Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9I-GwOpkzQnAjv1ejlgeM6umsFc.roa
File: 9I-GwOpkzQnAjv1ejlgeM6umsFc.roa (raw, json)
Hash identifier: d6LPCX5fD3hPW+FvqRyF5Iiqf2CCiAueyIB6aOsii+g=
Subject key identifier: F4:8F:86:C0:EA:64:CD:09:C0:8E:FD:5E:8E:58:1E:33:AB:A6:B0:57
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C5F1C6A04E9F1E0093D1C308257B40A4C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9I-GwOpkzQnAjv1ejlgeM6umsFc.roa
Signing time: Tue 12 Dec 2023 17:39:06 +0000
ROA not before: Tue 12 Dec 2023 17:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149977
IP address blocks: 89.34.202.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:1c:6a:04:e9:f1:e0:09:3d:1c:30:82:57:b4:0a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 12 17:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f48f86c0ea64cd09c08efd5e8e581e33aba6b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:21:09:a2:23:88:9e:02:2e:ef:b0:f9:6f:
26:ec:60:73:ca:ab:cd:40:5c:04:ed:ae:8d:ad:cf:
88:e1:df:b8:f7:7f:d3:4f:77:c9:bb:8f:90:dc:98:
e1:74:2b:39:3c:c2:69:d6:e0:b1:4b:8f:27:c4:87:
64:3a:5d:17:8c:aa:e0:35:a0:e6:80:e7:97:7a:03:
22:d3:ac:41:df:da:c1:a8:7b:92:37:58:af:3c:8d:
df:52:d2:2e:e7:6e:8e:1b:42:36:c1:be:ca:81:22:
84:3b:a8:e3:27:ae:e6:65:37:38:2c:b2:d1:51:f7:
22:43:a0:31:c8:e9:ab:ce:30:7b:2d:29:17:57:74:
1d:25:7c:85:21:bc:83:2e:b9:d6:1f:4e:d2:e0:73:
d8:24:65:e6:67:06:e4:48:22:ea:ee:d4:aa:81:fe:
96:d2:89:84:f5:c1:f0:06:46:81:11:c9:6a:28:f9:
26:ef:2f:7e:de:98:3f:1e:63:78:3c:06:42:e2:c1:
47:a7:49:d8:ee:a9:ca:19:dc:81:c2:1f:b6:1b:2a:
16:fc:aa:38:b7:11:2d:16:9d:f6:a1:73:d5:fe:68:
26:a0:f5:76:7a:be:09:fc:27:ec:db:f6:83:68:4d:
40:d6:21:3e:8b:3a:28:f2:a2:9f:ab:1a:cf:e4:9c:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:86:C0:EA:64:CD:09:C0:8E:FD:5E:8E:58:1E:33:AB:A6:B0:57
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9I-GwOpkzQnAjv1ejlgeM6umsFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.106.0/24
89.34.202.0/24
89.35.131.0/24
89.37.192.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1d:3b:31:c0:52:6f:c0:54:3d:c3:85:e5:99:1d:67:37:9e:
94:2f:e5:80:a3:67:5d:ef:24:76:0d:a5:81:a9:26:d4:d8:83:
03:77:67:ce:73:df:eb:64:3d:50:47:73:ea:32:29:cd:18:95:
5e:2d:e0:d0:8f:28:46:eb:bf:27:b6:0d:d4:c4:e9:b7:65:51:
5d:8e:c7:a4:35:c9:d2:69:26:ce:fd:b1:30:94:17:ca:13:3c:
56:20:ff:ef:2a:f3:52:7b:f3:c6:e9:a6:f6:c9:84:cc:2b:bd:
d0:50:74:2b:6b:ae:0f:a5:85:d1:44:66:fb:c5:3b:12:d5:bc:
43:c9:43:92:a1:8f:c3:48:1a:78:3e:5a:f4:1f:67:a5:61:63:
57:26:45:42:51:d0:f3:10:1f:73:37:5a:b9:5f:8f:38:30:a8:
1a:91:29:8c:a1:59:c4:3d:ff:29:6e:57:8e:93:0b:66:b0:06:
a7:4a:42:84:90:dd:bd:9b:23:44:f1:c1:5f:cf:9f:6d:a0:b4:
4d:4d:ff:01:f2:2d:a0:13:1e:71:fd:0d:c9:6c:ce:b5:c5:cb:
5c:54:6b:24:24:40:3a:83:25:8b:38:ae:b0:12:28:f3:df:4d:
f8:08:94:f7:ef:40:ca:76:04:be:a1:16:7a:9b:37:6d:51:01:
50:13:e6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org