Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Lh3ldc_-HB30vxpkL95i1dfgrJg.roa
File: Lh3ldc_-HB30vxpkL95i1dfgrJg.roa (raw, json)
Hash identifier: mY/h6Z0X46Wbk04eODqyQG8PQBtBubVaMJdfkkxdxJo=
Subject key identifier: 2E:1D:E5:75:CF:FE:1C:1D:F4:BF:1A:64:2F:DE:62:D5:D7:E0:AC:98
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C6422B88B57C846B63301DB3375747FC6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Lh3ldc_-HB30vxpkL95i1dfgrJg.roa
Signing time: Wed 13 Dec 2023 17:04:06 +0000
ROA not before: Wed 13 Dec 2023 17:04:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 89.37.193.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:22:b8:8b:57:c8:46:b6:33:01:db:33:75:74:7f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 13 17:04:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e1de575cffe1c1df4bf1a642fde62d5d7e0ac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:4e:69:4e:2e:16:69:1e:9f:d9:bf:16:8e:
16:9a:aa:00:49:d7:0b:1c:e5:e2:b2:d9:4c:a6:51:
8c:0f:06:3a:cd:6d:71:3e:11:4b:d4:91:03:5c:82:
4c:68:26:ee:b2:9d:35:c1:7f:41:d0:45:88:3f:54:
91:29:fb:b3:c9:ac:8a:f3:52:d9:9c:81:3c:f2:41:
b6:17:91:86:39:90:5b:9b:6d:a1:6b:53:48:62:c8:
f2:ee:91:a7:96:b7:90:80:73:22:1b:dc:ae:5f:f2:
70:dc:da:d4:b0:a7:08:65:98:ac:63:2c:dc:c4:23:
ad:99:2a:cc:f6:25:20:ee:23:69:3f:0d:3b:9e:67:
4c:5b:f7:1c:f5:f9:41:c8:c9:27:6a:b9:bb:28:68:
cb:d7:ee:89:f4:f7:a9:a2:04:7e:ba:ef:74:0e:15:
bc:df:fd:36:c3:27:94:4b:73:43:8e:4c:ce:74:c5:
11:1f:8b:9f:9a:c0:ed:65:a2:6e:41:81:f5:75:30:
b7:36:5c:03:99:37:7d:d9:8e:5f:97:4e:df:ab:1e:
62:9f:48:4f:aa:c8:96:38:1b:31:61:7a:59:f6:a0:
b2:49:67:34:e6:94:e1:2b:a2:da:0f:49:30:19:2c:
a3:72:26:fd:89:ac:02:de:0e:6d:b8:93:ae:4c:3c:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1D:E5:75:CF:FE:1C:1D:F4:BF:1A:64:2F:DE:62:D5:D7:E0:AC:98
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Lh3ldc_-HB30vxpkL95i1dfgrJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
89.37.193.0/24
89.40.215.0/24
Signature Algorithm: sha256WithRSAEncryption
18:bc:1f:d3:27:de:82:2c:f8:64:01:df:91:74:5e:40:76:47:
8a:58:55:fc:8f:a0:6f:c3:c9:ad:71:c4:06:85:bc:7f:aa:18:
9a:fe:33:2b:13:63:63:29:c8:f7:50:dd:14:bc:86:36:ef:cc:
0f:af:04:5e:80:4e:52:4b:6e:c1:62:55:aa:09:ac:a7:5d:2f:
b1:da:1c:75:9b:58:7d:ff:fd:5b:8f:20:23:ab:56:82:6f:bf:
22:cf:7b:42:4c:77:3c:97:7a:91:86:86:d8:e0:66:bb:08:8d:
59:00:a3:56:42:c3:ba:1c:78:39:b8:db:ad:41:e1:69:f5:13:
e7:47:25:94:3b:54:13:bf:18:40:3a:b2:ca:60:7b:2a:35:79:
2f:c8:04:20:21:fc:32:e8:96:90:38:b1:0d:24:45:74:1c:a5:
61:5d:9b:5a:dd:57:b2:2b:55:53:57:b0:8f:3a:30:70:79:0e:
ff:51:71:9f:de:00:f0:79:27:2b:79:b6:3c:1c:f6:84:a9:eb:
4b:ab:a3:d5:91:81:cc:af:44:66:0d:5e:29:07:cf:09:c8:51:
74:e9:c6:3d:68:87:79:19:c2:f4:49:5e:e9:5c:93:38:b5:35:
de:70:c8:3c:87:81:4e:6b:27:9a:ca:5b:56:ed:79:d0:0e:c9:
16:89:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org