Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1tkxFgJg3J1W8YeeSa4Mm6x6dBs.roa
File: 1tkxFgJg3J1W8YeeSa4Mm6x6dBs.roa (raw, json)
Hash identifier: wdi+KzcXLE/KhrqOX946sjGe7fXA01qRRtGgl0dW718=
Subject key identifier: D6:D9:31:16:02:60:DC:9D:56:F1:87:9E:49:AE:0C:9B:AC:7A:74:1B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0186A7133A290A4ABBBAD6AFC8797154A101
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1tkxFgJg3J1W8YeeSa4Mm6x6dBs.roa
Signing time: Fri 03 Mar 2023 10:45:00 +0000
ROA not before: Fri 03 Mar 2023 10:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 03:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:13:3a:29:0a:4a:bb:ba:d6:af:c8:79:71:54:a1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 3 10:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6d931160260dc9d56f1879e49ae0c9bac7a741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:45:73:81:ad:18:5c:ab:3f:3f:11:be:2f:
15:26:54:83:5b:ee:d8:29:18:d3:23:f0:0e:a6:58:
7b:2b:4b:2d:6c:9e:9b:39:1b:ef:55:83:da:a0:06:
9e:2a:4e:47:3f:7b:ac:d0:12:08:4f:9c:71:9b:fe:
7b:79:9b:92:64:0d:27:72:82:f0:75:66:5a:9b:4d:
95:1a:fa:24:e7:ee:e1:6f:61:17:eb:a0:03:07:73:
32:90:03:ab:ed:f6:0e:c5:c1:0d:c1:6a:5b:17:8b:
db:70:b5:ef:6e:de:c1:40:43:00:4d:11:35:2b:55:
08:aa:a3:c1:cd:a0:03:24:95:13:cb:3d:c6:f1:92:
3f:a1:83:c3:f9:32:3e:04:10:a7:1d:d4:63:a2:e5:
4f:74:7e:cc:52:0f:ea:18:2c:8a:16:c6:12:ca:14:
09:91:53:1a:15:fa:25:60:6c:5b:d5:c3:ea:df:62:
4a:6b:3b:56:5e:8e:9d:e0:9e:64:25:14:fb:49:df:
61:c9:83:87:24:94:e2:fd:c3:63:fc:37:9a:1a:c4:
bb:45:2b:76:4c:9e:b6:5d:8f:8a:d2:95:ad:df:82:
cb:02:20:aa:1a:00:b1:f2:30:d1:b4:90:02:95:89:
22:91:30:b9:a7:18:63:e9:5b:e5:68:5e:6e:ba:5e:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:31:16:02:60:DC:9D:56:F1:87:9E:49:AE:0C:9B:AC:7A:74:1B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1tkxFgJg3J1W8YeeSa4Mm6x6dBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
89.34.219.0/24
89.35.129.0-89.35.131.255
93.114.244.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
88:46:8d:39:53:c1:94:c5:38:50:a9:5b:77:08:1b:44:3f:4a:
9a:60:4a:d0:51:e1:49:1f:0c:f5:7b:ab:bf:13:fc:7f:c8:2c:
37:1f:a3:33:61:95:48:5e:77:9b:c4:b8:a2:34:bc:27:20:07:
8e:8c:04:78:ff:7f:08:e4:a3:08:17:9a:24:2e:8b:9f:fb:4a:
d2:73:fa:52:63:45:2b:ed:bf:88:a9:1a:ef:02:19:de:a0:c4:
59:04:1c:be:c7:2c:a8:9d:7b:d1:40:ae:9f:d1:a6:11:f1:d8:
db:bd:77:29:37:3c:17:90:48:87:72:15:46:c4:c1:96:f8:c9:
e5:b3:52:c0:2d:96:8e:08:25:cb:25:fd:71:50:29:18:d8:70:
47:64:74:c3:66:83:47:0b:f8:1f:62:3d:93:cf:a8:f9:3b:4f:
1d:ec:c2:07:7c:d2:0a:89:38:06:a5:95:9d:6e:53:03:1a:33:
39:d3:a2:ab:2c:24:fd:ea:30:18:6f:32:4a:f0:5c:ff:09:42:
01:13:68:14:8c:02:67:9e:ed:c7:21:36:bd:5e:41:79:6d:a2:
d8:37:07:15:9a:31:a2:8a:5e:d3:4a:72:7d:c8:95:1c:ad:4c:
98:d9:69:f5:2b:25:6a:53:7e:d5:9b:f7:45:ab:0c:9a:ab:d0:
96:b2:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org