Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/D7z7Ze_I93yrHX9tyY7dB4DgwL8.roa
File: D7z7Ze_I93yrHX9tyY7dB4DgwL8.roa (raw, json)
Hash identifier: 3ioh9JrYqelyMaH9ws2IBaX6W9HuiBQ85rUioDjWvWM=
Subject key identifier: 0F:BC:FB:65:EF:C8:F7:7C:AB:1D:7F:6D:C9:8E:DD:07:80:E0:C0:BF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018907C0686CD2D2C5732086B28DA5D2C8CF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/D7z7Ze_I93yrHX9tyY7dB4DgwL8.roa
Signing time: Thu 29 Jun 2023 15:23:17 +0000
ROA not before: Thu 29 Jun 2023 15:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.37.195.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 08:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:c0:68:6c:d2:d2:c5:73:20:86:b2:8d:a5:d2:c8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 29 15:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fbcfb65efc8f77cab1d7f6dc98edd0780e0c0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:9d:d9:5f:ae:99:68:d6:3a:d1:47:4b:6e:
a5:10:2e:f3:ed:37:eb:75:1e:cd:7c:a8:d7:72:5a:
10:13:a4:3a:33:11:4c:c0:86:40:9f:8f:8f:9f:4d:
68:55:34:a1:62:17:e7:31:6d:25:38:4b:f2:7f:f0:
df:4c:f4:47:64:50:29:46:03:0b:0b:e6:30:52:05:
3b:c9:d3:e5:01:6b:df:71:cb:60:03:d6:78:da:eb:
65:4e:8c:23:3f:5b:b8:1e:29:ef:13:bf:ea:74:8b:
65:5e:dd:ea:83:76:44:ee:76:bf:0b:19:7f:63:95:
75:4e:6b:57:03:f4:64:c8:08:7d:0f:31:48:79:99:
a7:b6:f4:43:74:cb:1e:e9:92:62:be:de:7d:24:7a:
e1:55:15:e9:35:81:3d:59:13:40:3d:e7:73:92:09:
31:5e:a3:32:b4:b9:bb:cf:91:04:8c:48:99:c9:fc:
23:c7:1c:ad:a4:22:4a:a2:0e:8e:39:e6:a9:30:00:
b1:a1:37:ef:b1:68:90:de:52:38:b1:9a:c1:93:16:
10:6c:db:56:2f:74:fc:a3:78:53:cc:07:2c:cb:7e:
cd:da:45:69:30:f6:b3:24:4a:16:d0:df:12:7e:a7:
3d:e1:9e:ca:6c:4c:6a:b5:73:25:85:da:bd:6b:e5:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BC:FB:65:EF:C8:F7:7C:AB:1D:7F:6D:C9:8E:DD:07:80:E0:C0:BF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/D7z7Ze_I93yrHX9tyY7dB4DgwL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
85.204.18.0/24
86.105.4.0/24
86.107.51.0/24
89.34.202.0/24
89.36.140.0/24
89.37.195.0/24
89.40.36.0/24
89.45.35.0/24
176.223.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f7:d1:6b:ec:93:bc:2b:1d:ff:a8:b0:c7:ea:1b:e9:75:e2:
46:1e:cd:92:e7:4e:36:2b:8f:c2:74:26:e2:9a:a1:f9:9e:c3:
21:6c:cc:6a:6e:35:ed:3f:8d:d8:f8:e0:ef:f1:a9:e7:e8:be:
56:6f:ba:c0:49:e1:63:d5:a5:5c:30:91:71:5e:86:c7:a3:6b:
91:99:49:d9:db:36:ec:e8:e3:67:3c:38:5b:cd:35:46:33:19:
3a:4d:b9:5f:32:9e:03:2f:0b:b5:1d:5c:ba:50:e2:ea:f7:eb:
7c:8f:24:e8:75:f7:5d:cb:9b:48:c0:cd:ec:c8:e5:4b:dd:19:
a3:17:e6:29:42:f8:95:2d:d8:eb:39:8c:e4:49:a7:9e:6f:2b:
79:25:31:59:b6:79:a7:6a:66:a7:09:4a:66:77:14:84:07:40:
f0:4a:ef:b7:e9:5a:eb:dd:eb:e4:62:8e:d7:7d:bd:80:87:18:
74:bf:d7:3e:f3:d1:b4:03:f5:a7:99:ff:3e:fa:55:2f:7b:73:
3a:0d:56:74:58:7b:b9:76:d9:fd:32:2d:53:91:9c:13:6a:c2:
1b:7a:2c:6a:80:86:3a:18:25:2a:8b:4b:42:3a:9a:97:2c:b8:
ee:00:5e:b6:d2:ff:99:9e:b0:b3:9e:17:5e:7e:b2:0c:5c:14:
b7:7d:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org