Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/96EiyVU6vE2h5l84FwHcX95mU58.roa
File: 96EiyVU6vE2h5l84FwHcX95mU58.roa (raw, json)
Hash identifier: WiF/eHCm7DdFAqnOQ2ZkID+hZhxGIKmIZzfTy32ez5k=
Subject key identifier: F7:A1:22:C9:55:3A:BC:4D:A1:E6:5F:38:17:01:DC:5F:DE:66:53:9F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187C6D15978E999F625F23A4D551799BFC4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/96EiyVU6vE2h5l84FwHcX95mU58.roa
Signing time: Fri 28 Apr 2023 07:43:41 +0000
ROA not before: Fri 28 Apr 2023 07:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 92.114.32.0/24 maxlen: 24
45.88.14.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 10:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:d1:59:78:e9:99:f6:25:f2:3a:4d:55:17:99:bf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 28 07:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7a122c9553abc4da1e65f381701dc5fde66539f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:a5:4c:23:9a:82:0f:74:5f:27:58:00:99:
4a:d9:42:c7:a6:9d:25:77:5d:c2:1b:37:db:99:41:
66:8e:be:70:59:88:b6:23:85:cd:47:53:78:e0:6d:
f4:cc:97:12:a3:c5:eb:2e:82:81:95:01:57:52:01:
db:f9:4c:2d:b0:16:fb:34:74:24:63:b9:e3:23:5f:
14:d8:5c:eb:87:22:70:c7:64:22:b4:1a:97:52:fc:
4c:c2:95:85:f8:2c:8d:b0:c9:ab:46:09:a8:04:7f:
4a:87:ee:1e:86:5f:c6:14:72:c9:a6:bd:bd:90:2d:
49:78:33:bb:b4:d3:d1:29:f0:73:c0:d5:b4:f5:36:
72:e5:3d:23:41:d2:75:31:69:f0:a7:57:eb:70:79:
9b:d2:cc:3c:91:f6:7c:ca:bc:4e:2a:d7:61:2c:33:
b1:b6:4d:e4:e9:cf:40:f1:6a:12:82:21:25:0a:14:
ec:54:b7:b5:60:76:8f:d7:92:32:37:ec:9d:0f:44:
3c:a0:a6:66:ca:2a:90:d1:06:29:fb:0a:a5:cb:ae:
80:01:a0:2b:57:4d:a2:d3:4a:2b:0d:48:69:5d:09:
af:76:cb:34:0e:7e:a4:5b:20:41:9f:cf:a1:2b:b3:
9f:a9:97:1a:66:6b:6c:56:05:f1:8f:90:c9:20:9f:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A1:22:C9:55:3A:BC:4D:A1:E6:5F:38:17:01:DC:5F:DE:66:53:9F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/96EiyVU6vE2h5l84FwHcX95mU58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
89.45.162.0/24
92.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8b:02:4f:af:b4:56:72:52:64:85:cb:cc:b7:6c:e2:b9:da:
3e:40:a4:30:b0:38:c1:a5:53:6d:d1:ad:d6:b9:11:27:90:0f:
ac:5b:e3:c3:80:bf:dd:55:60:30:24:e5:6a:b4:ea:4d:21:b1:
b3:87:cc:42:ab:fb:00:86:d9:a8:65:f6:c5:ea:b4:d9:d0:dc:
69:6c:44:c4:de:1e:9e:68:c0:56:4e:5c:5c:15:a2:c6:76:a1:
14:56:4d:07:26:c8:4c:91:b3:1a:eb:86:65:3f:99:a6:62:57:
59:5d:ef:a4:d2:b5:df:71:eb:e5:e0:19:43:fe:83:2b:83:a6:
3a:0a:b9:68:cf:e4:6d:c1:d9:c1:2d:ac:a1:c5:de:96:e7:74:
ec:60:fe:bc:9a:25:74:4e:70:c3:a6:14:0e:bf:ed:a0:31:67:
c4:c0:5e:41:63:1a:e2:af:12:e2:a2:dc:ad:58:18:4a:4b:56:
98:22:68:46:06:84:f3:5c:a5:48:c2:d2:42:66:1d:91:f2:f1:
60:78:e8:aa:ac:67:b0:c3:01:b5:1d:11:ec:18:1a:46:01:25:
fa:d6:ec:f6:d0:db:3f:b5:77:9d:5d:71:bd:6a:da:87:61:2b:
de:a9:a8:cc:e2:b2:bf:5e:1f:46:a1:44:68:17:a4:ae:63:9d:
6c:da:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org