Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2otWPZTP__lLAsY78jgMHS50rIg.roa
File: 2otWPZTP__lLAsY78jgMHS50rIg.roa (raw, json)
Hash identifier: uHqZMTzJGKF8gnyFRYsHvC4UA3wX8+ixrT/LDOelnRU=
Subject key identifier: DA:8B:56:3D:94:CF:FF:F9:4B:02:C6:3B:F2:38:0C:1D:2E:74:AC:88
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F0262508C39326EED10EA72C9E89C8537
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2otWPZTP__lLAsY78jgMHS50rIg.roa
Signing time: Sun 21 Apr 2024 20:39:08 +0000
ROA not before: Sun 21 Apr 2024 20:39:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 89.36.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 09:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:02:62:50:8c:39:32:6e:ed:10:ea:72:c9:e8:9c:85:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 21 20:39:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da8b563d94cffff94b02c63bf2380c1d2e74ac88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:e4:fd:9d:d4:7b:ac:bd:63:a9:e9:03:de:
48:de:d6:de:b0:a6:5e:d3:06:6c:ad:12:e7:20:e3:
cb:a5:bf:dd:73:f6:ea:26:40:84:2a:bb:43:05:9d:
a5:20:9c:8e:8b:54:85:b8:d8:e7:48:1b:e3:6e:ea:
06:64:35:84:d2:85:50:29:0b:25:f2:91:3b:a8:0f:
19:da:2e:d8:48:31:f0:36:55:8e:fb:cd:76:de:0a:
0c:31:ee:55:b5:3e:d8:a7:2f:63:db:53:c2:16:ab:
ea:55:bf:f8:a3:06:a5:6c:2e:aa:2e:6c:d1:28:58:
2d:6d:5f:75:77:5c:02:06:bb:ce:05:6b:d1:8a:b6:
dc:62:4d:83:04:d8:cb:76:f4:5e:d4:de:e0:ee:84:
10:04:04:04:01:c6:30:21:14:db:9e:5d:16:6c:10:
6e:c9:7c:5c:97:5e:e5:e0:18:7e:e4:63:90:3a:43:
c2:f0:5f:05:82:f0:ac:88:d2:fe:40:fd:2b:51:4e:
1c:6d:7f:00:68:40:f9:42:82:64:78:95:c5:13:10:
71:b9:ed:a1:9a:cc:ee:2e:42:33:f0:cb:bb:25:58:
d4:11:4b:44:d3:7f:61:3d:a7:d3:a9:71:59:40:b8:
3a:e6:7e:b3:03:df:33:98:a8:b9:dc:78:a6:93:47:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8B:56:3D:94:CF:FF:F9:4B:02:C6:3B:F2:38:0C:1D:2E:74:AC:88
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2otWPZTP__lLAsY78jgMHS50rIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:57:52:b1:8d:09:61:ee:ec:16:0b:8b:d9:fc:4e:92:93:b6:
75:18:bc:c3:45:c1:2c:a0:f6:81:8e:52:c0:1f:17:c7:6b:d9:
b0:17:e5:4c:f3:43:49:6d:1f:94:35:e8:7d:3c:34:ee:f8:6b:
b0:1e:08:7f:ef:14:64:3c:63:49:98:35:14:83:48:5e:6f:a2:
ae:0e:f2:8d:4e:b8:0a:1f:4f:84:3c:83:4e:10:98:fe:e3:05:
9a:55:9c:c1:6f:d8:8d:eb:7c:a3:61:15:54:8f:66:b1:6a:d1:
00:09:e6:47:2c:1b:06:ea:02:9e:6f:6e:14:97:67:3b:8b:02:
8b:04:dd:b0:9d:41:d9:b6:e7:69:08:a8:a4:4e:93:2f:7d:f1:
7b:8d:12:de:c3:2b:e5:a9:60:c4:b4:44:c5:5d:0b:a2:4c:3c:
8b:0b:64:7f:fe:d1:b1:f8:a8:5e:3a:0e:a5:a7:3c:74:b9:88:
c3:fd:88:10:a2:14:9a:7f:f3:e1:30:99:7a:80:a3:13:a5:4b:
c0:27:fb:0e:93:75:47:ad:dc:e4:37:fc:b1:49:c9:09:78:c7:
5a:ea:01:e5:f0:24:11:09:22:c2:58:7b:00:86:31:a7:50:39:
00:a0:cc:4d:49:a2:f1:17:aa:aa:84:6a:3c:16:93:f6:c7:0e:
cc:b7:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:28 2024 by rpki-client on console-fra.rpki-client.org