Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3VgWI3gPY4gczdW6mLg1MVqzLt0.roa
File: 3VgWI3gPY4gczdW6mLg1MVqzLt0.roa (raw, json)
Hash identifier: /IEMcS/9PWh/CPOMCnkMEBLNw6UZlXM5XCBJDXofcCI=
Subject key identifier: DD:58:16:23:78:0F:63:88:1C:CD:D5:BA:98:B8:35:31:5A:B3:2E:DD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F7247984A660F91D75015FF6205D674A2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3VgWI3gPY4gczdW6mLg1MVqzLt0.roa
Signing time: Mon 13 May 2024 14:07:25 +0000
ROA not before: Mon 13 May 2024 14:07:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56322
IP address blocks: 86.107.101.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
94.177.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:47:98:4a:66:0f:91:d7:50:15:ff:62:05:d6:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 13 14:07:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd581623780f63881ccdd5ba98b835315ab32edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:cf:a5:1e:eb:07:89:a1:fa:1f:85:7e:3a:
25:7c:78:e1:2b:d0:b2:ac:50:84:f3:5a:bf:04:7c:
01:7e:d6:8b:7c:c5:27:62:9a:4c:34:8b:53:38:62:
77:28:5b:ac:c9:3d:cb:14:82:ec:00:ed:c3:8a:6a:
a3:b0:05:14:ab:09:20:a5:ce:58:ab:ba:4b:1b:00:
8d:4a:51:fc:db:aa:11:36:7d:c9:cc:ad:7e:30:75:
65:6f:ad:c3:cf:66:22:42:bc:e5:51:7d:88:3a:47:
02:53:c2:9c:94:01:24:04:d0:37:b3:04:7f:62:fd:
39:54:f1:29:f3:eb:f9:07:fb:a7:01:f4:22:1c:0d:
69:c2:29:02:0c:1a:34:e3:b5:b5:00:f1:f7:50:8c:
12:95:5f:f9:94:0f:ac:f5:8c:29:5a:4a:b3:e1:e2:
bc:cc:d2:cd:e9:17:0f:c7:f9:77:02:ce:75:29:fe:
83:53:4d:a0:bf:d2:66:9d:2e:80:cc:b4:86:2f:dc:
9d:4b:49:c6:1a:54:8c:24:72:68:c9:55:1a:04:dd:
77:4a:5d:51:34:92:c6:e9:7e:0e:8a:52:ec:05:3e:
7b:90:e4:5c:ec:4a:c9:cf:34:22:ee:e2:e6:29:4a:
d7:4e:a7:91:1a:3d:85:d6:e7:48:13:2a:4f:ae:ed:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:58:16:23:78:0F:63:88:1C:CD:D5:BA:98:B8:35:31:5A:B3:2E:DD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3VgWI3gPY4gczdW6mLg1MVqzLt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.101.0/24
93.113.57.0/24
94.177.51.0/24
94.177.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b2:2f:2b:22:aa:cd:2c:f8:68:bd:22:ad:32:b5:b7:d8:4c:
2d:8d:0b:89:99:b1:24:29:89:18:7c:eb:d2:13:b9:c9:fd:19:
24:9d:e4:da:72:fe:e5:09:49:f7:5c:a1:56:3a:07:6e:75:51:
a8:cd:88:ed:63:5c:aa:7c:46:cf:c1:e7:78:fc:df:7b:00:e1:
6a:8e:54:06:ef:f9:75:c3:f0:21:93:af:fa:cf:43:4c:1e:24:
7e:d6:3f:4e:e1:66:fe:47:07:78:8c:c1:d5:23:b8:ce:84:a8:
de:e7:fc:58:8b:42:95:a8:5d:d5:51:79:ee:4f:71:63:ec:87:
8c:5c:d1:b0:47:80:b4:87:34:12:a7:4d:21:ab:db:1f:59:78:
de:fa:ba:ba:cf:55:cd:dc:4e:b8:29:68:65:61:b9:f2:5f:a7:
2e:41:bd:cc:d0:df:d1:d3:a6:73:11:1f:58:da:c6:f9:13:3d:
a5:f5:60:16:1f:3c:62:18:be:b0:f5:4f:5d:c5:18:4b:01:f1:
6c:f8:1d:84:bd:26:82:c5:f4:53:34:f8:fa:f0:27:1f:a4:fd:
f2:77:d6:93:b7:e4:c1:8b:4d:8c:7d:d1:5a:b0:38:16:14:79:
b6:31:a3:3f:5a:53:04:f9:46:54:2c:42:6a:5e:93:e5:fb:6a:
6a:cd:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org