Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5FYqIFWbJPQQNykHa6aY6QwooP4.roa
File: 5FYqIFWbJPQQNykHa6aY6QwooP4.roa (raw, json)
Hash identifier: UO+h0PoidiY0Kdn1X9MMO5IR7zeAjY/6ZB0/4QkXOlA=
Subject key identifier: E4:56:2A:20:55:9B:24:F4:10:37:29:07:6B:A6:98:E9:0C:28:A0:FE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01892FD190BC016DA6E1472E35D141C8C518
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5FYqIFWbJPQQNykHa6aY6QwooP4.roa
Signing time: Fri 07 Jul 2023 10:06:50 +0000
ROA not before: Fri 07 Jul 2023 10:06:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 86.107.50.0/24 maxlen: 24
91.132.48.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 10:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:d1:90:bc:01:6d:a6:e1:47:2e:35:d1:41:c8:c5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 7 10:06:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4562a20559b24f4103729076ba698e90c28a0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:4f:6a:42:ff:c6:ae:7f:aa:69:f4:10:16:
6d:9d:a3:26:3a:c6:97:68:44:be:34:24:8c:93:88:
82:57:8c:3c:a2:1d:fd:9a:6b:82:2d:3c:c6:3c:49:
00:57:cc:80:ba:82:00:9a:19:a3:c0:31:bf:51:2d:
84:d1:27:18:31:f8:03:a0:dc:91:32:27:80:8f:09:
fe:e0:81:46:a4:ab:25:68:86:b6:9c:a3:c8:63:28:
f1:0d:3c:38:05:b8:d5:32:8a:54:db:c9:32:9c:d2:
dd:b5:02:58:ee:b5:f3:17:d7:60:c0:43:51:30:f4:
d3:ed:d5:78:ae:f0:44:db:8c:05:c0:e6:0e:40:0d:
6b:08:a7:2c:e7:f3:ee:fe:76:7b:d8:4f:4f:7b:89:
80:44:ec:b6:32:3b:88:24:de:9f:10:4a:80:c7:b6:
3d:fc:8b:5c:bd:b0:8d:83:7a:81:6f:43:41:1e:d2:
60:00:f1:ea:9c:24:23:23:fb:f9:6e:f2:ca:77:11:
94:f5:ff:ce:58:84:03:e5:4c:f3:b5:77:0e:c4:06:
67:c4:ee:d8:ed:b4:4f:20:04:7d:55:3b:4d:0d:42:
91:c7:01:80:d6:20:3b:b7:cf:fe:3b:8b:fa:36:ef:
58:53:df:8e:b0:01:56:41:38:ee:11:4e:4d:13:73:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:56:2A:20:55:9B:24:F4:10:37:29:07:6B:A6:98:E9:0C:28:A0:FE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5FYqIFWbJPQQNykHa6aY6QwooP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
86.107.50.0/24
91.132.48.0/24
93.115.203.0/24
94.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
42:46:c1:57:79:5c:4e:a2:c8:4f:d4:61:6d:c9:9f:8f:ad:b8:
e3:06:34:5b:15:4e:7f:e6:c5:45:5b:52:c7:86:84:d6:27:f9:
c7:c6:61:64:9a:4a:70:13:58:b9:29:0b:f5:63:9b:0c:f9:12:
d5:8c:12:67:61:f6:41:17:3a:a2:13:d2:b4:21:4b:4c:40:5c:
0f:7f:02:ac:56:93:a2:1e:28:ef:03:55:87:c2:b6:c4:dd:65:
bb:65:3a:ad:35:e8:f0:b6:07:4b:a6:04:d6:86:a7:43:0f:4c:
f7:81:fc:39:79:26:c5:ec:95:f0:ca:a4:33:f3:13:59:3a:72:
c4:65:f5:b1:cd:f8:e3:7a:89:48:e6:8f:7b:f9:b3:09:d0:86:
40:f9:14:a1:48:6f:54:2c:ac:8c:7d:f6:0d:f1:e3:0b:9b:42:
8d:01:87:96:51:9c:9a:87:7e:75:4c:cc:a4:22:09:c0:c4:52:
50:23:1e:d8:ba:13:9a:8b:61:0c:88:12:15:10:3b:de:79:96:
80:aa:8d:48:45:a5:16:d1:91:ef:86:bf:56:a0:af:ec:a2:3b:
a3:5c:5f:be:d2:67:fc:bf:6e:86:81:76:90:c5:ee:3e:cf:8c:
93:e9:d1:d7:bd:fa:2f:39:1f:0e:d7:08:36:70:45:a0:d1:91:
48:20:65:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org