Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/83O2O0FK4caBPDlfPi-vRwrAs2g.roa
File: 83O2O0FK4caBPDlfPi-vRwrAs2g.roa (raw, json)
Hash identifier: usUTau4AbjAjH99bSd2BoG/nzjyqB9xlLtroTJ2ilmE=
Subject key identifier: F3:73:B6:3B:41:4A:E1:C6:81:3C:39:5F:3E:2F:AF:47:0A:C0:B3:68
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185C3C007424A5075D17C0B92ACC75FAB62
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/83O2O0FK4caBPDlfPi-vRwrAs2g.roa
Signing time: Wed 18 Jan 2023 07:20:19 +0000
ROA not before: Wed 18 Jan 2023 07:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 37.156.5.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Feb 2023 12:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:c0:07:42:4a:50:75:d1:7c:0b:92:ac:c7:5f:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 18 07:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f373b63b414ae1c6813c395f3e2faf470ac0b368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:9d:d3:1d:ee:c6:26:ac:8d:1d:eb:f9:ee:
e3:42:29:5f:30:cd:6a:17:3e:a7:70:7f:0d:87:cf:
c1:1d:d3:0d:2d:ed:84:df:65:ec:55:87:8d:e0:57:
60:16:95:61:80:3e:55:60:0a:bf:a3:10:be:e2:36:
34:8e:6c:2d:fe:11:ad:72:df:df:07:77:b2:6f:e7:
4d:e4:83:59:f3:d1:a8:39:50:41:4f:8f:d9:d8:22:
dc:0f:c5:02:3e:18:5f:85:b1:0f:d8:4c:ae:66:d3:
4b:47:52:9d:cc:36:cf:a6:41:6d:b8:35:4c:d3:4a:
f8:5d:ba:45:a8:c5:0e:99:6c:ed:52:85:28:bc:65:
3d:6c:04:8d:ea:e0:8e:f2:d4:d0:7a:6a:4b:bf:d6:
17:4a:c7:cb:13:08:35:59:6b:21:c9:db:89:ef:73:
f5:b8:d3:2f:18:f5:14:d2:d2:05:de:ee:9f:3d:ba:
72:c9:fa:00:09:21:a4:a3:82:7b:0d:16:75:b7:87:
68:77:ec:1a:d6:3b:04:44:be:41:8b:4a:11:76:ff:
6d:17:4b:9c:87:e0:06:eb:c9:7e:4e:d8:5a:e4:b3:
96:b9:0d:b7:bc:cd:14:43:24:44:1b:bf:db:ac:2b:
09:bb:31:b5:18:3c:0b:16:6d:d4:d1:10:b4:a4:ef:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:B6:3B:41:4A:E1:C6:81:3C:39:5F:3E:2F:AF:47:0A:C0:B3:68
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/83O2O0FK4caBPDlfPi-vRwrAs2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.5.0/24
77.81.65.0/24
93.90.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:20:46:7d:fa:64:47:a2:8a:13:61:a2:e1:db:12:eb:8f:ea:
17:fc:83:ba:81:4e:5a:51:94:95:d7:7a:86:ec:09:82:4f:73:
09:bf:05:93:fa:dc:2d:d8:e9:e3:4b:2a:93:43:e8:8f:a0:04:
1f:b0:38:9a:9a:a2:24:0f:be:dc:b4:72:de:77:cf:ab:25:bd:
b2:77:b5:1c:8c:36:53:0d:1d:be:71:21:65:95:d3:1d:99:d0:
74:4a:ce:1c:ab:9f:cc:38:15:7a:5c:23:3e:29:0b:0d:fc:b9:
bb:7e:42:16:41:8a:c4:6d:5a:7b:e1:fb:ba:d5:2d:17:9f:71:
be:57:e7:aa:5e:9f:b7:e1:e4:6c:72:4f:cb:19:6f:eb:31:a1:
ee:a3:d2:8c:6a:98:ee:b5:2d:73:3d:73:83:e9:94:78:78:6b:
c1:68:f4:99:da:73:f0:fa:92:ea:89:94:17:22:49:e6:6a:b9:
64:3b:15:ba:07:c1:dc:10:a6:83:90:08:88:c4:82:7b:cc:8f:
07:b3:72:5a:c9:5a:0a:b3:4a:47:0a:aa:e3:52:91:59:94:da:
c1:aa:01:5f:69:21:3d:b8:10:69:34:c6:c3:18:bf:00:a1:0f:
e4:3e:73:10:15:68:4d:5a:2f:5c:e1:f2:b8:9d:ba:ad:0a:77:
26:18:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org