Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IEsKxS1BvBFTnhdP5Ba956OiHRU.roa
File: IEsKxS1BvBFTnhdP5Ba956OiHRU.roa (raw, json)
Hash identifier: Bt2kLaXcB5ZjDttzmNECbEapsPGFsUMKCr1Hs1nPuuQ=
Subject key identifier: 20:4B:0A:C5:2D:41:BC:11:53:9E:17:4F:E4:16:BD:E7:A3:A2:1D:15
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018ADF76D5F4AF7CA65557FE2566CAAF3D70
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IEsKxS1BvBFTnhdP5Ba956OiHRU.roa
Signing time: Fri 29 Sep 2023 05:43:41 +0000
ROA not before: Fri 29 Sep 2023 05:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211318
IP address blocks: 89.34.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 06:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:76:d5:f4:af:7c:a6:55:57:fe:25:66:ca:af:3d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 29 05:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=204b0ac52d41bc11539e174fe416bde7a3a21d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:89:49:af:6b:92:7d:7c:e6:1f:61:02:b9:99:
88:65:a6:1d:e4:9e:93:e1:f5:33:4d:5a:2a:39:ce:
42:59:ef:17:c9:05:8f:ea:56:e2:68:d6:62:b4:2d:
cb:e7:8b:52:59:d3:de:16:04:46:f5:5d:b7:e9:eb:
cb:e9:ba:8c:cd:36:5c:84:74:0f:59:5c:4d:d4:d8:
8f:5a:b9:ee:97:11:72:dc:67:5f:70:0e:e2:e5:56:
e5:cd:14:c9:eb:6e:f3:9e:4e:eb:60:39:5b:41:ae:
08:08:54:86:63:82:1c:67:4f:6d:a5:e4:ec:b6:3c:
23:40:7f:11:0c:72:04:fe:7f:f3:77:2f:e6:49:e2:
b7:31:d5:e6:ee:d8:62:18:ec:72:57:93:9a:3e:b0:
8d:ee:c8:64:8e:f1:02:92:a2:a8:9a:58:68:69:8a:
e5:a2:8b:48:95:a9:e8:f3:e4:33:12:da:03:03:f5:
85:7b:4f:21:e9:14:92:21:f8:0e:90:c3:d7:f3:30:
2a:b6:b1:86:ce:36:73:b1:f8:c5:a8:95:aa:cb:77:
86:5c:1a:9b:46:a5:5b:53:80:56:8f:4e:de:09:86:
ca:f1:f3:e1:38:79:45:be:d3:e3:7e:1b:1f:93:80:
2f:08:b2:d1:b7:c4:3c:3a:1e:9a:fc:e1:78:b4:f2:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:0A:C5:2D:41:BC:11:53:9E:17:4F:E4:16:BD:E7:A3:A2:1D:15
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IEsKxS1BvBFTnhdP5Ba956OiHRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.106.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bb:8f:e6:74:be:82:7e:d1:c7:43:d0:81:52:44:45:f8:d0:
73:da:ca:a4:f3:87:34:19:7f:c7:a5:39:07:34:9d:3a:85:02:
87:a1:70:7b:8e:63:ad:c3:24:19:aa:0c:7d:e8:ec:a4:d8:ca:
83:e6:cd:6c:62:b3:a8:20:8c:9a:c1:44:32:4b:00:bd:7d:13:
31:fb:fd:1e:4b:7d:b0:0f:bf:c1:54:e3:ac:e2:36:a4:a6:af:
26:11:e7:4b:cd:1a:a2:be:07:6c:ee:a8:3d:22:eb:12:88:8f:
1f:0e:a8:09:1a:b9:13:bb:81:d1:50:71:e9:b8:7d:da:e6:0f:
a3:92:61:bf:2c:72:78:f5:40:60:74:c0:73:89:48:05:ef:b5:
35:ba:33:25:5b:55:0a:c8:37:42:ea:bb:f4:71:8e:32:3e:c8:
3f:c7:b0:0b:cd:ac:b8:3e:01:51:2c:da:14:c6:8d:72:33:82:
46:a7:d3:f1:3d:8a:6f:e0:cd:e4:64:10:4e:15:2e:9a:00:19:
f3:ab:00:0b:0e:2b:22:47:c4:27:bd:51:80:ef:b3:12:18:d6:
b7:b6:7e:b1:01:cb:f8:a6:55:dd:16:38:95:70:a5:95:5f:46:
95:55:4c:e7:2f:59:97:cf:26:79:58:f7:79:7a:29:33:f5:55:
0d:91:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org