Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2h_ToYLYDZ2Jl5ZzDEeShiY86B0.roa
File: 2h_ToYLYDZ2Jl5ZzDEeShiY86B0.roa (raw, json)
Hash identifier: k/CafeGbybfe0Z9sIf+/wqic6xJCJ3g0F2I+A3slczY=
Subject key identifier: DA:1F:D3:A1:82:D8:0D:9D:89:97:96:73:0C:47:92:86:26:3C:E8:1D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01892FC3D709CA2A491642586D86E8C7D8ED
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2h_ToYLYDZ2Jl5ZzDEeShiY86B0.roa
Signing time: Fri 07 Jul 2023 09:51:50 +0000
ROA not before: Fri 07 Jul 2023 09:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 86.107.50.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 10:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:c3:d7:09:ca:2a:49:16:42:58:6d:86:e8:c7:d8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 7 09:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da1fd3a182d80d9d899796730c479286263ce81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:3f:8f:45:53:47:73:e2:c1:96:fe:9f:90:
dd:97:2c:59:d1:d1:c2:dc:d8:ad:93:e9:59:d4:20:
f8:66:2d:57:c7:49:05:75:a8:59:ab:93:d7:35:cb:
56:1a:73:45:1d:2d:8d:34:15:25:b2:ae:04:3e:c8:
62:4d:6d:87:ea:bf:be:25:bb:00:3e:06:ec:ad:51:
a9:93:17:65:e4:11:53:a9:73:a6:83:03:cb:51:2c:
22:d3:0f:dd:64:52:93:18:c3:fa:bd:54:a8:fd:76:
bd:a3:59:e1:6a:2d:56:e1:d7:2d:dc:94:d5:98:20:
31:15:97:c6:03:7d:3a:d6:c1:23:92:fe:89:11:3f:
58:8b:4f:31:9b:01:5b:99:85:5f:a9:ae:b7:ad:7e:
2a:ad:08:3b:7c:87:73:11:22:63:a9:c5:f4:00:1a:
11:64:ef:90:3c:3e:47:55:5a:21:53:3f:d9:63:59:
46:2f:f1:f2:17:ea:c0:ae:c5:ea:b8:07:fd:f8:c7:
bf:6c:e9:0b:11:c7:a2:49:7d:c5:7a:d9:d9:57:a8:
62:0c:79:24:f8:bd:b3:b9:e2:bc:bb:8e:41:1d:4b:
b4:aa:0b:0c:13:23:1a:b5:31:c4:2a:fa:86:a9:69:
dd:3f:35:e9:4c:b6:15:f7:26:1f:1e:f4:34:3b:cd:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1F:D3:A1:82:D8:0D:9D:89:97:96:73:0C:47:92:86:26:3C:E8:1D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2h_ToYLYDZ2Jl5ZzDEeShiY86B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
86.107.50.0/24
93.115.203.0/24
94.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:30:b7:5e:de:ac:5a:30:dd:b7:ed:37:16:a3:89:a5:a7:4a:
c2:54:eb:f2:16:9f:71:fd:91:67:1c:62:35:5d:2c:f8:32:27:
57:f9:63:77:ea:ec:ef:92:8c:10:f2:af:91:af:22:63:6d:e1:
82:a9:d5:f6:9e:c9:0d:b4:df:81:e5:0e:23:50:95:81:00:bd:
e8:c2:04:01:79:9f:04:98:8e:48:89:53:36:a8:db:a5:f1:d3:
02:66:bb:8b:18:be:c6:b5:b6:9c:da:92:54:30:b1:c8:fa:d2:
25:be:d1:db:82:38:ea:00:01:62:a9:34:f8:d1:82:59:7d:10:
3e:38:47:a4:11:c4:58:25:fa:2e:86:82:57:e1:bc:19:a3:14:
df:84:b1:5f:67:7a:d8:d2:aa:e4:5f:4a:b2:d5:c3:ad:79:42:
3f:0a:82:dc:bc:34:7b:b0:d6:60:6f:0d:7d:f3:db:ab:ab:05:
c5:4c:f2:6a:ff:22:da:6a:2a:fb:70:df:46:7b:02:3a:d1:a3:
7f:0c:0b:d1:41:0c:1a:ba:df:f5:b7:92:99:f8:3a:b1:8f:88:
9e:a6:f7:44:61:8c:ce:0d:34:e1:3e:80:a7:89:e6:a7:25:a6:
08:3c:5c:6b:a7:2f:bc:3c:19:04:1d:f2:5a:53:65:cf:61:4f:
ba:40:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org