Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/C-c1MisQVJVHRlfmvhl2pIBBXqA.roa
File: C-c1MisQVJVHRlfmvhl2pIBBXqA.roa (raw, json)
Hash identifier: 360RYLJ3sJ6M19G5W5ddlv5ZWV4Q+eYQptbrwpU96TA=
Subject key identifier: 0B:E7:35:32:2B:10:54:95:47:46:57:E6:BE:19:76:A4:80:41:5E:A0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189DA743F783911146FD3E370D9B776B339
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/C-c1MisQVJVHRlfmvhl2pIBBXqA.roa
Signing time: Wed 09 Aug 2023 13:19:58 +0000
ROA not before: Wed 09 Aug 2023 13:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 89.34.106.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
45.88.14.0/23 maxlen: 23
188.214.107.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 11:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:74:3f:78:39:11:14:6f:d3:e3:70:d9:b7:76:b3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 9 13:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0be735322b105495474657e6be1976a480415ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:ad:f0:2a:bf:1d:72:e0:02:2c:ce:fd:a6:
38:97:94:cc:86:e5:91:d0:53:0c:7f:db:df:37:b4:
a7:a4:46:f5:78:9d:80:77:0f:7f:f0:1d:f0:83:ee:
7f:0b:8e:36:c8:f5:66:44:d1:fb:bf:18:05:e7:44:
34:ef:ea:84:bb:82:8b:7c:db:9a:74:bb:10:53:6a:
3a:b3:b2:64:f1:52:ae:f2:79:69:65:72:d0:0d:36:
b5:5b:5d:2a:40:74:3f:cc:da:3a:30:81:62:d4:e9:
fd:90:29:6a:4b:ca:9a:12:51:07:8d:7b:13:80:07:
8e:08:f0:99:f6:ac:54:8c:16:bd:9e:95:0d:cd:9e:
2c:38:7e:fe:aa:66:f9:61:69:c9:78:fc:89:24:16:
60:8b:91:88:0f:d1:26:fe:16:3d:32:f5:b9:66:ee:
bd:0f:90:0a:0f:f8:9b:ae:b4:9a:79:d2:f9:73:e2:
8f:30:35:0b:85:bc:20:ef:ef:2e:a9:89:41:9c:32:
c2:cd:e2:e7:a7:31:fe:51:e7:40:4b:c3:53:5b:07:
c7:22:13:07:90:8c:75:41:73:f8:5c:9f:1f:67:d2:
79:83:c7:1d:47:b5:b9:27:e9:66:7f:64:84:0a:b0:
5e:2a:f2:ce:09:7b:76:77:08:13:11:8f:94:1a:f4:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E7:35:32:2B:10:54:95:47:46:57:E6:BE:19:76:A4:80:41:5E:A0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/C-c1MisQVJVHRlfmvhl2pIBBXqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0-45.88.15.255
86.107.100.0/24
89.34.106.0/24
89.35.130.0/23
92.114.32.0/24
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a0:be:ce:4b:96:b2:10:6e:0d:5f:e6:0c:ad:55:b6:c9:e4:
72:15:03:02:0e:5b:b5:01:7b:a5:26:fb:4c:8d:9e:d2:19:76:
ad:5a:43:ac:80:42:ee:53:a5:67:58:f4:33:58:da:2b:08:6d:
e5:56:5c:b1:00:19:9c:9c:a5:3b:c2:b3:ee:a2:54:e8:db:22:
bd:35:8d:61:5a:87:53:c8:6c:ff:35:d1:5e:c4:ea:29:51:fd:
08:36:3b:1d:29:e9:ac:29:1f:7b:c1:38:3f:77:71:16:e5:11:
3c:99:c7:1d:3b:50:98:2d:ad:bc:d2:7a:64:15:3b:82:95:b7:
e8:fb:95:df:4f:df:3a:17:cc:2e:7f:fb:32:8c:45:9e:7c:8d:
ca:29:17:7d:57:7c:6e:c1:62:37:ae:f5:72:5a:9f:c3:6f:a2:
79:24:c9:38:ae:6a:a4:4b:0e:f8:52:8c:13:f0:a3:0a:e2:f6:
28:69:60:0f:19:d3:e1:fa:76:2a:96:98:7a:c9:05:d6:44:9d:
47:81:5a:28:95:66:da:98:db:56:55:03:78:8c:8b:e9:c7:8d:
5f:80:55:b5:64:40:c4:12:a3:c6:b5:27:76:72:73:13:31:ae:
9d:26:44:eb:7f:03:8c:23:d4:de:e1:fa:ac:10:fb:66:00:47:
e2:4b:5f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org