Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ARtDDeZLdYOQcLa84MjE3-EgiuM.roa
File: ARtDDeZLdYOQcLa84MjE3-EgiuM.roa (raw, json)
Hash identifier: O3vUT07p4LXgFuC4LBsRJYZmWhQWimPddkzhXb4p7wg=
Subject key identifier: 01:1B:43:0D:E6:4B:75:83:90:70:B6:BC:E0:C8:C4:DF:E1:20:8A:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018881AC4A245FFB4684E8E1669B17F99F51
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ARtDDeZLdYOQcLa84MjE3-EgiuM.roa
Signing time: Sat 03 Jun 2023 14:32:11 +0000
ROA not before: Sat 03 Jun 2023 14:32:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 92.114.93.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:81:ac:4a:24:5f:fb:46:84:e8:e1:66:9b:17:f9:9f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 3 14:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=011b430de64b75839070b6bce0c8c4dfe1208ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:5e:41:cf:1a:64:d3:c2:09:03:60:58:8c:
72:ab:2b:d1:c7:41:3a:b5:cf:ba:67:77:da:f1:94:
f8:dc:ff:4f:98:55:e3:c4:3b:56:cb:65:0a:cb:6d:
4c:d1:40:ec:9d:20:ab:4e:c8:a7:40:1b:84:83:f7:
05:3a:70:38:ec:df:1b:48:e0:8e:6f:98:f3:92:6b:
7b:46:95:4c:d6:87:a1:b0:61:f8:ef:6a:0d:75:63:
68:b4:2f:8f:71:9b:35:03:fe:85:de:ca:7b:0e:2b:
06:cc:8c:61:41:2f:7b:ec:e8:e0:b7:d4:9e:dc:90:
66:16:87:d8:3a:bd:94:27:7d:fc:df:fd:6f:7f:85:
29:af:47:64:01:b0:35:8f:d2:18:bb:1f:24:2a:58:
1b:b3:d5:ea:86:bf:2e:9d:27:e8:c1:02:40:65:18:
f6:d5:a6:3f:b5:21:21:58:ff:1b:d5:05:c1:23:53:
88:8f:0a:e3:d9:54:4b:e7:67:ce:ec:23:c6:11:2d:
3c:b2:9d:1f:ad:cb:17:8c:9c:16:ea:3e:bf:e0:62:
03:f4:69:cc:1c:f2:64:ac:3b:7c:de:5b:c6:f8:a7:
51:22:85:c0:41:9b:e8:b5:a6:36:ff:d5:c8:51:7f:
e3:70:98:62:82:ce:fe:84:a8:2c:87:94:93:cb:3a:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:43:0D:E6:4B:75:83:90:70:B6:BC:E0:C8:C4:DF:E1:20:8A:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ARtDDeZLdYOQcLa84MjE3-EgiuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
92.114.93.0/24
188.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
54:30:16:06:23:84:10:66:7a:c2:fe:ac:00:8c:d1:28:81:30:
0e:be:2a:68:6a:52:9c:8a:ac:06:4c:f5:8c:15:c6:90:d8:0f:
c0:c4:6f:8b:dd:1f:07:55:3e:67:de:b1:e0:39:b5:8f:af:72:
64:03:99:a4:8d:20:0e:c4:57:55:87:94:4d:2e:8d:05:da:32:
2e:01:6e:9b:0e:98:6a:95:4f:60:9a:78:c1:f1:38:69:99:c6:
b9:19:f6:68:ea:4f:d3:61:0b:13:4f:c3:80:fd:5a:e5:6c:9d:
5e:de:0c:75:2b:15:68:a0:38:27:ab:08:80:74:88:d4:b7:bf:
d7:8f:8c:03:da:40:cd:81:dd:9a:f1:75:91:3d:5e:ec:13:4c:
a3:00:2c:ed:6e:b8:d6:44:41:38:26:47:ef:81:40:05:fb:f3:
14:cf:3e:33:6a:aa:db:67:1b:62:bb:eb:43:2e:dc:b2:9d:74:
c0:a7:06:02:e4:8c:58:7d:3d:e7:f3:37:40:09:e8:92:a4:f2:
90:7f:e9:9f:4a:60:1f:e5:9c:a6:01:65:6c:ed:0b:27:c8:b5:
d8:fa:22:df:c1:b1:eb:e1:07:61:56:1c:84:06:a4:57:47:48:
83:89:fa:9c:47:15:34:6c:a0:07:b6:3d:3c:73:64:18:e3:a2:
8e:09:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org