Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2ZkM1CgSS_oRKoMdZvQ1He0Kqv0.roa
File: 2ZkM1CgSS_oRKoMdZvQ1He0Kqv0.roa (raw, json)
Hash identifier: tsOZtA2tWEm2uRAftsaplFU7qO8xxdtNOlpqkcwoQlk=
Subject key identifier: D9:99:0C:D4:28:12:4B:FA:11:2A:83:1D:66:F4:35:1D:ED:0A:AA:FD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018894DA4420297323CC9155B238B2A70933
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2ZkM1CgSS_oRKoMdZvQ1He0Kqv0.roa
Signing time: Wed 07 Jun 2023 07:55:12 +0000
ROA not before: Wed 07 Jun 2023 07:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 89.36.140.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 17:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:da:44:20:29:73:23:cc:91:55:b2:38:b2:a7:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 7 07:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9990cd428124bfa112a831d66f4351ded0aaafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:e5:be:30:c0:f4:a4:f9:9e:8b:25:79:18:
22:ec:6c:47:d9:a0:f8:f2:21:cf:2c:c2:73:d1:dd:
7d:69:9e:c0:06:72:77:7e:6b:ad:b2:2c:fd:78:08:
2d:a2:22:42:1d:5d:e5:e1:44:b0:e4:b4:56:cc:ec:
7b:e1:49:07:9b:b9:34:a3:05:63:ff:2c:a5:e1:dc:
01:ba:2c:41:aa:2f:2f:2a:2f:93:67:1c:79:dd:ed:
b3:ca:fd:56:c7:4c:bc:64:65:8b:22:3f:59:89:6f:
e8:5d:07:16:3e:26:87:c3:28:35:eb:e2:6b:19:67:
fc:09:a0:7f:b4:04:29:33:d6:96:48:cf:4f:a6:5c:
f5:e0:58:26:da:99:af:0d:26:52:5c:42:9d:0d:02:
68:51:6c:39:7c:43:46:7b:ba:9b:c2:11:1a:fd:9e:
23:7b:e6:e8:cb:1f:f4:54:25:de:bc:9a:cf:b4:53:
f0:5f:d0:85:f2:c0:6a:f2:65:32:ea:6d:22:e4:93:
75:9c:76:18:28:63:da:92:81:31:93:fa:fe:75:d6:
d5:1a:c5:6e:94:95:3f:6a:ee:42:4a:dc:0a:fa:99:
83:9f:37:2d:6e:b3:3d:24:54:e8:1b:58:ed:9b:f8:
26:d1:7c:7e:9c:e9:2f:8f:92:e4:b7:5e:da:6e:1a:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:99:0C:D4:28:12:4B:FA:11:2A:83:1D:66:F4:35:1D:ED:0A:AA:FD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2ZkM1CgSS_oRKoMdZvQ1He0Kqv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
86.105.4.0/24
89.36.140.0/24
89.40.36.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f2:a5:92:9a:5c:cc:f2:79:fc:68:db:f8:9a:c3:2b:c6:c3:
3d:b6:bd:02:cd:a9:b7:82:90:0b:7a:c8:64:bd:39:4a:d1:67:
39:86:df:eb:86:10:9f:54:2d:ff:da:93:02:ca:f3:77:65:73:
ce:8e:45:16:8d:7f:c0:01:ec:d9:3d:3f:a0:65:e2:a7:5b:36:
3f:85:ce:a3:42:55:da:82:36:9d:6a:df:cc:b2:8d:47:35:ed:
f8:5c:47:97:75:b8:f1:ec:df:86:ed:f0:fd:5d:98:3b:65:f1:
62:ca:0e:8a:73:16:7d:23:fc:4a:e3:a8:03:25:ad:89:db:24:
c2:2f:d8:b5:1a:7c:c7:50:4d:e3:22:46:56:30:cd:ce:b6:87:
5b:26:e4:db:94:e3:6e:8a:3e:02:10:38:ed:94:a5:23:2e:8e:
0c:20:e4:64:27:2f:f1:0e:86:2a:3b:98:e5:38:1f:b5:05:6c:
22:35:55:04:1f:3b:00:15:ba:27:4e:b1:e7:f9:f3:c0:96:48:
ae:0d:3b:c6:ee:21:48:53:bf:2b:63:98:fd:26:54:a5:64:03:
fc:24:6d:02:72:d3:96:51:f3:90:53:f0:42:6f:68:f1:00:43:
3c:c2:56:52:65:ed:7f:3b:0f:e2:12:1c:63:9f:c1:9d:40:1e:
0c:5c:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org