Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7_hoVyHsR94XSJpzvbZsHqUGGr4.roa
File: 7_hoVyHsR94XSJpzvbZsHqUGGr4.roa (raw, json)
Hash identifier: xNXR5Csv4FdcrB03aprjH1pr4qKzkAdZJp25X+sq6bc=
Subject key identifier: EF:F8:68:57:21:EC:47:DE:17:48:9A:73:BD:B6:6C:1E:A5:06:1A:BE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C5F1C6929DE7BD8BA9F929A9A0AC199A8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7_hoVyHsR94XSJpzvbZsHqUGGr4.roa
Signing time: Tue 12 Dec 2023 17:39:06 +0000
ROA not before: Tue 12 Dec 2023 17:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 89.35.119.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:1c:69:29:de:7b:d8:ba:9f:92:9a:9a:0a:c1:99:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 12 17:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eff8685721ec47de17489a73bdb66c1ea5061abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:31:e2:02:ef:08:df:79:9b:05:c2:d8:2f:f6:
64:9d:58:81:2e:78:91:88:75:a1:3f:15:80:60:a6:
5d:51:a7:29:1a:72:9f:5c:42:a3:dd:c5:b7:6d:6b:
dc:df:9c:3a:89:e2:39:ed:90:98:43:b8:1c:08:67:
be:6c:c3:59:52:ff:fc:74:d9:ac:3d:03:9e:23:d8:
89:44:37:b7:18:7e:36:ea:fd:c0:d8:39:99:ca:5e:
65:ee:69:35:51:85:66:4d:25:d9:ec:14:3b:e8:35:
1c:e9:54:ce:ab:92:ec:cd:76:e9:7c:43:27:bc:96:
a5:cb:bc:7a:fc:b1:c1:25:b9:17:b8:de:bc:f4:da:
43:91:ec:1d:b6:a4:a8:91:1c:99:67:dd:be:0e:03:
89:74:8a:cf:14:cf:32:c7:9c:8b:29:0e:80:1e:d7:
8a:98:20:82:b8:d3:85:7b:05:30:50:be:e2:df:05:
c0:28:83:59:9d:fd:bc:53:d0:93:cf:f7:31:b4:be:
ff:47:32:ce:d3:35:70:8e:99:1e:ef:b3:b4:63:73:
84:de:b4:c6:54:7d:25:89:15:22:84:3c:20:6f:d8:
cf:e4:fe:a5:a8:8b:98:a2:bf:3e:db:84:a5:de:75:
1c:48:b4:58:31:61:11:8f:f2:fe:00:6b:43:7a:7d:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:68:57:21:EC:47:DE:17:48:9A:73:BD:B6:6C:1E:A5:06:1A:BE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7_hoVyHsR94XSJpzvbZsHqUGGr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.119.0/24
89.35.130.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:1d:62:aa:4c:0e:71:61:c4:ed:89:71:6c:55:09:92:19:4b:
c1:6f:54:d3:e4:8b:e4:43:4d:8a:81:46:b6:31:5d:6d:bf:61:
b6:d7:77:91:e7:d9:8d:e8:9b:74:02:1c:4c:7d:60:18:28:8d:
ed:be:d6:2a:5b:3b:e1:25:5b:9d:7f:24:c1:16:28:c8:77:b1:
73:7c:6a:a3:7b:ec:82:66:af:4e:79:8a:4c:d0:d6:f0:28:7b:
0a:b4:96:83:b2:78:50:c4:b8:ab:e3:0c:ad:44:72:55:55:8e:
72:87:a8:f1:87:ed:31:24:fa:79:3f:31:aa:29:92:56:0a:0b:
c5:05:fc:e8:4e:03:f0:a6:70:6a:42:38:a3:e4:fc:ea:31:98:
2d:ec:80:c9:d2:4e:39:74:5c:89:10:fe:34:fa:40:83:dc:50:
bd:f8:ec:7f:bf:ae:a6:22:b4:0b:ae:d4:67:83:93:6e:76:7a:
e3:66:03:a4:ca:47:f4:d7:35:5e:80:71:c9:58:0c:0f:48:84:
4d:5f:ad:9a:fa:95:10:47:ca:82:aa:1e:47:17:61:09:dd:73:
5c:59:ce:5b:00:23:15:df:43:73:f6:92:80:0f:52:42:86:74:
73:2d:0a:6d:77:56:a3:75:0f:4c:f4:92:76:59:50:aa:d2:7c:
ef:f4:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org