Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QYa2jnJs567wVw5tPfJ01rlKIfk.roa
File: QYa2jnJs567wVw5tPfJ01rlKIfk.roa (raw, json)
Hash identifier: Kd7kOuZzsfq1bQaLL6pzB2GkPc3oRrlb48za/NFDBgg=
Subject key identifier: 41:86:B6:8E:72:6C:E7:AE:F0:57:0E:6D:3D:F2:74:D6:B9:4A:21:F9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187453F135EDCFD269DC21ED2DE1B7F678F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QYa2jnJs567wVw5tPfJ01rlKIfk.roa
Signing time: Mon 03 Apr 2023 03:52:54 +0000
ROA not before: Mon 03 Apr 2023 03:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 86.107.50.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 05:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:3f:13:5e:dc:fd:26:9d:c2:1e:d2:de:1b:7f:67:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 3 03:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4186b68e726ce7aef0570e6d3df274d6b94a21f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:c5:3a:4a:f7:6c:6b:cd:bd:36:4d:a0:8c:
31:3d:f7:51:c1:07:a8:c1:0b:62:0c:1c:58:68:c2:
be:2f:f6:28:4c:f4:72:53:4a:c5:0c:44:05:ad:23:
5e:91:76:04:cb:5a:c7:90:1f:34:44:f4:45:da:d3:
50:1f:ba:fa:77:1c:6d:f6:79:31:d2:59:a2:d5:10:
d1:b4:29:f6:da:ce:13:0b:d7:0d:e7:5c:bf:f0:9a:
b3:0f:91:e4:17:fd:19:da:b4:b6:ae:13:68:87:75:
eb:b8:87:46:a6:a3:19:e3:3b:a7:e0:86:c7:a9:71:
9a:e5:1e:cc:62:80:28:eb:af:bd:bc:a7:b2:4e:f0:
5b:7b:1d:7c:75:91:16:3a:60:12:f3:44:1d:3f:46:
33:2a:82:4a:ed:13:7b:85:1a:71:ba:27:be:42:1a:
98:4f:93:9e:a1:e2:f9:fc:3f:82:f0:cc:e9:b8:c8:
3e:04:05:fa:2a:cc:64:c3:73:d0:62:86:51:6c:8e:
55:92:8a:04:e8:9f:10:0e:eb:7e:99:47:e3:6b:17:
09:70:17:7c:6b:36:e0:d4:fa:f3:93:58:fd:8a:db:
df:88:b9:11:44:fe:3d:ab:a6:0f:92:1a:5f:d3:c8:
ec:ea:3d:81:c3:f1:5d:8c:b4:9a:f0:15:2d:d2:67:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:B6:8E:72:6C:E7:AE:F0:57:0E:6D:3D:F2:74:D6:B9:4A:21:F9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QYa2jnJs567wVw5tPfJ01rlKIfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.50.0/24
86.107.168.0/24
89.37.192.0/24
93.115.203.0/24
188.213.216.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
24:38:1d:a0:46:20:29:a7:13:89:4e:7f:da:2b:b9:55:3f:b5:
fc:ed:1c:59:0e:89:66:54:2c:5a:81:d6:5e:46:9b:e1:30:61:
76:f3:85:27:93:58:f3:82:42:76:58:b1:60:04:23:41:da:cb:
40:f1:a6:7c:e1:5d:d7:99:a3:4d:ee:09:61:01:cd:5a:e9:d7:
de:d4:63:22:8a:fd:bb:c1:c5:82:a4:ba:27:78:27:08:65:4d:
5f:76:20:2b:25:2f:6d:7e:5c:ac:66:35:b4:48:73:8f:80:1e:
2e:c3:b8:30:39:3d:74:39:28:75:8d:ac:8f:96:ae:f0:36:e9:
9a:2f:b4:03:53:e5:cf:8f:f9:12:dd:42:da:25:b7:e4:e2:59:
06:be:be:02:cc:0e:55:c3:87:05:0b:84:7b:2f:35:35:71:f7:
9c:44:f6:c3:7b:e3:2b:b0:a2:1a:2e:08:e4:19:0b:85:85:10:
e2:5d:a4:3b:e9:b7:e0:60:c8:57:40:a5:40:59:b9:eb:00:f7:
ce:57:96:cd:e2:87:b6:ad:f9:2f:7e:6a:8e:df:a1:f4:54:0f:
d5:72:ee:0b:49:fa:09:ae:90:f9:c4:72:77:29:5b:59:39:e1:
ce:b9:c0:21:e7:cb:bc:2c:8b:10:46:d0:d8:7a:81:d3:07:34:
0f:47:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org