Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NbI8RG-IxncXSmwjV0vpWQyyXi0.roa
File: NbI8RG-IxncXSmwjV0vpWQyyXi0.roa (raw, json)
Hash identifier: gGh8BfYu4l0Qlhl8/ECh8MzdguDA9szEMnDRUvpucho=
Subject key identifier: 35:B2:3C:44:6F:88:C6:77:17:4A:6C:23:57:4B:E9:59:0C:B2:5E:2D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019262AD2C5A15BA1CDDA3B512E588074840
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NbI8RG-IxncXSmwjV0vpWQyyXi0.roa
Signing time: Sun 06 Oct 2024 16:32:49 +0000
ROA not before: Sun 06 Oct 2024 16:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 89.40.70.0/24 maxlen: 24
93.115.104.0/24 maxlen: 24
185.141.218.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 06:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:62:ad:2c:5a:15:ba:1c:dd:a3:b5:12:e5:88:07:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 6 16:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35b23c446f88c677174a6c23574be9590cb25e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:55:bd:05:bf:b7:25:26:99:3d:7e:b6:31:
45:fa:6f:70:71:47:d9:98:d3:3c:e7:53:5d:aa:0c:
23:46:3b:a0:67:7a:d1:a1:3e:9b:6f:63:03:32:29:
76:31:b8:8c:aa:44:4b:e4:69:94:b7:da:51:cf:0f:
8e:b0:89:13:0f:2f:ca:1a:3c:69:f0:c2:a9:ee:5b:
06:63:12:f6:f4:5d:3c:84:9f:73:52:3d:b3:66:e2:
98:6f:33:b9:e7:31:28:04:9c:b9:b0:f7:04:ee:be:
45:a1:4b:bd:ea:c7:29:73:cf:28:f7:7c:78:6c:01:
86:2b:09:15:e2:ee:35:80:e3:a9:34:7e:e7:14:a3:
68:c2:3d:11:02:4e:cc:d7:1f:72:1d:85:22:15:b3:
58:64:df:49:b9:91:35:3c:89:95:44:2c:95:d6:6d:
2f:06:fe:63:43:40:da:84:d9:f9:66:53:69:87:63:
de:76:0d:42:a9:8f:f2:ec:51:de:48:47:e3:95:ed:
d0:42:62:17:eb:e9:8a:99:5f:04:fe:eb:41:00:5a:
c3:2f:b3:ea:7e:0d:49:45:e3:1f:ce:8e:1c:ac:9e:
7d:7a:a4:64:03:40:3e:b6:82:d3:75:f8:cb:89:63:
f7:c1:1c:f5:cf:57:65:92:da:1c:7b:9b:3c:1d:30:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B2:3C:44:6F:88:C6:77:17:4A:6C:23:57:4B:E9:59:0C:B2:5E:2D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NbI8RG-IxncXSmwjV0vpWQyyXi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.70.0/24
93.115.104.0/24
185.141.218.0/24
185.198.235.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ad:57:79:6c:1e:b8:c5:e8:e7:43:8e:7c:5b:4a:f9:64:ac:
10:8e:94:1c:ed:4a:13:e3:71:3f:a3:82:ac:5c:2a:a8:8d:f1:
5c:59:38:c9:b2:61:2a:3d:6d:1f:5c:30:29:6b:5b:a4:08:da:
62:1c:04:a4:95:6a:51:2b:75:1c:48:3a:8d:c0:7c:cf:41:c2:
32:23:55:24:19:2e:40:db:56:1d:52:a8:c4:b8:46:b1:24:11:
34:70:23:71:71:e7:dd:79:40:b5:99:a2:34:c6:53:27:80:a6:
61:31:4b:d7:2e:9f:1b:72:51:19:cc:2a:9a:5d:73:12:36:de:
d1:f3:a4:95:8b:55:bd:7e:9f:d8:94:c1:e3:3d:67:81:b7:49:
92:a5:0a:66:52:9a:77:41:72:0d:eb:6a:3e:4e:8f:db:6d:b4:
9b:d0:e7:01:d8:ff:91:67:3a:8c:e3:9c:28:f6:ac:83:d0:49:
73:18:82:92:31:72:ce:2e:de:94:b5:0b:8b:f7:2b:ce:2e:9b:
48:71:a0:fb:0e:da:7b:91:8d:c1:5b:5c:98:32:5e:89:94:72:
2d:87:de:46:e4:d8:73:3d:f9:8b:0b:4f:55:25:db:d3:8f:9a:
5d:49:94:b5:bb:e7:c1:f5:f4:44:5c:ce:97:ef:70:e1:ac:11:
14:bc:60:d5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZJirSxaFboc3aO1EuWIB0hAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMDA2MTYzMjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWIyM2M0NDZmODhjNjc3MTc0YTZjMjM1NzRiZTk1OTBjYjI1ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHtVvQW/tyUmmT1+tjFF+m9wcUfZ
mNM851NdqgwjRjugZ3rRoT6bb2MDMil2MbiMqkRL5GmUt9pRzw+OsIkTDy/KGjxp
8MKp7lsGYxL29F08hJ9zUj2zZuKYbzO55zEoBJy5sPcE7r5FoUu96scpc88o93x4
bAGGKwkV4u41gOOpNH7nFKNowj0RAk7M1x9yHYUiFbNYZN9JuZE1PImVRCyV1m0v
Bv5jQ0DahNn5ZlNph2Pedg1CqY/y7FHeSEfjle3QQmIX6+mKmV8E/utBAFrDL7Pq
fg1JReMfzo4crJ59eqRkA0A+toLTdfjLiWP3wRz1z1dlktoce5s8HTCmUwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDWyPERviMZ3F0psI1dL6VkMsl4tMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvTmJJOFJHLUl4bmNYU213alYwdnBXUXl5WGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWShGAwQA
XXNoAwQAuY3aAwQAucbrMA0GCSqGSIb3DQEBCwUAA4IBAQAXrVd5bB64xejnQ458
W0r5ZKwQjpQc7UoT43E/o4KsXCqojfFcWTjJsmEqPW0fXDApa1ukCNpiHASklWpR
K3UcSDqNwHzPQcIyI1UkGS5A21YdUqjEuEaxJBE0cCNxcefdeUC1maI0xlMngKZh
MUvXLp8bclEZzCqaXXMSNt7R86SVi1W9fp/YlMHjPWeBt0mSpQpmUpp3QXIN62o+
To/bbbSb0OcB2P+RZzqM45wo9qyD0ElzGIKSMXLOLt6UtQuL9yvOLptIcaD7Dtp7
kY3BW1yYMl6JlHIth95G5NhzPfmLC09VJdvTj5pdSZS1u+fB9fREXM6X73DhrBEU
vGDV
-----END CERTIFICATE-----
Generated at Wed Oct 9 08:45:25 2024 by rpki-client on console-ams.rpki-client.org