Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AJ99KBXbg-iTLfkGOo085WWbU90.roa
File: AJ99KBXbg-iTLfkGOo085WWbU90.roa (raw, json)
Hash identifier: 0MrdTCx8lI+h0qMi7C12kkoI+vB2rMrcTXBc8l3QmMI=
Subject key identifier: 00:9F:7D:28:15:DB:83:E8:93:2D:F9:06:3A:8D:3C:E5:65:9B:53:DD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018DA5F91888F5180701DB7CB66038DAB8ED
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AJ99KBXbg-iTLfkGOo085WWbU90.roa
Signing time: Wed 14 Feb 2024 04:56:21 +0000
ROA not before: Wed 14 Feb 2024 04:56:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.140.247.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 18:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a5:f9:18:88:f5:18:07:01:db:7c:b6:60:38:da:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 14 04:56:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=009f7d2815db83e8932df9063a8d3ce5659b53dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:00:ba:60:25:dd:b1:d4:b3:b5:ad:7f:d9:
34:c7:43:c1:10:52:e1:a6:e6:df:1b:8c:f8:2c:79:
67:70:98:1e:15:6c:24:66:b5:ae:0c:57:fd:4f:0b:
15:d6:af:be:b1:78:6e:c1:89:a0:13:09:0a:4f:87:
af:92:d2:4b:78:1f:91:2c:5b:48:b7:b3:e6:4d:9b:
6d:69:89:5f:a4:c2:90:ee:ce:c5:21:68:f7:31:12:
6d:16:64:3f:d7:53:66:c0:4f:73:89:f5:7b:32:4f:
ff:82:04:91:2b:bb:59:45:9c:49:d1:71:86:2f:bc:
12:2d:29:23:19:ab:5a:71:f9:1d:13:3c:74:70:51:
a0:c0:ed:72:45:ac:59:b1:ba:79:da:3e:c2:c6:36:
87:fe:6b:b8:77:52:dc:d0:ee:53:5d:8b:d3:62:83:
9a:81:47:32:76:56:8c:ba:8e:23:b5:f8:e5:39:2d:
9b:f0:3b:8b:b7:07:9e:01:2b:73:4a:89:60:45:71:
2f:cc:23:6a:2d:b2:9f:79:c3:a8:68:e8:12:24:a7:
18:15:11:d5:43:fb:5d:b3:e1:3c:d3:37:77:48:27:
82:1a:cc:b8:1d:f2:97:a0:a1:f9:f7:4b:0f:e7:2f:
26:7c:10:84:7a:a5:b4:30:da:16:49:8f:bb:06:c9:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:7D:28:15:DB:83:E8:93:2D:F9:06:3A:8D:3C:E5:65:9B:53:DD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AJ99KBXbg-iTLfkGOo085WWbU90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
89.34.106.0/24
89.35.129.0/24
89.35.131.0/24
89.37.192.0/24
89.40.215.0/24
91.132.51.0/24
93.114.183.0/24
128.0.41.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6d:ae:b7:9c:b2:01:79:ff:fb:f9:5a:52:7a:2c:1f:5c:60:
ad:ec:f2:49:4c:ca:7b:ba:66:00:ac:14:54:05:1c:4f:3d:de:
f9:82:e1:63:50:6c:3c:49:a0:94:e4:84:ee:0b:c5:87:15:b9:
b7:64:15:97:20:ce:0b:f6:28:2c:af:04:30:39:13:d2:cf:2a:
1d:06:57:27:10:19:0d:c6:ce:cc:38:4e:7c:97:58:7c:c8:d1:
eb:68:72:da:2c:50:4b:32:44:17:0a:81:17:10:5a:fb:98:ef:
a2:f2:47:4d:80:74:e5:f2:da:ce:f4:63:d1:b5:f3:33:54:ab:
4f:32:1d:73:2e:a2:ed:81:c6:38:9c:6c:63:f5:89:ba:24:d9:
a7:08:64:34:22:9f:31:0a:4d:19:2f:1e:d9:e8:da:18:0e:34:
d7:de:88:bc:18:e8:10:f3:25:ce:30:8d:f8:37:7f:06:0f:28:
c0:27:c4:b5:e7:84:e3:b0:df:b0:9c:1b:cb:a5:79:a1:80:8c:
95:48:a2:c1:1e:7c:f0:b0:f0:a4:f4:eb:57:f0:f2:d2:39:bb:
ac:7f:13:d0:06:d2:3a:98:d7:e4:2e:63:75:db:dc:19:ff:dd:
86:e3:65:46:31:04:be:04:16:5b:4b:e9:cf:55:ce:1c:28:b9:
c1:bc:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org