Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I-EMDoPAkVADVSLQwV5KmDmI2rM.roa
File: I-EMDoPAkVADVSLQwV5KmDmI2rM.roa (raw, json)
Hash identifier: 1t3V/9j73Wj2Jzp7eRoZ3nNrGdOnxDvK4LyRmbyp2r0=
Subject key identifier: 23:E1:0C:0E:83:C0:91:50:03:55:22:D0:C1:5E:4A:98:39:88:DA:B3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188C53F0F1B2A27EC629AE06D7CADF308E1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I-EMDoPAkVADVSLQwV5KmDmI2rM.roa
Signing time: Fri 16 Jun 2023 17:27:04 +0000
ROA not before: Fri 16 Jun 2023 17:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 17:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:3f:0f:1b:2a:27:ec:62:9a:e0:6d:7c:ad:f3:08:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 16 17:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23e10c0e83c09150035522d0c15e4a983988dab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:f5:d4:a8:65:f1:6f:4d:34:c7:c0:a6:f5:
0c:6d:3a:32:77:4a:2a:9c:85:c7:bc:3a:b0:db:ad:
a9:be:49:3d:00:27:61:be:bd:01:d8:38:bf:b7:7a:
34:c0:3c:69:d6:8f:af:e1:dd:01:49:21:df:c4:63:
dd:0d:59:49:0c:e4:5e:b7:60:32:66:46:f3:5b:dd:
62:c3:2e:45:ae:21:68:c9:d8:2c:c7:0c:52:73:cd:
d6:37:59:ed:79:eb:33:bb:63:2c:c4:05:8b:7a:18:
fe:19:39:de:9b:90:6a:8f:62:61:52:7f:6e:cc:b7:
5a:46:ce:f9:e9:6f:b0:5a:08:ac:f0:cc:35:5f:61:
7f:33:b6:85:eb:60:39:da:f8:3c:5c:61:88:b4:d3:
ab:2b:a3:ec:55:f0:9b:34:00:d9:43:3d:c3:42:d1:
6f:2f:c4:b6:5b:92:fd:6a:e4:9d:42:fb:84:d8:20:
77:58:0f:cf:83:43:85:01:51:0c:33:5e:97:e4:14:
a4:d5:a2:38:8f:9a:f9:43:da:9e:80:0d:4c:61:70:
af:32:80:e0:d2:74:00:68:1d:a0:ed:e8:e7:9c:1b:
94:8a:28:0a:ad:af:84:9d:98:d3:2f:ed:cc:1b:dd:
62:a2:0e:56:1e:ea:11:dd:38:ae:1c:99:b8:78:42:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E1:0C:0E:83:C0:91:50:03:55:22:D0:C1:5E:4A:98:39:88:DA:B3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I-EMDoPAkVADVSLQwV5KmDmI2rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
77.81.88.0/24
86.107.51.0/24
89.35.130.0/23
89.45.35.0/24
92.114.32.0/24
94.198.171.0/24
176.223.188.0/24
188.214.107.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c7:0b:ec:49:f8:2f:1c:75:a1:1d:57:44:43:93:6f:f2:74:
5b:b1:fc:d5:6b:96:a0:11:35:b1:44:37:9e:25:e6:d5:df:a8:
ea:df:b9:71:98:76:1d:10:34:4c:bd:60:24:06:6b:b7:74:9a:
af:04:9b:91:45:64:7e:f2:b2:79:40:2d:11:0d:69:d3:87:21:
ed:75:b4:cb:87:c3:54:f0:26:6e:bc:a6:c4:67:9d:c7:45:a5:
95:38:87:e7:73:97:48:9f:6e:16:98:96:ad:92:11:ef:c1:8e:
11:7f:70:87:7f:08:80:e5:e8:a8:d3:2b:86:c5:30:fd:d4:4e:
77:f7:af:45:2b:24:da:e3:de:30:39:4e:59:7d:fe:9d:e1:d3:
24:e4:ef:28:4e:15:9e:06:6e:58:2c:81:59:2d:90:85:aa:16:
11:e7:9e:72:f8:bb:50:88:f1:74:d4:30:f4:4d:84:be:a5:25:
52:96:23:03:f8:76:ba:22:a7:c1:1a:8e:12:82:94:49:5e:7d:
cc:d9:6a:12:04:2e:f9:5d:7b:a9:0a:35:17:08:f6:cf:de:21:
41:41:95:da:fa:30:74:da:3f:52:6b:b8:be:e8:cc:83:67:a4:
f4:e7:b3:0f:77:fc:6e:70:10:e5:7e:13:8a:05:74:1b:9a:32:
3b:2b:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org