Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7FwE9FgIcBFjJI7iXpbqpkgWCKc.roa
File: 7FwE9FgIcBFjJI7iXpbqpkgWCKc.roa (raw, json)
Hash identifier: h4jjQc8quQEVRgaUp4yxyOMDtnXKnQ22KA/3Z2BTwuU=
Subject key identifier: EC:5C:04:F4:58:08:70:11:63:24:8E:E2:5E:96:EA:A6:48:16:08:A7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC4933F443536D2EBAADD0A8CE62F0B36
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7FwE9FgIcBFjJI7iXpbqpkgWCKc.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 89.37.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3f:44:35:36:d2:eb:aa:dd:0a:8c:e6:2f:0b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec5c04f45808701163248ee25e96eaa6481608a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:a6:c7:84:c0:01:ac:bb:e7:b3:b8:d6:19:
b5:ff:02:55:05:12:96:33:a4:43:f7:f6:44:e3:b7:
1d:e3:1d:d0:12:26:6f:86:fb:bb:80:0b:05:9c:ca:
e2:fb:14:a4:f6:4f:9d:d8:39:a5:06:45:e9:d6:f2:
5c:76:0a:a6:af:17:d6:3d:d4:34:bd:8d:71:ed:ad:
31:31:ef:4d:35:28:c3:96:ba:24:0e:e3:8a:32:e5:
27:e2:13:c9:6d:d7:46:b0:a2:d8:ea:7b:e2:3d:d0:
55:86:0e:1d:39:d5:e0:df:3b:98:85:b0:45:c1:26:
61:43:bc:6b:5e:f6:1e:6a:df:d1:53:eb:9e:76:31:
4e:0f:62:5b:79:d1:6b:95:8a:47:b1:ae:50:54:16:
fc:2c:62:3d:58:99:82:9d:42:7b:d6:65:c2:e7:3b:
2f:e0:b2:fc:59:c2:3a:93:90:8d:ef:90:6c:4a:1b:
67:9f:3b:de:04:94:67:8f:54:64:6b:6f:8e:d2:27:
59:60:f5:d9:9f:c6:d2:a8:5e:6b:18:60:eb:a0:fc:
7a:5f:f6:95:58:4c:a7:0e:80:43:a2:52:8c:64:53:
1a:cb:27:72:45:46:da:d2:1e:ac:7f:e3:d4:f9:4b:
a0:f1:59:44:31:cd:0f:f2:54:a1:f0:e7:6f:6f:f7:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:04:F4:58:08:70:11:63:24:8E:E2:5E:96:EA:A6:48:16:08:A7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7FwE9FgIcBFjJI7iXpbqpkgWCKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.195.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3d:bc:94:8f:52:ad:90:02:dd:d2:10:06:cb:92:5d:d8:17:
f6:89:55:64:44:9c:83:72:d1:ff:75:15:bb:93:77:a9:cc:3c:
2a:f8:af:6d:93:f5:c8:81:1d:17:64:6a:f5:ff:29:9c:19:9c:
22:67:09:e9:6c:47:bd:34:da:1d:ae:ed:7a:52:26:64:23:e2:
fb:56:38:83:6b:3a:ed:53:3b:90:a2:12:d9:62:5d:6c:e7:e7:
be:ae:40:d0:9e:be:40:30:e6:41:25:d5:f0:cc:4d:95:a2:38:
80:f3:34:d0:04:1b:f1:bd:57:70:93:fa:53:52:d3:69:38:92:
35:2c:2f:0c:53:dd:de:54:4f:12:27:e6:62:3d:f8:6d:80:ae:
3d:ad:1c:35:4b:8c:de:bd:62:3f:e4:b3:68:0a:d1:30:9e:e9:
cf:f1:a1:02:a0:0c:ae:7b:89:a6:ae:cb:7b:59:97:70:c7:35:
87:c9:27:f9:d0:c3:18:e0:13:c6:20:07:7a:37:be:90:e9:3a:
c1:4e:aa:b1:56:3e:29:e4:c9:c5:38:36:2a:87:73:be:30:47:
0f:f4:51:75:5a:db:3d:b9:7a:e3:20:c5:fb:c6:37:25:f9:5b:
a0:87:c5:4a:80:99:65:ff:5c:2f:2f:93:0d:21:0f:ae:e2:ca:
5a:4d:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org