Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F9aX3Ijk8_lT77XkrDTH9Q35iQ8.roa
File: F9aX3Ijk8_lT77XkrDTH9Q35iQ8.roa (raw, json)
Hash identifier: CXaVNOYQ2w/2FEp6uomVEP1QxlBXdG7IoZ42EWktoWk=
Subject key identifier: 17:D6:97:DC:88:E4:F3:F9:53:EF:B5:E4:AC:34:C7:F5:0D:F9:89:0F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A6B18AF4CCBF081BB8746F7632521F576
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F9aX3Ijk8_lT77XkrDTH9Q35iQ8.roa
Signing time: Wed 06 Sep 2023 15:24:54 +0000
ROA not before: Wed 06 Sep 2023 15:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 92.114.93.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
45.88.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 14:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:18:af:4c:cb:f0:81:bb:87:46:f7:63:25:21:f5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 6 15:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17d697dc88e4f3f953efb5e4ac34c7f50df9890f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:d5:ab:d3:b0:9d:c6:88:b5:45:dd:d9:8c:
a0:db:8a:ae:61:a7:aa:03:e4:5a:a6:bf:0d:8e:15:
ea:1f:fd:51:2b:1a:26:d1:1f:c6:cf:54:2f:a9:d6:
0a:0e:b1:37:82:e6:28:8c:f6:b9:b9:0b:81:d7:eb:
69:66:25:f0:96:03:ac:85:c3:ab:45:9c:33:b8:00:
b3:01:bf:da:ce:42:c9:aa:36:e8:c2:3d:e9:a0:7b:
6f:c8:08:88:77:e2:d9:65:1b:d6:e2:a7:4d:76:e0:
e5:2a:5d:d5:60:78:86:b4:b9:b0:63:e2:b8:d9:e9:
48:e7:1f:d1:f9:6a:b7:12:b4:b2:99:a3:76:e0:f4:
4a:34:80:bc:78:2e:a1:54:0c:69:65:39:59:76:cd:
56:6b:ba:aa:7c:7a:f7:57:3a:d5:11:9c:d3:99:b2:
bb:0d:75:fa:2c:54:f3:b4:95:57:e7:05:9c:53:0a:
c6:19:97:79:bd:3a:0a:a0:e3:13:6c:03:33:8d:d4:
1f:a8:81:25:cc:0c:4c:ee:37:7a:1d:92:d6:d3:ce:
3d:72:35:5f:c0:c1:dc:cc:0a:67:c0:b5:d6:be:ff:
51:4e:cb:ea:54:ef:f2:78:6f:38:82:dd:17:4b:3a:
44:90:54:2f:f2:74:af:07:92:05:e6:c5:db:4c:fe:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D6:97:DC:88:E4:F3:F9:53:EF:B5:E4:AC:34:C7:F5:0D:F9:89:0F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F9aX3Ijk8_lT77XkrDTH9Q35iQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
89.40.215.0/24
89.43.62.0/24
92.114.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:28:79:0d:fc:37:48:82:0e:a4:c6:5e:9b:f4:0d:da:da:01:
a1:c7:da:9d:0a:40:b4:05:ea:cf:fb:35:2f:5b:32:d5:19:e1:
6c:63:15:95:c9:3f:e5:96:b0:f7:5b:96:b0:dc:25:83:c9:b3:
ab:bc:d5:87:16:17:ef:3d:24:c9:c8:61:c6:2b:ee:db:5b:f4:
9c:8b:1c:2f:54:95:14:74:18:a5:d9:bb:d9:a5:6e:c4:20:31:
80:a6:32:fd:0c:03:b0:f8:a4:b9:df:3f:7a:e2:29:62:13:bb:
61:9c:f1:ac:91:39:1b:6b:ad:f6:27:80:3b:d9:98:06:89:dd:
1b:98:f1:7d:63:c1:ec:4f:d0:00:38:28:91:af:d9:0d:d9:94:
a9:07:a5:50:cd:a2:70:87:03:19:cd:ea:60:c5:cf:be:db:dc:
6a:6d:dc:80:2e:a9:cd:a4:e5:aa:11:81:a5:88:c7:21:1e:f4:
1b:92:f3:1c:da:34:02:15:1d:02:24:95:4a:d1:a5:28:8d:e1:
ca:84:65:64:ac:c8:a3:ab:43:dc:37:30:19:47:4e:4e:fc:f7:
92:d0:25:e6:bf:a6:f9:8e:61:36:29:29:ae:cb:46:94:26:7b:
af:18:a6:06:55:7a:3e:0d:a0:f2:7a:8b:9d:a3:c1:8b:90:35:
fc:93:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org