Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ps8lDpT1uL6Dcc1FF7jeoVlUE8Q.roa
File: Ps8lDpT1uL6Dcc1FF7jeoVlUE8Q.roa (raw, json)
Hash identifier: DE7PEpzLv8q6q/xuVLKKOsb9ke34EclSjbRfnqo3B8s=
Subject key identifier: 3E:CF:25:0E:94:F5:B8:BE:83:71:CD:45:17:B8:DE:A1:59:54:13:C4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189E3BD203DA902F3EA81FD9D13BE1CCD74
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ps8lDpT1uL6Dcc1FF7jeoVlUE8Q.roa
Signing time: Fri 11 Aug 2023 08:36:09 +0000
ROA not before: Fri 11 Aug 2023 08:36:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197450
IP address blocks: 93.113.171.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 06:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:bd:20:3d:a9:02:f3:ea:81:fd:9d:13:be:1c:cd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 11 08:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ecf250e94f5b8be8371cd4517b8dea1595413c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:da:7b:db:6d:93:69:11:18:6c:8b:52:3c:
1b:f8:c5:8e:a1:b5:15:c9:26:de:fe:4b:e5:12:db:
ea:5e:24:c3:4d:b0:a7:6a:d3:fd:0e:4c:0a:43:08:
ce:84:1f:37:b1:33:a1:56:b6:65:fb:2b:a8:ee:d0:
54:fd:0f:6c:27:5d:4a:75:11:cc:11:f1:1d:9c:d4:
86:82:80:54:ae:a3:80:93:30:b0:e1:f2:ee:16:e4:
bd:9e:77:91:b0:08:6e:d0:1c:4d:31:45:df:02:69:
a6:88:9e:64:57:94:d3:62:c6:ab:d5:8c:74:98:0c:
89:bd:a3:9d:2e:bb:f8:f1:7c:cb:2a:17:8b:9e:cf:
0e:5b:5e:7d:7b:fb:c9:a4:10:7c:13:c4:cf:87:83:
fc:5a:9e:6c:58:bc:a1:eb:cc:9b:e7:69:c9:eb:d4:
ec:b9:84:e5:97:93:43:a8:b3:b4:fe:46:f7:5f:7b:
44:94:8a:b8:d5:d7:04:c0:60:c4:30:3b:41:a7:6c:
71:a1:0a:58:93:84:79:c9:63:b5:a7:8b:1a:b0:16:
0a:72:b4:62:00:7b:fc:76:3b:c1:31:32:38:27:47:
4b:0b:55:73:aa:58:89:ef:28:32:fd:32:6e:3b:d1:
06:9c:52:b0:60:8e:f8:be:66:37:7f:49:f1:29:ae:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:25:0E:94:F5:B8:BE:83:71:CD:45:17:B8:DE:A1:59:54:13:C4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ps8lDpT1uL6Dcc1FF7jeoVlUE8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.162.0/24
93.113.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:63:90:15:10:3e:a7:97:eb:05:21:5a:84:e5:48:3e:6a:66:
2e:df:b2:79:33:23:e6:a6:3f:c4:54:b7:93:c6:1b:07:46:6f:
91:fb:e1:86:60:5c:2a:2d:70:d2:b7:ea:e0:ce:77:57:d6:dd:
59:58:35:b5:47:f5:5f:a4:82:10:25:cd:f1:ae:6b:2f:24:95:
48:54:95:6b:82:4f:29:65:55:16:2a:10:76:02:62:45:93:d9:
c4:01:8f:22:1a:20:81:6c:cb:cf:9c:cf:b1:50:1b:eb:97:af:
63:cd:fd:65:f8:16:34:49:75:77:3d:61:09:c9:3a:bc:19:a9:
c4:5c:43:c4:3d:5f:e1:ab:e6:5a:e0:4f:5c:27:2e:01:fd:c4:
c6:ab:5d:51:eb:1a:96:83:b9:f9:9b:a7:8f:a0:66:4a:c4:87:
44:89:2a:19:9e:2c:4e:50:6f:e0:52:1b:d0:bb:5a:20:81:98:
56:1a:ce:0b:39:2a:70:01:f9:9f:cd:3d:ee:e1:df:cc:1d:6d:
8d:ac:6f:1f:43:10:9e:a6:d3:a2:4b:3b:2d:aa:1a:8c:bf:7a:
b9:c6:42:47:23:45:17:fe:e5:97:86:fa:ae:f5:80:14:13:49:
2b:96:b7:05:4c:2d:9c:ff:f2:1f:96:8d:55:e6:48:7a:b2:4c:
9f:4e:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org