Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ItRLGlU2PjlHx91JYFrxSnxZCeU.roa
File: ItRLGlU2PjlHx91JYFrxSnxZCeU.roa (raw, json)
Hash identifier: W5OCr0SKXBDhIN33hEraOMnhRjdJCDz3zEc0eZlpKMU=
Subject key identifier: 22:D4:4B:1A:55:36:3E:39:47:C7:DD:49:60:5A:F1:4A:7C:59:09:E5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E3B74A94ED4F9AF10312DE3FC95B4B24A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ItRLGlU2PjlHx91JYFrxSnxZCeU.roa
Signing time: Thu 14 Mar 2024 05:34:45 +0000
ROA not before: Thu 14 Mar 2024 05:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60647
IP address blocks: 46.102.237.0/24 maxlen: 24
89.35.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 17:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:74:a9:4e:d4:f9:af:10:31:2d:e3:fc:95:b4:b2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 14 05:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22d44b1a55363e3947c7dd49605af14a7c5909e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:0d:76:c3:47:43:f2:ff:3a:d8:6f:36:fb:
95:7f:59:01:69:84:4a:f4:7b:3d:e5:16:dd:4f:2e:
b8:9b:17:f0:46:5d:4c:d9:db:56:ed:c9:15:e1:d4:
45:a0:46:3a:a8:1a:21:1c:c5:2e:d2:8f:f3:2e:95:
3e:16:19:e8:b0:fd:0e:d8:43:75:7c:b0:fa:1f:5e:
a6:36:be:27:5c:d4:b2:4c:57:a8:02:cb:fe:fd:21:
e9:19:7d:00:4a:8a:e1:79:32:59:e3:e7:24:aa:74:
82:f5:8d:ed:d4:63:2e:e0:fa:00:6f:13:c3:f1:21:
f2:dd:35:e9:aa:a1:ca:18:a5:56:cd:f6:12:d5:1a:
80:48:72:df:4d:cb:e5:a6:70:75:8b:1f:56:d1:c3:
05:7b:ab:8c:7e:d6:6d:c3:5f:f0:25:74:29:17:85:
d6:20:5a:38:74:ca:86:ee:47:9a:a6:71:f0:0b:46:
62:26:a4:38:7b:37:bd:32:c6:65:ee:d5:d1:98:ab:
b7:22:4c:16:2e:c2:cd:7e:23:6f:8a:7c:32:fe:b7:
47:43:2e:9a:87:3a:4b:67:f7:14:da:c2:c4:de:0c:
d4:b5:47:f0:66:4d:f2:1f:dd:39:2b:fc:ad:cf:f7:
e8:d5:ef:86:26:be:66:5e:7e:fc:9b:8b:6d:7e:1f:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:4B:1A:55:36:3E:39:47:C7:DD:49:60:5A:F1:4A:7C:59:09:E5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ItRLGlU2PjlHx91JYFrxSnxZCeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
89.35.73.0/24
Signature Algorithm: sha256WithRSAEncryption
60:01:e1:99:b0:14:20:66:20:d5:cc:61:47:e4:61:83:f9:90:
2f:d5:22:6b:7f:91:a6:d6:3f:9a:95:60:d9:35:54:e7:70:5e:
d7:92:6e:e5:71:7f:63:e0:db:bf:a3:e5:ba:1e:19:60:31:7f:
bf:85:12:a0:a9:8c:da:0c:ac:45:ce:67:a7:33:e5:73:cf:25:
97:62:f5:a0:f9:af:4d:8a:02:0c:49:31:ba:15:dd:d9:15:dc:
1d:b2:de:a9:e6:d8:72:f0:1f:59:dd:7c:54:14:76:6b:ab:2d:
50:ef:b9:5a:e9:f0:00:9e:1c:e1:fc:f1:5b:dd:0d:98:f9:29:
5a:20:d4:7e:ec:b9:71:3f:7f:19:8f:5b:ce:86:ea:33:ad:2b:
00:e4:1d:de:77:84:80:36:87:e3:6f:ee:df:e6:8e:bb:f5:64:
32:db:08:e8:d2:18:a1:0f:0f:be:43:3a:94:0a:77:4b:d3:81:
fd:97:8a:9c:36:5d:b4:0a:c1:9d:ef:54:df:70:f4:82:57:0a:
2c:a3:fa:71:60:ff:f1:9b:0d:1a:e3:33:e0:77:70:c0:6d:e8:
c0:df:71:48:fd:b1:2e:87:fe:fe:ba:b3:c1:86:9e:f2:2d:df:
5b:c5:b8:0c:32:a7:fe:a7:9c:59:55:1b:b4:7e:e0:51:2f:b5:
0e:d5:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org