Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/94csbD0yKE-XCgK-pwCUboQWPMw.roa
File: 94csbD0yKE-XCgK-pwCUboQWPMw.roa (raw, json)
Hash identifier: Tsf7VR36YFUY/+jwvVtzmMa+ZILzyPRuZrcpC1BJv5A=
Subject key identifier: F7:87:2C:6C:3D:32:28:4F:97:0A:02:BE:A7:00:94:6E:84:16:3C:CC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01898CDE5257F633F80CD28ADCFE09238101
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/94csbD0yKE-XCgK-pwCUboQWPMw.roa
Signing time: Tue 25 Jul 2023 11:45:27 +0000
ROA not before: Tue 25 Jul 2023 11:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 89.47.55.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
45.88.14.0/23 maxlen: 23
188.214.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 08:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:de:52:57:f6:33:f8:0c:d2:8a:dc:fe:09:23:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 25 11:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7872c6c3d32284f970a02bea700946e84163ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:5a:bd:18:77:0c:7d:4d:ba:29:4e:48:cf:
cd:85:b7:82:ef:bb:33:a9:29:bb:ef:d6:4c:3e:7d:
bb:36:28:3a:e8:c9:28:a9:a1:a7:6a:fe:4a:c0:c0:
9f:83:e3:cc:04:36:ed:77:4e:96:8b:d3:6f:da:6d:
66:91:09:3b:08:bf:e8:07:d6:70:78:f0:70:dd:79:
64:70:79:fe:a2:e5:93:3f:91:93:a8:14:f6:ff:40:
c5:43:06:ec:92:cf:11:d5:ba:bb:d0:9c:ac:10:19:
6d:90:be:c3:70:f5:c5:9f:6c:10:c5:3b:24:e6:a2:
54:f7:af:d2:db:c3:ad:a1:7a:72:ec:50:88:26:ab:
20:4a:5d:1b:6e:bb:fd:94:d9:18:a5:38:ae:81:f5:
ca:9a:42:8e:d7:eb:a4:39:e0:d8:36:09:43:76:f9:
82:05:ed:d2:67:38:c9:d8:a8:86:21:91:12:41:6f:
af:c1:9d:d8:c4:06:fb:58:f6:a1:3b:a3:3e:d8:22:
d1:ce:20:c5:55:49:bf:a1:9c:d7:9e:a3:af:54:ff:
b6:c1:93:0d:40:62:d0:d0:7b:d6:76:2b:24:52:f6:
37:c4:a4:96:9e:8d:ac:e9:c4:6f:5a:33:55:91:f0:
50:20:8a:80:5b:a3:69:7e:11:48:e7:8b:e3:74:d0:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:87:2C:6C:3D:32:28:4F:97:0A:02:BE:A7:00:94:6E:84:16:3C:CC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/94csbD0yKE-XCgK-pwCUboQWPMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0-45.88.15.255
77.81.65.0/24
86.107.100.0/24
89.34.106.0/24
89.35.130.0/23
89.45.162.0/24
89.47.36.0/24
89.47.55.0/24
92.114.32.0/24
93.90.74.0/24
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b9:e8:d9:29:8e:bd:62:b5:b7:c4:86:8c:43:27:bb:30:7b:
15:f3:e3:bb:67:e4:a0:5d:2c:c2:79:ba:2a:c1:68:4b:3c:77:
23:ba:3a:d9:14:55:cd:0c:a1:fb:cb:ea:b2:48:b7:42:af:aa:
60:e1:3f:26:d8:8d:f8:8e:91:a5:fd:eb:67:11:c2:b0:19:2e:
0d:bd:92:dc:31:ec:21:ee:8c:9c:4c:d0:44:71:45:c9:8c:ef:
e3:06:6e:99:1c:9f:81:d5:55:9f:00:b8:1e:e5:ab:42:2f:52:
00:72:c4:64:5f:07:f4:31:db:2d:60:ec:6b:1e:e5:06:f5:2e:
06:3a:26:dd:fc:fe:c8:37:6b:f7:12:67:9a:80:ad:f5:b4:d3:
07:de:ac:c8:a7:a8:ba:c5:01:a7:d9:78:35:d4:7e:57:ad:c1:
9e:d4:af:e3:5e:2a:d8:47:f9:97:b2:12:cb:40:3e:27:95:5b:
c8:fe:2b:46:c0:89:7a:80:92:60:17:0a:4f:99:c5:7a:12:6f:
9a:d5:0d:a8:ed:d7:8a:10:6e:3a:86:a5:ea:e1:e0:08:cb:f9:
2d:f5:22:d6:ce:d4:58:d5:8f:fb:d3:fb:4d:ff:a8:5d:f5:fc:
ee:df:70:dd:0d:ec:4c:81:4e:fb:77:db:61:d3:f7:70:97:bd:
7c:89:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org