Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P9gbRRlr8tIVlp4YPSu-ZvoMvrg.roa
File: P9gbRRlr8tIVlp4YPSu-ZvoMvrg.roa (raw, json)
Hash identifier: qv3bHLFuCb+dYBnJB6Iv6hUFh/+S4h5LSuRzp69U1zg=
Subject key identifier: 3F:D8:1B:45:19:6B:F2:D2:15:96:9E:18:3D:2B:BE:66:FA:0C:BE:B8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B4B607B6EB9F68B8F6458762405403726
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P9gbRRlr8tIVlp4YPSu-ZvoMvrg.roa
Signing time: Fri 20 Oct 2023 04:38:16 +0000
ROA not before: Fri 20 Oct 2023 04:38:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 86.107.50.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 07:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4b:60:7b:6e:b9:f6:8b:8f:64:58:76:24:05:40:37:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 20 04:38:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fd81b45196bf2d215969e183d2bbe66fa0cbeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:b4:b9:7d:ce:5c:6e:6a:44:02:eb:0d:6f:
f2:b7:c8:f2:7d:93:ee:fe:c5:2b:b4:8e:33:05:b2:
c4:c3:3d:7e:33:a7:10:a7:f4:72:da:f7:1a:b1:fd:
5c:83:ea:18:b5:3a:eb:05:8c:e0:8f:36:03:15:95:
04:ee:44:a8:c2:16:65:1d:92:58:39:9c:73:a8:8e:
a3:8a:f6:be:4d:c4:44:1f:b2:bf:cc:37:3e:c4:26:
a5:33:76:54:94:34:b8:9f:cd:9a:cc:ba:4f:76:3c:
9e:fd:8d:c7:1f:67:52:5c:4c:4b:d9:c8:23:f8:cc:
da:96:eb:2e:0c:ee:b0:33:80:93:bd:cb:75:27:ff:
13:af:14:2a:78:1c:cb:99:ec:cd:0d:61:45:6a:9d:
d3:2f:39:d8:c9:50:d8:11:09:4b:9b:e5:6d:b5:30:
7c:0f:95:44:fe:4c:7d:f2:bc:3c:8a:e0:5d:11:97:
2e:52:bd:4f:65:01:3f:86:d5:aa:6e:01:09:8e:0d:
c2:94:cd:45:6e:f1:85:ce:0a:7c:27:51:7e:33:ac:
b0:1b:90:28:91:d9:cc:c7:48:89:4f:6f:98:39:78:
bc:4f:1a:2c:c5:31:e6:01:25:a7:0c:57:96:6e:db:
99:95:58:4b:39:ec:ee:f6:6e:28:f3:af:25:48:56:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:1B:45:19:6B:F2:D2:15:96:9E:18:3D:2B:BE:66:FA:0C:BE:B8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P9gbRRlr8tIVlp4YPSu-ZvoMvrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
86.107.50.0/24
86.107.100.0/24
89.35.131.0/24
89.47.55.0/24
93.114.183.0/24
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:40:93:44:f6:b2:18:c7:da:a0:1d:ae:ab:10:0d:5f:4a:d1:
a7:a9:e4:f9:f2:55:4d:3f:f9:4c:e9:6b:d0:f7:aa:3f:d7:e2:
07:88:90:99:d6:af:49:96:ce:2f:70:0d:4b:0d:5f:bd:02:8e:
db:ce:89:f7:bc:d1:20:67:7f:9a:93:11:e3:fd:3d:0e:5a:76:
f1:1d:0a:20:23:18:05:14:80:86:0d:e8:4d:11:5e:ad:33:37:
1b:a0:32:44:4b:2b:df:16:ee:49:c6:ad:4f:45:da:ba:9c:1a:
a4:ce:29:d2:21:60:c8:46:29:d5:d0:95:87:25:7a:8e:56:40:
13:40:0c:ad:d4:97:bf:55:f8:b2:9e:cc:4f:2d:65:44:db:94:
eb:87:5e:c9:10:50:e4:12:56:c7:8c:67:cc:56:0b:96:ce:a3:
cd:22:5a:e6:ff:ea:3b:e1:ea:75:46:c9:ea:26:45:25:03:6b:
7d:27:22:8c:d4:bf:bf:43:2d:d5:5a:08:8e:f0:30:08:37:09:
cd:aa:d4:21:04:e3:df:50:c9:26:90:98:80:d7:9d:75:d5:2a:
68:25:24:bf:5f:49:a7:81:d8:85:e7:b1:a2:5d:20:25:4d:41:
78:ac:b2:8b:bc:18:4d:b2:51:11:e3:f1:8a:92:c4:8d:22:ec:
61:9d:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org