Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/B9rK1K3QXy3PsQ038jc0D_RyooA.roa
File: B9rK1K3QXy3PsQ038jc0D_RyooA.roa (raw, json)
Hash identifier: sC64XFtZz80Pi5pePiZ9aeJQIZOnvL3pz9qAl1KvcYU=
Subject key identifier: 07:DA:CA:D4:AD:D0:5F:2D:CF:B1:0D:37:F2:37:34:0F:F4:72:A2:80
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A65BD2035131B44C69556E810EECC2382
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/B9rK1K3QXy3PsQ038jc0D_RyooA.roa
Signing time: Tue 05 Sep 2023 14:26:47 +0000
ROA not before: Tue 05 Sep 2023 14:26:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 86.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 10:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:bd:20:35:13:1b:44:c6:95:56:e8:10:ee:cc:23:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 5 14:26:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07dacad4add05f2dcfb10d37f237340ff472a280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:84:d3:31:d9:aa:04:d0:28:10:26:15:81:
60:59:06:19:0e:13:a4:e8:0b:5f:4a:4a:ee:a8:d1:
c7:85:c9:54:4c:b0:99:1e:5d:42:e5:09:5a:1e:26:
5d:5e:d3:14:8a:9e:32:76:f5:2c:71:5c:b6:72:d5:
a5:d1:06:da:0d:c9:a7:e1:99:a0:fe:e9:69:57:5c:
35:cc:a4:3f:20:29:11:1e:f9:a7:35:fb:ad:ac:43:
e3:c3:f1:39:35:43:52:1b:d8:31:fa:4a:00:2c:40:
19:3f:5e:7c:96:27:c2:0d:0b:6a:5f:04:d8:7f:ad:
25:5c:71:10:20:0c:bc:38:54:78:5e:ab:04:48:ae:
f3:d0:97:49:6d:e2:aa:b7:b6:ab:fd:eb:07:8d:70:
46:a8:2b:94:9f:ab:a8:21:26:f5:e6:36:63:7f:e6:
6c:5e:f8:01:35:76:f5:08:5f:fa:19:7f:4f:0f:02:
f1:ff:90:1d:5c:1a:4f:8f:59:f9:21:cd:93:9e:88:
56:ee:61:01:3d:37:4a:ee:14:51:00:72:57:5a:2f:
dc:de:e8:58:f8:cf:00:b5:82:fa:35:7b:47:32:a2:
6e:8b:8c:14:c3:56:03:aa:2d:4c:e7:25:f2:eb:34:
18:06:0a:57:80:21:ac:53:c1:be:fe:8f:5c:4a:13:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DA:CA:D4:AD:D0:5F:2D:CF:B1:0D:37:F2:37:34:0F:F4:72:A2:80
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/B9rK1K3QXy3PsQ038jc0D_RyooA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:62:75:fe:48:30:39:cd:33:c7:6e:18:2d:a2:da:c3:01:1d:
4c:8d:8b:63:02:ba:57:e6:7a:7d:f6:cc:1e:68:b0:e3:dc:0a:
16:ad:71:24:06:81:3b:a6:6a:46:23:a7:a9:d5:fb:01:b7:aa:
08:53:56:79:20:c8:e9:e6:d4:04:79:4a:3f:ad:ce:58:a3:99:
e5:d3:6f:14:7c:39:fc:ac:4e:80:85:c6:98:0d:46:25:dc:03:
a4:b4:b5:aa:e8:c4:e1:1e:d9:16:ca:fc:54:39:b5:00:0a:62:
40:d9:b1:93:fc:e2:b6:bb:4d:20:71:4b:ca:8a:aa:44:e6:0e:
ee:42:84:e9:ad:2d:43:6d:91:f7:33:68:04:97:f6:49:cf:19:
92:dd:3c:5a:01:e7:20:ed:68:79:fd:4c:9c:03:12:5d:6b:69:
4d:3c:5b:05:4a:b3:cd:1f:20:00:30:81:e6:34:77:20:da:43:
ff:6f:43:cc:b8:0e:73:e4:91:fa:17:66:f5:1b:e6:7b:5f:22:
5e:5f:19:ea:78:3d:5e:3c:90:84:e7:26:75:c5:cb:d7:97:f2:
77:4f:99:2e:37:d8:c8:22:5e:2f:23:18:28:38:af:5f:f8:c1:
3a:5b:93:0a:e7:32:d1:1c:72:df:7b:31:86:92:80:c0:bc:a9:
b8:d8:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org