Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7IsuPX9gG5Cn067HwvMp6ub9g48.roa
File: 7IsuPX9gG5Cn067HwvMp6ub9g48.roa (raw, json)
Hash identifier: v4XOjT9Sa8P+6O+fJpUZeUSvOAXSvQUdolwfMcmdJR0=
Subject key identifier: EC:8B:2E:3D:7F:60:1B:90:A7:D3:AE:C7:C2:F3:29:EA:E6:FD:83:8F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191415F36F05DCF06BD141ECF5B2E957737
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7IsuPX9gG5Cn067HwvMp6ub9g48.roa
Signing time: Sun 11 Aug 2024 12:17:24 +0000
ROA not before: Sun 11 Aug 2024 12:17:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 45.144.173.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.45.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 11:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:5f:36:f0:5d:cf:06:bd:14:1e:cf:5b:2e:95:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 11 12:17:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec8b2e3d7f601b90a7d3aec7c2f329eae6fd838f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:49:be:75:d5:39:93:6b:b0:9d:cf:7b:1a:7e:
9a:a2:79:3f:b3:e8:b5:19:d5:cc:b3:63:59:78:8f:
e1:f0:91:c4:6d:b9:a3:c9:23:58:69:4f:e3:dd:c4:
b4:1d:c4:d5:8a:e1:40:47:84:3d:79:70:cf:7f:98:
0a:b7:96:c1:77:2a:bc:44:11:f1:a3:9c:74:a4:40:
4a:0a:88:82:58:ee:62:79:1a:72:b3:e2:41:1a:95:
ca:23:0e:f4:fd:1a:dd:c3:aa:01:0b:1c:04:64:02:
f9:64:9d:8d:83:ae:9f:0e:7d:18:f8:b0:80:c9:73:
d0:e7:f3:34:05:e1:1a:09:ff:63:5b:61:3a:df:ce:
d0:a8:b4:bf:30:2b:82:8c:40:e1:ac:f3:d3:f0:26:
c1:1f:0a:2f:d2:3a:21:c6:a8:27:75:df:68:88:4e:
3a:99:cd:e9:0c:7b:25:06:6f:33:56:34:2b:0a:18:
49:5c:a6:80:4c:b7:95:c0:1a:59:d8:0d:34:90:99:
af:91:e1:a8:4c:1a:42:1e:3f:f4:a4:fa:3d:a2:4a:
38:75:59:4b:92:5a:cc:f4:74:be:bc:b5:ab:6c:e4:
a0:39:2f:57:d2:d8:0c:9a:88:0a:44:cb:98:73:56:
ae:25:01:24:39:aa:f4:61:cc:e2:7e:4f:a0:8f:96:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8B:2E:3D:7F:60:1B:90:A7:D3:AE:C7:C2:F3:29:EA:E6:FD:83:8F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7IsuPX9gG5Cn067HwvMp6ub9g48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.173.0/24
89.40.70.0/24
89.45.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:02:42:86:16:9b:c5:3d:c4:f0:8c:3d:ad:b4:35:a2:f3:50:
60:b5:ab:26:67:44:38:b2:14:c1:19:1b:4d:82:78:43:94:a5:
af:04:bc:8e:68:9d:ad:40:0b:c3:29:8e:3d:f2:ea:51:02:c5:
0d:ab:ac:a8:20:5f:c5:64:4b:65:08:b2:65:27:9b:f9:3a:b6:
3f:ee:2f:22:17:aa:80:13:b2:77:ef:66:2b:03:3f:e3:78:5f:
fa:e9:a8:79:99:cc:d1:6e:8a:71:d2:e2:57:6d:77:a3:3f:b8:
41:3c:62:4c:69:44:aa:49:e4:c6:b8:92:46:4a:7a:ce:15:8c:
67:fa:4e:32:14:8e:ea:0f:cf:44:16:5a:39:df:02:fd:ed:db:
09:2f:9d:23:82:4c:72:4c:59:ec:88:b5:46:41:a4:7a:76:e0:
90:21:81:c1:a4:b2:14:20:8f:ab:86:f8:ea:58:4f:e7:8c:74:
c2:ae:90:24:9f:6b:f0:67:d1:b8:28:28:4c:16:02:60:a8:14:
01:99:7b:79:6f:69:1e:0a:0b:4d:1a:7e:7f:bd:c1:f9:36:fd:
30:57:87:c3:68:3a:30:aa:15:d0:be:78:cc:16:da:e7:8a:94:
a1:f6:da:1b:f4:17:87:0b:d7:42:40:f3:bd:82:fa:a4:a0:1d:
e8:82:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 14:38:24 2024 by rpki-client on console-ams.rpki-client.org