Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IJb-rHnMbbDf9ZMTnXQfNLXDVek.roa
File: IJb-rHnMbbDf9ZMTnXQfNLXDVek.roa (raw, json)
Hash identifier: PL+p1ayqOGUUI5012l4QvSAvTf3ClPzRojNJvc52JUA=
Subject key identifier: 20:96:FE:AC:79:CC:6D:B0:DF:F5:93:13:9D:74:1F:34:B5:C3:55:E9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0186DB66869DE973DA33D0E1CF1526C75AE1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IJb-rHnMbbDf9ZMTnXQfNLXDVek.roa
Signing time: Mon 13 Mar 2023 14:36:14 +0000
ROA not before: Mon 13 Mar 2023 14:36:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 37.156.5.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.39.125.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 13:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:66:86:9d:e9:73:da:33:d0:e1:cf:15:26:c7:5a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 13 14:36:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2096feac79cc6db0dff593139d741f34b5c355e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:3a:9b:f8:3b:e4:fe:5e:88:8d:42:91:de:
9e:43:89:69:58:65:7a:29:27:5f:57:96:30:c1:a1:
13:c0:94:cf:6f:29:c4:07:e3:41:fc:61:e8:5d:17:
bc:6d:dc:50:cc:77:cc:2e:38:28:a4:a7:89:16:88:
35:87:9f:8f:c9:9e:46:8b:31:a8:c4:de:4d:b6:52:
8d:65:6a:b4:19:88:00:6e:d8:64:09:4c:d3:6c:06:
c4:12:58:65:b3:fa:e9:14:2e:39:de:33:e1:91:1e:
9c:d5:2b:a7:9c:7c:5a:be:9a:37:f0:9f:ca:e0:81:
1f:9f:d2:18:75:10:79:d3:19:ff:73:0f:7f:01:7a:
c2:b5:c2:44:e3:8b:9e:8e:19:9d:db:aa:11:94:12:
1d:0f:62:8e:2f:a4:93:86:b2:f4:40:68:80:d0:c6:
6d:ec:3f:19:8d:e9:85:4f:9e:55:34:40:6b:6d:0d:
84:33:03:41:ca:25:8d:48:0b:b8:5d:c4:4d:ff:0e:
f4:a7:92:75:80:11:35:2b:aa:31:f7:fc:7c:60:10:
de:21:b0:60:cb:40:d3:5a:57:88:a2:44:c9:5f:6d:
38:98:87:9c:70:01:c5:4e:cb:db:71:c5:c1:1a:93:
8e:dc:64:c1:96:8a:4a:22:40:1f:11:1f:a7:05:c4:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:96:FE:AC:79:CC:6D:B0:DF:F5:93:13:9D:74:1F:34:B5:C3:55:E9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IJb-rHnMbbDf9ZMTnXQfNLXDVek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.5.0/24
77.81.65.0/24
89.34.106.0/24
89.39.125.0/24
89.40.215.0/24
89.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fd:2b:7f:1d:d1:30:df:77:2c:ec:b4:52:ee:44:65:12:55:
00:29:33:41:1b:96:0e:31:33:c4:17:16:6e:ee:71:d2:df:36:
57:b4:56:68:46:dc:ba:9e:09:81:1d:b8:18:49:0b:25:93:f1:
42:98:7d:8a:e1:55:14:53:d5:38:5c:24:85:4f:41:e9:3e:6f:
bf:23:60:4f:91:d2:8c:a6:0b:a3:2b:a7:2c:b9:8f:94:b5:63:
ee:5a:fd:0a:9a:c2:c1:5f:d6:4c:8d:99:ad:36:f0:e3:5d:99:
f7:86:47:37:8b:6c:d1:09:55:f7:90:8d:7a:4c:28:48:18:c9:
07:e9:1a:b7:1e:1f:c5:e5:56:d9:64:92:a5:f3:c6:d7:6a:5c:
6f:d7:42:02:3e:c7:2d:a4:a3:02:fe:b8:13:5f:7f:55:a5:35:
3c:0d:a4:7e:1f:07:16:04:88:91:8a:53:42:03:db:88:30:f7:
26:06:59:f8:99:16:26:ba:13:fd:7b:f8:02:ab:00:27:86:ae:
ba:43:f6:c6:c8:7c:d0:20:9a:ea:8e:b6:d6:a5:e7:d8:27:8a:
f9:53:aa:86:51:a7:b8:8e:af:eb:76:f8:6c:6e:f3:80:53:43:
fe:24:b9:90:d8:9c:2b:f8:d5:d2:82:d9:83:e5:2a:d4:c7:71:
98:e6:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org