Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4fI5RJWlgPfNhwfl2dyEJ9c1jfM.roa
File: 4fI5RJWlgPfNhwfl2dyEJ9c1jfM.roa (raw, json)
Hash identifier: GFyJIPJ7fC/uX8/FEGQ96I00KRmSR7dIruNTRu6M33A=
Subject key identifier: E1:F2:39:44:95:A5:80:F7:CD:87:07:E5:D9:DC:84:27:D7:35:8D:F3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B8591F1A679E5A8AF2430FBB0ECEC782F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4fI5RJWlgPfNhwfl2dyEJ9c1jfM.roa
Signing time: Tue 31 Oct 2023 11:50:16 +0000
ROA not before: Tue 31 Oct 2023 11:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 86.107.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 03:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:91:f1:a6:79:e5:a8:af:24:30:fb:b0:ec:ec:78:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 31 11:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1f2394495a580f7cd8707e5d9dc8427d7358df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b7:ba:8f:29:df:a3:33:59:25:fc:37:20:a5:
a1:e6:5d:92:9d:fc:f7:30:9a:1e:b5:83:27:ef:0b:
0a:62:f3:97:68:f8:6b:77:1f:78:bf:3f:c6:8d:cb:
45:67:d3:e0:e1:de:ca:5d:6d:5b:87:ba:0d:66:20:
66:8c:5a:f9:a4:ee:60:82:f3:90:c1:9f:22:d3:f8:
60:5c:da:6b:32:d0:af:f7:2f:df:80:8f:dd:3b:25:
59:a4:80:6b:04:98:84:75:66:55:02:34:bd:9a:18:
76:58:45:63:0d:92:18:c2:4d:4c:59:76:b1:64:75:
fd:ce:b7:7b:50:a0:4e:e8:92:47:de:e3:00:9e:22:
a0:8c:ac:c6:fe:a2:c0:87:de:e1:85:da:d1:09:4f:
5f:97:84:7d:17:48:66:91:76:bb:b9:9b:f4:52:14:
66:03:04:6a:e1:13:b1:d9:ee:e3:6f:a3:f7:59:48:
58:24:84:06:5c:fc:bc:28:bc:b7:b1:99:85:46:3f:
84:4c:62:af:c0:5b:97:0d:b3:93:a8:43:c3:c9:ae:
bc:3d:08:66:a9:66:91:80:0d:01:48:ca:66:96:b8:
1f:b0:e7:90:cb:33:6a:8e:cb:d5:55:96:c0:32:9a:
9c:82:d9:d4:59:e8:0f:42:c0:c5:a7:3f:50:ae:cd:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:39:44:95:A5:80:F7:CD:87:07:E5:D9:DC:84:27:D7:35:8D:F3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4fI5RJWlgPfNhwfl2dyEJ9c1jfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.100.0/24
Signature Algorithm: sha256WithRSAEncryption
04:53:c6:18:f5:42:4e:21:4a:15:e4:b1:8f:e8:c8:04:5d:17:
47:08:fe:1f:1e:cc:76:86:25:cc:ad:6d:fe:2f:01:4b:57:1a:
ad:58:e7:82:54:d5:a9:04:53:e0:d0:ed:be:59:5d:3d:5a:72:
7c:ac:ac:cb:88:6b:56:29:98:58:65:10:de:3a:33:25:19:7f:
9d:a6:07:8a:cd:95:b0:55:9e:d8:76:b0:20:e2:0f:1b:03:93:
21:7f:d2:88:82:fb:97:65:cc:93:87:d0:de:74:b3:76:0f:c0:
bd:8a:0a:75:c2:2f:6e:16:6b:c5:f6:bd:62:5b:6c:fb:60:e7:
95:2c:c0:21:79:d5:05:e2:c5:21:b5:85:e0:d9:e0:19:ed:8c:
29:4f:f6:0f:91:55:4f:4b:5e:f7:17:06:d1:6d:48:40:0e:05:
2b:c2:d8:e1:3b:54:30:05:58:83:76:9a:ce:ef:11:fc:78:77:
bf:9e:5b:a9:0b:2b:6f:ea:8c:90:7b:fb:26:5a:53:de:3d:d1:
ec:6c:a4:b8:89:e9:b3:93:18:59:5b:c5:1a:27:da:ab:e4:35:
54:b1:e1:59:3a:3f:e2:73:06:ac:9e:af:fa:40:4f:6c:58:4d:
6a:39:69:ec:1e:9c:68:69:99:12:fe:53:cc:25:85:b1:27:b6:
6f:30:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org