Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DO30sUtObWw3Au-8foMZ06Hyvhg.roa
File: DO30sUtObWw3Au-8foMZ06Hyvhg.roa (raw, json)
Hash identifier: oJfwj0eifCICkKpZxVWp3Bo2zTs4rcIHjwHyZnuvI8o=
Subject key identifier: 0C:ED:F4:B1:4B:4E:6D:6C:37:02:EF:BC:7E:83:19:D3:A1:F2:BE:18
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A126E7D2C10BFB79947E4AE54937DC1E4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DO30sUtObWw3Au-8foMZ06Hyvhg.roa
Signing time: Sun 20 Aug 2023 10:12:25 +0000
ROA not before: Sun 20 Aug 2023 10:12:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 10:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:12:6e:7d:2c:10:bf:b7:99:47:e4:ae:54:93:7d:c1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 20 10:12:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cedf4b14b4e6d6c3702efbc7e8319d3a1f2be18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:df:27:67:de:fd:10:00:7a:26:f0:79:4e:
0d:f9:f8:bf:ad:0c:0b:84:7f:6e:2a:0d:c1:70:95:
52:90:3d:d5:3b:c6:f3:b8:c3:22:71:48:60:07:64:
db:36:a1:56:48:aa:ee:c6:06:89:c3:30:6d:ff:c5:
ff:d1:14:3e:d4:ad:6e:bb:2c:16:a9:3b:42:31:09:
7f:a0:44:2a:3c:a7:34:16:4d:96:ca:2a:b5:ae:6a:
c5:9f:38:a9:0c:3c:85:d1:3a:68:0a:b4:6a:95:fb:
67:75:47:6b:e9:33:2d:a3:66:bb:25:87:31:39:36:
44:a2:01:7e:d6:2b:85:02:be:5e:cd:09:62:51:68:
6f:4b:ba:43:94:ed:7b:c1:1e:c7:e5:44:6b:04:49:
bf:f8:37:91:29:31:1f:5f:6b:7a:03:ef:36:56:ad:
a5:f9:14:7f:63:d3:e3:ec:d5:2a:7c:99:6e:d5:2a:
63:17:6d:79:d1:a0:0e:41:ab:07:ac:44:65:c8:75:
b5:7c:b6:a5:94:21:78:74:9b:58:83:fe:95:38:77:
6f:6c:84:a7:39:3b:c8:2a:5e:d7:57:2f:9b:ae:16:
d4:7f:a0:56:95:a0:00:d9:4f:fe:47:eb:5f:99:1e:
0f:36:2b:7c:f3:d9:c1:32:d4:12:2a:71:d9:86:91:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:F4:B1:4B:4E:6D:6C:37:02:EF:BC:7E:83:19:D3:A1:F2:BE:18
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DO30sUtObWw3Au-8foMZ06Hyvhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
89.34.106.0/24
89.34.219.0/24
89.47.36.0/24
89.47.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a6:48:b1:10:5e:99:89:b9:1a:91:96:63:29:5b:ac:43:57:
34:78:6a:23:82:d0:6c:9d:09:3a:f8:3b:c0:85:36:37:2e:a8:
6b:f8:cd:0f:0f:94:b2:24:d0:48:25:7f:36:bf:46:42:da:af:
1e:38:de:47:fd:8f:22:82:a8:18:b5:e9:98:12:05:88:03:5a:
54:dc:b5:34:28:76:23:b4:b7:55:28:53:1a:56:cc:36:86:89:
e8:c1:02:cf:38:f0:5c:b6:0e:b7:49:35:3a:c5:e4:b4:42:61:
5e:d0:95:fd:0f:78:e0:83:44:9d:b2:7e:ab:5b:c7:f6:c8:08:
50:93:13:9c:a3:05:75:0d:a9:be:1d:47:8c:52:bf:7e:d0:d6:
47:f2:e0:6c:1d:cb:d0:ab:a4:ce:6a:08:9c:94:70:26:d4:32:
72:a1:78:70:c3:cf:b9:7b:e8:94:f1:2a:17:42:17:bc:02:f8:
43:67:45:3c:c5:0a:8c:8b:57:85:c0:0d:a2:21:b1:87:92:85:
44:fb:66:4c:2f:5f:ea:55:90:38:d3:d3:f1:2e:0e:68:46:49:
e6:4a:97:32:da:5a:c3:fa:26:80:01:1a:d3:6a:b8:2e:dd:43:
58:d5:dc:2d:b2:78:c0:bd:c7:e8:60:1b:2f:e9:07:5d:e7:ba:
50:95:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org