Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4wDc_090d_syTLfTHY3cI2SgckI.roa
File: 4wDc_090d_syTLfTHY3cI2SgckI.roa (raw, json)
Hash identifier: ZQiMP74N/SwA3ENg/aWCM8fxMRYjrwuksT9+m9As3n8=
Subject key identifier: E3:00:DC:FF:4F:74:77:FB:32:4C:B7:D3:1D:8D:DC:23:64:A0:72:42
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D0810465F66BD34CB3D7D7B2CEF52EDDA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4wDc_090d_syTLfTHY3cI2SgckI.roa
Signing time: Sun 14 Jan 2024 13:01:40 +0000
ROA not before: Sun 14 Jan 2024 13:01:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203394
IP address blocks: 188.208.103.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 12:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:08:10:46:5f:66:bd:34:cb:3d:7d:7b:2c:ef:52:ed:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 14 13:01:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e300dcff4f7477fb324cb7d31d8ddc2364a07242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:f9:85:dc:00:43:d9:f0:cd:c9:b8:ed:9c:
31:c6:28:2a:f1:5b:9b:79:d2:70:f1:cf:1d:94:35:
9d:14:65:0a:78:38:c8:51:06:10:9d:09:ab:f5:b3:
4c:68:bb:57:72:22:4c:81:4e:cc:cb:c0:1f:6c:e8:
cc:59:8f:e6:47:11:88:92:b3:d6:d3:35:2c:14:5b:
58:49:eb:87:9d:0b:77:28:97:e2:a8:20:68:21:00:
ec:ed:e8:22:d5:bc:e7:cf:68:e2:cc:9f:d6:9d:2a:
7b:8e:48:c6:11:ec:f1:94:91:35:75:5b:e7:16:b9:
f4:3d:20:0d:33:94:f7:44:d3:98:6d:8a:5f:d8:03:
0a:58:33:e0:57:c2:69:32:5d:63:5f:bb:7f:fa:84:
b5:a7:b1:1f:c0:1d:a2:46:b1:9d:0d:ca:84:e9:aa:
47:d6:e9:d0:e3:89:4e:5e:a3:ea:6a:da:a2:bf:ff:
14:14:32:58:32:cf:87:07:45:ba:83:1a:3a:5b:a6:
22:f9:91:b8:a3:53:90:36:8d:e2:a2:f5:ae:ac:5b:
36:b3:5c:3a:94:37:12:c6:08:87:e2:4a:ee:9a:f7:
51:78:c8:82:50:1c:94:f3:d7:2c:f0:28:b9:5e:48:
7a:a9:da:3b:c4:1e:7e:ec:97:82:af:b9:a6:6c:3a:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:DC:FF:4F:74:77:FB:32:4C:B7:D3:1D:8D:DC:23:64:A0:72:42
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4wDc_090d_syTLfTHY3cI2SgckI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
77.81.88.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
61:69:39:5c:f0:b8:f8:90:8e:51:e2:40:ca:4f:8b:ff:b4:31:
da:36:aa:fe:ee:ad:3f:d9:c7:6e:79:34:c9:22:cd:dd:da:7a:
3e:6c:dc:7f:08:2f:4e:0e:a0:78:3c:a5:be:fc:41:a9:de:a1:
7f:e0:6c:5e:67:c2:e3:84:37:f9:9c:e3:60:6a:03:8e:a5:63:
75:d3:79:6d:1a:6d:fe:3e:99:aa:4a:45:4b:81:10:5e:8a:54:
cb:8a:89:08:1a:b3:03:df:e2:de:43:63:88:f4:29:e8:e5:4a:
a7:da:79:52:16:54:e8:15:89:de:a9:56:45:78:29:f7:ab:7d:
8f:0d:9e:94:f4:24:4f:ff:a5:5b:83:ab:49:f8:87:ad:e0:3d:
db:22:67:91:57:26:66:4b:97:3e:76:bc:d5:99:6d:38:05:7b:
34:06:22:73:b3:69:f9:88:0c:ad:8a:cc:12:a1:ee:8d:5e:53:
b8:04:a3:c4:05:55:d2:8a:97:cc:ce:f2:d8:0c:c4:ff:5f:0c:
99:dd:89:c5:d6:50:14:bc:bd:e0:b8:e6:ba:af:9a:cc:91:09:
e7:29:bd:d2:06:d0:21:c3:00:4d:40:32:d1:b5:99:b5:c7:1e:
c5:4d:c3:ff:b3:96:6e:9e:44:fc:4b:c1:a2:4b:e0:aa:28:ca:
49:68:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org