NL48EESyOtwGw.roa (raw, json)
Hash identifier: iuGzumI4U1BEqQMsuA/d3BoaR/kplHcCBqexybjpaLY=
Subject key identifier: D4:39:33:CF:1E:26:D5:B4:F6:CF:73:4B:E3:C1:04:4B:23:AD:C0:6C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B60AC72064436E9F11779495BF6287FED
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Dkzzx4m1bT2z3NL48EESyOtwGw.roa
Signing time: Tue 24 Oct 2023 07:53:15 +0000
ROA not before: Tue 24 Oct 2023 07:53:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 94.176.215.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 11:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:ac:72:06:44:36:e9:f1:17:79:49:5b:f6:28:7f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 24 07:53:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d43933cf1e26d5b4f6cf734be3c1044b23adc06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:90:21:00:3d:e7:99:e5:b4:54:02:40:f7:
62:a9:d8:a1:ca:74:f8:8f:61:4e:03:87:8e:54:a5:
0a:df:d8:f7:af:42:f4:d9:44:70:95:42:b6:58:c0:
c2:5f:20:c6:d6:82:2b:2b:d0:a6:90:00:72:cd:39:
b1:f8:af:b6:12:c5:4f:32:95:49:de:a5:bb:a6:09:
60:c2:0d:05:7e:32:5b:a4:af:37:3f:70:ea:81:31:
67:b1:0c:b7:e1:28:b2:fa:53:35:91:90:c7:f6:d2:
44:98:23:26:14:6d:77:ec:16:f8:ef:70:af:89:0c:
e7:1e:09:64:cf:83:61:f7:73:64:54:ab:3c:4a:cc:
39:83:c1:6a:c0:c6:77:81:5d:a1:66:bb:f0:44:a7:
59:40:8b:ac:2a:0f:74:b6:c2:8c:a6:05:34:31:68:
9d:d7:57:4a:3e:c3:c0:75:97:7f:44:fa:d7:4f:98:
af:18:b6:33:02:7e:e9:c1:0e:47:47:14:8f:f5:8d:
e7:07:d6:84:b5:39:50:8a:f0:0c:e1:8f:95:3d:98:
6a:ed:3d:35:4b:a2:31:d2:9b:08:ab:4e:ee:b1:a2:
0d:b7:c9:ca:7c:67:58:cf:56:94:12:b3:07:98:a7:
4c:f9:26:df:61:16:99:ab:1f:79:0d:09:4d:b4:30:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:33:CF:1E:26:D5:B4:F6:CF:73:4B:E3:C1:04:4B:23:AD:C0:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Dkzzx4m1bT2z3NL48EESyOtwGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.100.0/24
89.47.55.0/24
93.114.183.0/24
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
35:58:a0:40:ce:ec:90:fd:de:7d:4a:06:2e:ee:8c:c1:d2:c0:
16:7f:32:e9:4a:04:64:d4:e6:76:65:67:e6:23:5c:4f:0f:59:
85:21:b1:06:8e:a1:fc:40:15:f8:e1:2c:c2:dc:80:7d:da:4e:
0f:ac:68:1e:fa:48:a5:d2:21:e8:0f:1a:96:5a:3e:f3:40:58:
7d:57:87:67:b1:c5:31:b9:58:03:d2:1b:ed:44:c6:83:a4:d2:
5f:1b:a8:e5:4b:7a:77:68:37:53:44:6f:92:90:d4:f5:d4:1b:
d6:8d:e4:ad:15:55:88:a9:5f:81:b6:86:5e:f6:8c:30:ab:b4:
4d:e0:0d:92:e8:69:2a:1f:79:b2:27:bd:33:81:17:e3:63:93:
37:0c:19:08:22:ef:50:07:de:f1:7f:7f:11:44:ba:c0:3c:e4:
d2:6d:9d:fb:1f:3f:fc:e6:05:c6:34:47:ee:27:63:e9:47:e1:
4e:9e:9e:ed:23:57:57:95:3a:ea:17:e0:57:d1:0a:d2:1b:9b:
a3:b9:52:49:d5:db:45:9d:f8:eb:bc:4b:21:e7:77:2e:12:93:
0b:5f:aa:aa:3c:64:b9:2a:6c:22:3b:8a:14:f1:26:a9:45:74:
08:64:3f:34:2e:03:5b:df:8f:f7:d3:61:a2:13:bf:ad:8e:ee:
af:67:44:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org