Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1nhu_BtE75mqR_ZAQKUuQgYuBGw.roa
File: 1nhu_BtE75mqR_ZAQKUuQgYuBGw.roa (raw, json)
Hash identifier: syAn/xXHpyB88JGpMFaG27nXoOLmm/rvUvf4CQC47bU=
Subject key identifier: D6:78:6E:FC:1B:44:EF:99:AA:47:F6:40:40:A5:2E:42:06:2E:04:6C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018727278E85DCAB60A1DBCDB4603AAAAF9A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1nhu_BtE75mqR_ZAQKUuQgYuBGw.roa
Signing time: Tue 28 Mar 2023 07:38:36 +0000
ROA not before: Tue 28 Mar 2023 07:38:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 86.107.50.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 03:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:27:8e:85:dc:ab:60:a1:db:cd:b4:60:3a:aa:af:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 28 07:38:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6786efc1b44ef99aa47f64040a52e42062e046c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:0e:cb:6f:6a:8f:7b:22:de:b4:ca:7e:85:
96:27:e8:05:66:0c:90:2b:8b:00:8a:c3:4d:05:cb:
c3:68:70:d9:1b:20:87:7a:78:bc:c0:93:1c:a3:c0:
74:f5:e1:31:c3:a2:56:00:2e:54:85:fd:46:34:85:
4c:18:5a:61:8f:ff:8a:b7:d7:60:0c:1c:d2:7c:44:
39:14:b6:c1:4b:de:13:6d:4d:25:03:76:74:3c:9f:
b0:e2:5b:11:ca:86:a0:60:39:85:54:a8:0a:3c:aa:
76:19:48:0b:59:40:a6:00:72:84:b2:7c:48:5b:f8:
f2:f7:5e:c7:ad:1a:9e:15:f8:e7:fb:af:cf:ec:c8:
7a:42:15:2e:3a:37:71:d1:47:b4:d1:9d:3e:59:89:
fa:49:78:5d:a5:00:18:2d:e4:7c:72:12:66:33:7c:
79:69:07:ee:9c:34:06:4f:d4:7b:da:e1:3b:18:f7:
3d:9a:f1:cb:82:c4:57:7c:5b:32:6d:20:59:a8:42:
2a:86:ec:4f:23:40:b1:10:a4:5e:b5:a5:07:26:97:
c8:69:d7:15:fe:4d:d8:4e:37:01:5a:b1:94:8c:4a:
2e:79:47:bd:9d:c1:5d:ef:a3:a6:d3:61:fd:f1:6e:
59:50:06:17:bf:3a:e6:fa:4e:ae:0b:a9:f1:30:f9:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:78:6E:FC:1B:44:EF:99:AA:47:F6:40:40:A5:2E:42:06:2E:04:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1nhu_BtE75mqR_ZAQKUuQgYuBGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.50.0/24
86.107.168.0/24
89.37.192.0/24
93.115.203.0/24
176.126.174.0/24
188.213.216.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
44:69:6b:69:2f:b8:98:30:1a:fa:0b:4f:cd:dc:cb:b4:78:c4:
3a:34:45:09:4a:39:28:d2:fc:0a:cc:35:37:4c:f4:f4:45:6a:
f6:ed:0d:cd:01:18:68:b5:d0:08:41:08:b4:e5:39:b7:5d:5d:
74:77:0c:f1:ee:ca:39:95:8a:70:2e:c7:ad:d2:4c:f0:59:3a:
a2:1d:62:85:c7:c8:75:9f:99:30:51:35:97:ef:72:bd:2e:cc:
95:4c:7b:3d:00:5d:21:e7:c2:bc:e0:a6:c7:1f:19:e0:33:c0:
27:68:e3:c6:74:6d:81:86:7e:5d:95:4c:44:d4:22:8a:bc:29:
78:90:a8:9e:4e:65:dc:cb:b7:dc:11:3f:2b:07:22:87:11:0e:
22:16:44:c9:9a:f5:47:2a:ec:8c:4a:94:15:12:10:1f:be:dd:
50:4b:ba:4f:c0:2f:09:ac:9a:72:1c:8c:a9:0a:54:3d:8e:b8:
59:b8:b8:03:0a:f4:06:f8:f4:13:c8:2e:b3:7c:00:73:5e:a3:
d8:dc:02:4d:f0:b9:24:ed:4c:65:c0:45:be:f0:58:09:bd:16:
5d:f1:18:3e:df:37:72:b8:a1:57:08:bf:54:34:f7:62:53:b7:
89:a4:dc:e9:22:44:0a:40:83:9f:b9:c5:78:18:67:f1:5e:55:
66:f8:46:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org