Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OszJumheREY8movK-tEpwL2we_A.roa
File: OszJumheREY8movK-tEpwL2we_A.roa (raw, json)
Hash identifier: Tsfam6udUUSdTMO9g9YJ6E/0la1fXfKFs5yAC8MLY8g=
Subject key identifier: 3A:CC:C9:BA:68:5E:44:46:3C:9A:8B:CA:FA:D1:29:C0:BD:B0:7B:F0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018808F933510F85AFD005968C17BA2ACDB2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OszJumheREY8movK-tEpwL2we_A.roa
Signing time: Thu 11 May 2023 04:02:09 +0000
ROA not before: Thu 11 May 2023 04:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.40.70.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 03:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:08:f9:33:51:0f:85:af:d0:05:96:8c:17:ba:2a:cd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 11 04:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3accc9ba685e44463c9a8bcafad129c0bdb07bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:2d:d9:ae:9d:ba:b2:f6:0b:ab:32:2e:5e:
92:e5:40:84:32:88:6d:63:09:dd:16:5c:da:49:72:
88:f5:2e:24:93:07:fb:62:5b:1e:44:3c:15:b8:ff:
51:77:d0:e1:2e:72:7a:f5:6a:11:a2:e7:28:8f:75:
3e:a7:36:3d:35:b5:c9:6d:83:82:ff:bd:c3:6f:dd:
ac:9a:5a:05:24:cf:35:35:55:a6:f7:89:1c:99:f6:
ea:69:03:60:b4:68:b8:11:b7:51:5a:51:53:0b:3b:
46:8b:81:35:49:4d:2a:49:f9:2f:0c:75:80:8a:af:
a3:d6:13:06:5d:3c:ef:75:c2:3e:6c:8d:76:f1:58:
68:0c:95:60:49:32:4b:e2:e5:ce:46:0f:e4:42:9f:
f9:67:b6:68:8f:83:3e:96:cd:2e:63:71:89:2e:78:
d8:3a:4f:eb:18:de:a4:e4:83:40:44:3f:40:c9:f1:
d5:95:bc:f1:35:a2:ea:ce:4a:84:07:3d:42:03:13:
fd:b6:3f:6a:61:0a:e2:e0:77:35:b9:35:f1:64:65:
46:18:07:54:64:a0:b3:ab:44:17:bc:b9:d3:81:b6:
6e:8c:ac:11:8b:93:76:03:8c:b7:d9:f4:c1:4d:90:
f7:c2:aa:d8:ab:a8:e9:de:23:46:ac:8c:29:45:79:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CC:C9:BA:68:5E:44:46:3C:9A:8B:CA:FA:D1:29:C0:BD:B0:7B:F0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OszJumheREY8movK-tEpwL2we_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.70.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
40:11:7f:63:23:42:72:23:bc:af:11:73:1c:f7:cd:fb:a6:2e:
8d:9e:f4:c0:83:4c:13:36:9a:1a:e0:61:71:09:9a:be:d7:cc:
e2:a8:6e:dc:2a:e1:1c:59:a5:f2:fc:e9:f8:a6:9c:88:12:bf:
94:8d:92:6d:86:21:30:00:5c:0b:31:31:a2:ed:f5:5f:87:ef:
6a:3b:76:db:a7:48:11:5c:c0:dd:bf:f6:68:ee:e0:6d:c0:cc:
88:29:b1:bd:f1:ff:6f:c5:54:a6:4a:d2:47:45:25:d5:ce:01:
74:89:cf:b8:5e:6b:31:84:2e:ae:ca:d7:c7:3a:40:8e:1e:da:
fc:da:ff:5c:fc:17:29:5a:44:3a:fd:43:5e:00:34:b3:39:3f:
e7:a9:eb:6a:85:a7:03:bf:89:b8:bf:d7:dc:42:9b:0b:7e:85:
3f:1f:36:bf:32:73:7d:1d:22:b2:4e:b3:a8:10:c1:cd:74:a1:
26:5a:79:d5:6a:d8:8f:d2:c0:87:40:8f:7c:08:b5:50:8f:3a:
fb:ec:e1:ba:7e:0d:c1:84:4d:67:9c:4a:ef:e2:98:68:dc:8c:
34:05:fc:08:fd:07:5c:ce:01:4c:e9:2c:40:29:cc:5a:4a:2c:
17:4b:e9:0b:91:8e:a6:d6:30:fe:d7:67:5a:fd:ac:fc:8a:ca:
07:37:ab:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org