Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OwecgqROhfGFW_NZO_-AGYl6aJg.roa
File: OwecgqROhfGFW_NZO_-AGYl6aJg.roa (raw, json)
Hash identifier: W1J9u1RiPsDsKMca8K3jmObShwC1e/qxqrjOphphYVY=
Subject key identifier: 3B:07:9C:82:A4:4E:85:F1:85:5B:F3:59:3B:FF:80:19:89:7A:68:98
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0186A5EA1E5415795B3AF557B7044865009A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OwecgqROhfGFW_NZO_-AGYl6aJg.roa
Signing time: Fri 03 Mar 2023 05:20:29 +0000
ROA not before: Fri 03 Mar 2023 05:20:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 89.37.192.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 10:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a5:ea:1e:54:15:79:5b:3a:f5:57:b7:04:48:65:00:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 3 05:20:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b079c82a44e85f1855bf3593bff8019897a6898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:27:2f:ff:52:57:b7:5f:b4:e5:d2:da:33:
ba:5e:60:8a:53:32:3b:1c:10:30:2b:11:ab:14:d8:
80:fb:0e:7a:3c:e0:ca:87:9d:5c:cc:f2:ad:8d:6f:
65:61:80:9c:ed:7d:4c:34:e9:61:46:50:d2:2c:92:
67:61:0d:25:46:d8:d3:39:60:a7:39:c7:90:b6:1d:
b0:11:83:c5:3f:85:eb:15:52:ac:74:9b:79:3a:07:
e1:31:b7:8d:4f:db:9a:cd:59:5d:ab:ce:c3:5f:62:
df:ce:18:65:28:d5:38:83:bc:1e:5e:e6:ce:88:86:
e3:3a:40:a0:86:49:79:22:00:a6:ec:e7:19:18:48:
96:8f:e4:44:7a:71:71:fc:ee:33:e1:e5:2d:06:3b:
0d:8d:d2:b6:92:06:f9:ab:af:32:27:5c:c6:d4:12:
e3:2e:10:c7:dd:57:3f:0c:b5:5a:df:31:44:c7:6d:
de:99:b2:0d:4b:6d:53:64:ba:6f:be:81:1f:f9:71:
f4:74:87:e7:f3:45:b7:a6:40:df:e0:2b:e0:ab:90:
78:83:f0:78:e1:ae:c8:3e:cf:6c:c0:16:14:35:f2:
7f:09:52:5d:5d:1a:5b:e6:a0:54:1c:c8:7d:51:19:
5f:25:7d:c6:ae:72:1c:3f:ff:be:02:f1:b1:dd:e0:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:07:9C:82:A4:4E:85:F1:85:5B:F3:59:3B:FF:80:19:89:7A:68:98
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OwecgqROhfGFW_NZO_-AGYl6aJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.168.0/24
89.37.192.0/24
93.115.203.0/24
94.177.51.0/24
94.177.145.0/24
176.126.174.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
61:26:f8:7f:35:6e:98:9f:1d:41:bb:ca:02:a4:01:6e:74:a0:
e5:4a:a5:bc:15:34:d2:ff:5c:34:2c:d0:b9:3d:ce:e8:c0:8f:
f4:bb:ac:4b:c8:8d:c6:05:23:23:bd:b7:c3:5b:61:26:3b:ad:
f6:c6:f8:ed:8f:b7:fc:84:c1:55:81:15:a1:bc:2d:fa:98:f2:
ce:56:81:a1:0b:5c:b5:a8:10:9c:c8:12:ef:d0:de:b3:f2:76:
54:46:6b:8b:75:5e:82:cd:8d:70:c9:d9:ce:de:b1:6e:a1:3f:
bb:30:e1:43:df:3f:6d:c9:a8:2b:15:b4:14:70:4b:7a:0f:c8:
a7:74:88:d8:3d:59:65:58:e3:54:52:9c:66:d6:ba:53:e1:cc:
3d:82:d2:50:98:01:cb:3d:3f:8d:17:7c:f2:33:37:f9:e1:ba:
4d:e8:f4:b6:db:03:16:4f:24:c0:56:d8:70:d8:c7:91:ef:68:
ed:8f:28:24:aa:f3:a1:5d:3f:7b:1b:c4:70:4e:2c:6c:b9:38:
34:9b:2b:63:4b:48:ef:da:ad:da:4c:85:48:ca:bb:57:37:a3:
fa:f2:be:1a:6d:53:1d:48:5e:37:a1:78:d9:9d:0c:44:96:96:
0c:5e:fa:19:70:a9:c7:a9:1b:ad:6a:3d:cb:24:f5:de:c6:2c:
0c:f3:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org