Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GeyWRTym93goIQ8gv1t040NMOSA.roa
File: GeyWRTym93goIQ8gv1t040NMOSA.roa (raw, json)
Hash identifier: LN7VYfEdpt5CpNxvalnW0Eg88O7c7okta9l8I1PAgNk=
Subject key identifier: 19:EC:96:45:3C:A6:F7:78:28:21:0F:20:BF:5B:74:E3:43:4C:39:20
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189D02DED69E2CB79321E7E6B0DA9254A9A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GeyWRTym93goIQ8gv1t040NMOSA.roa
Signing time: Mon 07 Aug 2023 13:26:58 +0000
ROA not before: Mon 07 Aug 2023 13:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 93.113.171.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 08:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:2d:ed:69:e2:cb:79:32:1e:7e:6b:0d:a9:25:4a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 7 13:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ec96453ca6f77828210f20bf5b74e3434c3920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:e8:b9:64:f9:67:fd:d5:91:5e:17:65:76:
fb:48:ed:6a:7d:38:49:d1:3d:87:dc:e7:91:6f:88:
a7:a6:0f:cc:56:45:c6:59:65:1a:fe:ce:56:fb:6a:
c5:36:6b:7e:a0:4d:5a:4d:c3:ce:d9:a5:8c:32:f4:
63:35:ba:8e:97:1f:ed:09:3d:a6:2b:9e:ff:0a:4c:
b7:df:c1:ce:e9:23:c7:f1:4c:b1:bc:93:b3:64:f0:
7b:df:9d:69:e5:83:fb:00:91:33:7b:12:6a:64:a8:
01:ee:91:a6:ad:cd:6f:75:1f:3f:53:31:a1:54:5c:
72:d8:aa:f4:c5:78:13:eb:c7:25:a3:e6:f4:51:3c:
45:86:75:e6:0e:16:24:5e:e3:06:80:df:44:fa:ef:
71:00:38:a6:1b:fc:98:b6:3a:f4:4a:e7:bc:ad:af:
e4:b7:b3:00:fb:22:69:b2:bd:ab:86:d7:28:17:03:
95:f5:37:7d:9d:44:a5:c8:4e:9b:f9:02:89:7a:f6:
ba:8d:f2:6b:2a:1a:92:8a:33:2e:50:c4:bd:a5:97:
96:61:d3:90:67:57:9b:71:43:2d:07:9a:e8:b2:aa:
b0:e9:32:15:41:84:0b:6c:ec:c4:90:e6:95:66:eb:
a5:8d:fa:af:cc:17:37:ac:2c:5d:15:bb:b3:71:77:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:96:45:3C:A6:F7:78:28:21:0F:20:BF:5B:74:E3:43:4C:39:20
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GeyWRTym93goIQ8gv1t040NMOSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.162.0/24
93.113.171.0/24
Signature Algorithm: sha256WithRSAEncryption
87:14:c5:69:13:da:55:f6:05:e5:38:39:d3:ba:1a:da:ea:03:
d5:f5:21:38:b3:85:96:aa:b6:62:49:d8:ac:4c:b9:c6:20:69:
08:ad:46:09:69:65:7d:f9:1f:fa:50:3c:9d:99:ea:11:99:75:
97:ca:9e:0d:bf:e2:66:d1:da:72:64:5d:da:3c:99:f0:84:7c:
91:ec:ad:94:ee:8e:a4:3c:26:e5:f0:41:6c:a7:f8:79:f2:48:
af:7d:c5:a3:6b:0d:43:f8:f5:4e:bd:65:4f:11:2a:03:c9:fb:
5a:77:0d:6c:c1:e3:a3:58:a6:d4:3f:c1:fa:06:96:89:15:a5:
df:8a:2e:fc:a7:06:94:3d:86:cf:e6:b1:63:d3:b2:c6:01:cf:
83:f9:0c:30:7e:86:53:5e:4b:40:1c:05:27:0d:67:10:3f:dd:
b7:c8:d1:33:2e:3b:57:2a:ca:3d:66:73:e2:72:ef:e6:43:8f:
14:4e:0b:03:0e:40:be:2b:76:3a:96:73:9a:a2:83:7f:e7:66:
6b:2e:0d:0d:ee:cb:f2:95:df:9f:38:60:41:31:e2:4c:70:92:
99:05:6a:9f:d7:ef:5a:e2:bb:ab:89:46:48:73:59:0d:89:d6:
22:1f:89:f3:09:c3:f2:b4:23:99:e7:26:24:cf:77:d6:ce:d2:
9e:c7:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org