Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2NzNd_Yh2XO0ggHo7saucgtxwOs.roa
File: 2NzNd_Yh2XO0ggHo7saucgtxwOs.roa (raw, json)
Hash identifier: a9heAFbJzPr1L1IUjSagekSCqbuYck1+yIjX388oL0o=
Subject key identifier: D8:DC:CD:77:F6:21:D9:73:B4:82:01:E8:EE:C6:AE:72:0B:71:C0:EB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189F98E1EA25F5F76842F7A64AB9E468BD9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2NzNd_Yh2XO0ggHo7saucgtxwOs.roa
Signing time: Tue 15 Aug 2023 14:16:27 +0000
ROA not before: Tue 15 Aug 2023 14:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 92.114.32.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
45.88.14.0/23 maxlen: 23
188.214.107.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 06:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:8e:1e:a2:5f:5f:76:84:2f:7a:64:ab:9e:46:8b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 15 14:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8dccd77f621d973b48201e8eec6ae720b71c0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:09:2b:e6:1f:95:1b:8c:07:e1:f7:4e:8a:
5e:07:8a:c6:47:e9:b1:35:f5:9d:b8:fa:ae:a6:3e:
41:f6:34:fb:2b:c2:6b:83:21:80:58:8c:85:7e:1f:
92:49:d8:20:ae:ab:7f:ae:3a:54:71:4b:3b:0a:8d:
6b:5d:af:b2:b5:f7:29:4b:84:d3:25:92:eb:1a:77:
28:84:2c:71:ee:21:85:66:23:2e:b7:19:86:a5:ef:
64:f6:c1:e6:a5:10:6b:76:80:23:0b:66:09:d2:4c:
d1:23:86:9c:46:53:41:a2:46:50:66:63:0e:64:b9:
df:56:e2:4e:f0:c0:e0:16:3f:e3:7e:7c:60:08:17:
df:23:45:91:94:6c:4e:b9:21:b3:1c:96:5c:65:0d:
ef:6e:5e:ab:bf:3d:66:df:74:db:90:dc:62:86:74:
a3:1a:d3:c1:af:a8:d1:24:e2:50:28:30:e9:82:58:
e1:a2:9f:d4:a2:d5:de:c3:1a:13:ed:25:5f:f3:54:
e0:3c:50:2c:44:4e:8d:f8:10:38:89:f6:57:a7:29:
5b:d3:ba:51:e7:f5:3e:9e:cb:a0:3c:3e:58:39:69:
b0:07:c5:b3:60:1f:00:31:55:d1:95:45:39:ee:59:
a5:7e:f9:e6:d5:e3:fd:d5:29:95:26:02:e9:1d:83:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:CD:77:F6:21:D9:73:B4:82:01:E8:EE:C6:AE:72:0B:71:C0:EB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2NzNd_Yh2XO0ggHo7saucgtxwOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0-45.88.15.255
89.35.130.0/23
92.114.32.0/24
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:85:4b:21:d9:cb:ca:1f:d3:c0:da:1b:12:ac:22:51:4a:77:
4f:4e:89:05:ca:9b:e3:14:28:f6:2b:9c:6c:74:ec:d2:a9:57:
3b:35:46:74:f8:54:fa:68:e1:e0:a4:39:0f:a0:3a:f4:50:b6:
ea:09:3d:01:9f:76:76:b6:d7:d0:86:90:84:90:6e:9d:97:b7:
55:88:ac:b9:4f:45:05:ad:bf:40:24:ab:05:b7:b8:1a:45:dd:
9d:55:90:60:40:3e:de:1c:2e:c5:8e:d6:18:60:ee:00:a0:00:
cb:fa:3c:28:40:d8:55:9c:56:64:bc:f4:9d:4d:cb:97:83:33:
14:9f:60:cf:16:d1:8a:83:22:b0:29:46:89:14:22:42:cd:f9:
04:9a:5e:69:9f:46:2c:ee:e9:06:eb:3e:63:e2:a5:6d:f0:59:
29:2f:27:8c:40:a5:aa:2b:7b:0d:de:0f:ac:8b:e1:71:e1:76:
aa:c4:e1:40:ce:3e:0d:8c:68:e0:03:b5:d6:46:0f:17:5c:5c:
62:a4:27:c7:7a:ad:f8:b7:db:d6:37:ac:21:a7:51:7b:90:d0:
60:fd:bc:97:58:0c:2e:04:c0:af:67:1a:2d:50:a1:9d:ee:15:
c7:c5:6a:14:78:03:93:17:d6:6c:1b:75:23:c2:3d:43:58:6c:
75:03:db:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org