Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1_E_Fo4tDYlf0hq-xQReNqLbcBI.roa
File: 1_E_Fo4tDYlf0hq-xQReNqLbcBI.roa (raw, json)
Hash identifier: CWdxSx+t1EoWSGAF2WUwSx/HDPHieCsNddzlWw5UnqE=
Subject key identifier: D7:F1:3F:16:8E:2D:0D:89:5F:D2:1A:BE:C5:04:5E:36:A2:DB:70:12
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185E752FCC763731170D938BF628BDD184E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1_E_Fo4tDYlf0hq-xQReNqLbcBI.roa
Signing time: Wed 25 Jan 2023 05:07:33 +0000
ROA not before: Wed 25 Jan 2023 05:07:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 94.177.145.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Mar 2023 11:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:52:fc:c7:63:73:11:70:d9:38:bf:62:8b:dd:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 25 05:07:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7f13f168e2d0d895fd21abec5045e36a2db7012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:87:07:e9:b8:35:08:da:61:7d:91:c2:29:
3e:86:bf:85:55:2d:e7:30:ff:3e:3a:e7:85:2e:4f:
6a:70:a5:fb:56:75:c8:65:37:05:f9:7a:67:37:c1:
42:15:c3:58:9f:ab:0f:67:8d:ca:17:75:8e:ff:5f:
3b:07:ab:6e:36:cb:f9:d6:0d:0a:3c:49:7e:b8:bf:
5f:9b:24:39:56:ac:9a:06:af:f2:ad:39:da:bf:ed:
3b:ad:f6:90:c4:17:79:41:45:bb:c3:c4:30:a7:64:
8a:e3:0e:b2:f6:0f:46:c8:9c:62:16:74:6d:5b:52:
be:88:ef:b2:1a:ca:bc:64:a0:03:8d:57:1e:55:d6:
09:04:a5:83:f7:73:b6:fb:83:87:1a:cf:98:dc:c7:
6b:77:b6:7f:cb:ee:ab:fd:4c:b3:c3:6a:28:54:5a:
49:05:07:e5:95:85:bc:53:a8:2e:5a:59:a5:f3:f8:
67:bb:19:5a:cc:f2:fb:c4:91:8d:70:a7:e5:22:34:
3d:c1:8b:69:e0:d7:3f:1f:55:85:18:95:0d:cc:0e:
71:a5:06:10:1f:34:b0:6c:04:02:f3:ad:fc:01:ab:
28:f4:f3:f1:09:b0:51:93:dc:c1:3d:1e:f6:5a:8f:
64:a9:d2:d6:5c:6e:4d:c1:55:b9:85:6e:a9:1f:bd:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:3F:16:8E:2D:0D:89:5F:D2:1A:BE:C5:04:5E:36:A2:DB:70:12
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1_E_Fo4tDYlf0hq-xQReNqLbcBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.88.0/24
86.107.168.0/24
93.115.203.0/24
94.177.51.0/24
94.177.145.0/24
176.126.174.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
50:20:ea:c3:ca:30:59:d8:3a:c8:b2:2e:01:f7:4b:99:08:b8:
a2:a6:fc:f4:5c:62:6d:45:83:b2:3c:80:26:b4:8b:ce:e4:ed:
b0:c7:8d:a2:3a:ef:20:07:d5:62:33:08:40:c3:08:a4:8e:13:
91:cd:04:19:20:ce:9f:22:9a:18:59:c8:54:60:80:a1:c6:b0:
b8:e7:7e:b3:66:92:29:77:b9:a5:2a:13:a9:44:b5:a2:12:aa:
c6:9e:c8:2e:b5:43:6e:97:d7:e7:b1:eb:49:69:ad:d5:59:5e:
10:cb:b8:11:28:1c:36:04:6d:e7:63:a7:02:16:d6:99:e2:b1:
19:e4:08:f5:ed:bd:37:63:a9:c8:cb:73:66:19:98:eb:ba:cb:
02:be:61:df:d3:71:e1:81:e2:a7:81:bd:2f:22:7b:9f:10:d7:
2e:f6:70:fc:d9:82:13:ff:6d:33:aa:74:54:bc:62:b3:72:77:
77:ea:e3:32:3f:4a:06:08:cd:21:02:d9:59:84:22:25:29:8d:
56:9a:6b:f9:62:94:ed:00:f4:6e:9f:f9:86:79:76:86:1a:6d:
ef:79:38:c9:28:c3:d3:5b:33:3b:e9:5c:55:dd:b2:a7:24:57:
a1:57:b1:29:7e:b8:45:4d:75:b5:9d:67:9c:10:dd:11:de:ef:
7c:4b:3a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org