Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Oq638M36dlK9p4NNjBU9NNznjq0.roa
File: Oq638M36dlK9p4NNjBU9NNznjq0.roa (raw, json)
Hash identifier: crScTYy3lJlCS0TowUCiOLmomASmENjS56LXEK9ztg0=
Subject key identifier: 3A:AE:B7:F0:CD:FA:76:52:BD:A7:83:4D:8C:15:3D:34:DC:E7:8E:AD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AA2313D5B0880771448384932E319E4ED
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Oq638M36dlK9p4NNjBU9NNznjq0.roa
Signing time: Sun 17 Sep 2023 08:10:50 +0000
ROA not before: Sun 17 Sep 2023 08:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 2.57.242.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
45.88.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 17:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a2:31:3d:5b:08:80:77:14:48:38:49:32:e3:19:e4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 17 08:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aaeb7f0cdfa7652bda7834d8c153d34dce78ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:d6:a8:4d:62:a4:12:54:ed:e2:c5:af:f8:
96:8e:3d:84:d8:54:0f:c4:55:69:06:51:d1:ce:4a:
fd:16:b1:6b:d1:9b:58:0b:9a:63:66:d7:2a:c8:12:
3e:94:c4:f4:54:22:56:ce:d7:3b:a5:f1:b6:16:14:
61:32:e1:58:d8:13:6a:d8:0d:79:61:77:a6:96:14:
e0:09:b1:c4:83:e8:de:2f:5c:f2:36:59:c6:2c:bd:
7e:0a:40:c7:a7:8d:84:fa:95:98:7f:20:da:ba:e7:
b3:16:fa:36:32:c4:88:36:c8:e4:61:26:5c:dd:f1:
27:71:09:d4:4a:13:b3:04:56:30:07:62:b9:76:9a:
01:6c:7a:ee:09:9e:cc:66:54:4c:9c:7b:18:fc:f0:
e2:30:74:61:fd:33:3d:f5:d8:44:ab:5e:08:dc:3f:
98:9c:6e:d0:43:83:0b:0f:51:eb:bb:5b:c2:35:0d:
18:ad:37:da:cc:53:06:d7:eb:09:3f:f2:4c:ec:a1:
c8:6c:7f:0c:1e:40:f0:45:dc:55:bb:da:0e:e7:0b:
02:3a:9c:65:c8:8c:dc:08:eb:46:2b:c8:ce:56:6c:
02:09:d3:ef:9e:89:45:9d:0f:2b:30:e1:0f:e8:8b:
37:0c:3d:e1:7d:71:ef:7b:19:12:5b:e8:9f:6e:23:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AE:B7:F0:CD:FA:76:52:BD:A7:83:4D:8C:15:3D:34:DC:E7:8E:AD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Oq638M36dlK9p4NNjBU9NNznjq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
45.88.14.0/24
89.40.215.0/24
89.43.62.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9c:59:c3:79:17:8f:46:c6:60:96:68:9d:6d:5e:39:23:ef:
6e:a5:b7:f4:54:14:cc:fa:44:bd:9b:34:44:af:1e:b7:81:77:
5f:03:78:9b:46:2f:6f:42:28:b7:23:1f:55:11:82:2c:e5:60:
8d:ea:08:42:af:72:ab:2e:e9:a2:27:2c:d3:31:8d:94:31:f3:
59:19:d0:36:b7:3d:2d:ea:94:64:db:68:4a:29:f6:11:64:da:
49:a4:7a:20:2e:0b:5f:f1:da:81:f0:3f:e0:48:41:b9:8a:c9:
ee:de:e2:e9:79:de:45:f6:5d:28:58:c2:1e:af:1a:7f:68:fa:
2c:ba:0a:11:d0:f5:ee:c9:8b:f9:e9:76:1f:e4:06:12:63:af:
56:bc:0c:39:17:9c:f8:47:03:41:66:20:c6:f2:21:d1:92:a9:
9f:51:71:0d:b1:11:b4:a9:21:1f:d1:a0:05:2b:80:9e:dc:33:
1e:87:93:24:0a:b3:aa:9f:2c:76:bf:72:37:21:80:71:24:2f:
78:f0:27:c5:2b:83:61:16:1b:95:c0:89:5f:58:af:92:39:72:
df:1b:fd:83:18:0f:5d:19:e3:ba:ad:59:e6:97:b3:79:7f:0b:
fe:a8:73:fb:c6:e2:57:48:14:0a:25:4e:08:ef:d9:55:8f:d7:
6f:f9:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org