Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3WaMgV4i_-e69fJoAkN42qFgx8w.roa
File: 3WaMgV4i_-e69fJoAkN42qFgx8w.roa (raw, json)
Hash identifier: g0b7QtF62yM30Nu0zufkB1Gog2gSuUAxOfsk06bm0+Y=
Subject key identifier: DD:66:8C:81:5E:22:FF:E7:BA:F5:F2:68:02:43:78:DA:A1:60:C7:CC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018BCEF09DE1987783A4429C2CD122D7A9F2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3WaMgV4i_-e69fJoAkN42qFgx8w.roa
Signing time: Tue 14 Nov 2023 17:45:57 +0000
ROA not before: Tue 14 Nov 2023 17:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Nov 2023 07:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:f0:9d:e1:98:77:83:a4:42:9c:2c:d1:22:d7:a9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 14 17:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd668c815e22ffe7baf5f268024378daa160c7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:01:ee:b1:b3:7a:ac:20:18:8f:ab:59:b4:
5b:ed:93:98:e8:0d:37:65:a4:ae:44:59:30:3c:5b:
e9:37:63:46:9a:d1:11:54:71:36:f3:f3:49:ac:5d:
8f:23:55:ab:76:6a:24:d0:d2:c5:5a:85:03:61:87:
7f:ad:0d:1a:0c:d7:f3:2d:c7:38:00:30:9b:c4:b7:
5a:c2:70:d6:a8:b2:6c:3e:db:95:85:c1:52:fe:20:
bd:7b:b2:92:37:4d:0f:24:01:bd:94:ee:91:b5:8a:
1e:57:4f:ec:f1:8f:87:9c:d9:f3:63:d2:15:3d:e7:
29:db:3b:ee:4b:21:89:82:dc:eb:72:7c:07:7e:d6:
4b:03:0f:f0:4c:2c:24:c8:fe:20:51:a7:02:22:aa:
a1:78:32:66:39:ca:36:1e:c6:af:65:2e:8e:60:36:
f9:eb:31:f1:b1:26:d1:46:99:7c:8a:8d:b8:38:1d:
54:6b:a9:59:d7:86:cf:ea:19:97:f9:1c:52:3f:26:
a5:a6:6c:be:98:f9:97:78:eb:93:d0:db:ae:c7:2d:
0c:c4:db:59:46:c3:8d:5f:57:21:88:33:42:f7:f3:
3d:72:c3:be:04:b7:ff:a9:8e:79:58:71:a4:b6:2e:
3f:6a:7e:f0:a8:6c:c5:2f:78:5a:69:7f:db:32:ad:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:8C:81:5E:22:FF:E7:BA:F5:F2:68:02:43:78:DA:A1:60:C7:CC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3WaMgV4i_-e69fJoAkN42qFgx8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
34:48:dd:6a:da:f0:52:56:5b:dc:38:11:05:29:66:3d:cc:6e:
9f:63:e3:0c:56:63:cc:c2:5d:4c:26:71:a7:41:4e:25:86:46:
53:8f:18:f6:1c:23:91:ad:cb:25:8b:d4:ab:23:28:38:f1:cb:
5b:c2:86:e7:38:b1:5e:6b:2f:63:a3:b7:38:92:87:7d:31:4b:
02:be:27:b8:09:0a:58:9e:63:11:d9:d8:de:e9:51:d5:7f:cd:
f8:2d:16:de:8a:83:0a:5b:a2:84:da:57:d5:cd:ec:21:f9:19:
75:81:0e:1c:9e:35:6f:41:4a:7d:aa:20:85:d4:ab:98:fc:18:
63:7a:5c:01:18:b8:84:76:e0:ee:cd:5b:0c:64:75:38:24:96:
fe:2c:a3:f2:d5:e3:2b:03:7e:1e:3f:ab:56:75:d5:7e:f4:05:
40:80:39:ad:70:d8:3b:64:3c:1a:1a:64:1f:e3:ac:55:6f:cc:
ce:22:5a:62:a2:30:47:b7:41:ca:9f:56:7d:d2:75:b9:44:2f:
d8:6a:6b:63:19:ae:79:62:57:3c:99:06:e6:57:9e:87:3c:87:
b0:35:03:ef:0a:0e:7a:6c:0c:fb:e1:9a:be:e5:3b:7d:f5:e2:
46:69:b8:46:a5:b9:e7:6b:f9:0c:cf:66:d8:9b:50:ee:75:3a:
ae:dd:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org