Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Rl8AvcM5sYoNs6h8FzeNQcDL5CA.roa
File: Rl8AvcM5sYoNs6h8FzeNQcDL5CA.roa (raw, json)
Hash identifier: pVdxlTIUoBmpAy8CYtE0pxsccXKwWZ8eCu6oFf/jQ3I=
Subject key identifier: 46:5F:00:BD:C3:39:B1:8A:0D:B3:A8:7C:17:37:8D:41:C0:CB:E4:20
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188C3A7A68CBA4FA27DDBF0C4B4F96A90A9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Rl8AvcM5sYoNs6h8FzeNQcDL5CA.roa
Signing time: Fri 16 Jun 2023 10:02:04 +0000
ROA not before: Fri 16 Jun 2023 10:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 89.34.202.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.37.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 04:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:a7:a6:8c:ba:4f:a2:7d:db:f0:c4:b4:f9:6a:90:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 16 10:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=465f00bdc339b18a0db3a87c17378d41c0cbe420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:48:07:4e:92:3e:89:77:a3:0c:5a:02:62:a7:
a9:38:ef:5e:ad:ca:3d:7c:ef:73:99:3f:fa:b0:47:
8b:31:1e:ec:b9:f7:5f:43:ad:0b:ab:95:7a:d6:2a:
e2:b4:7f:24:8d:b6:07:ba:a9:5f:f1:63:f6:e2:b7:
67:9e:4b:24:14:b5:4d:db:00:30:31:06:e8:34:3a:
15:ee:23:fe:c9:ea:80:95:5e:78:43:02:2a:c0:86:
2a:29:e0:74:e3:cb:d7:e3:57:04:32:af:1c:1d:2e:
e3:4b:e5:0e:0d:20:72:77:b2:7d:6e:11:86:af:a8:
b1:b3:c5:0e:c3:58:13:87:1a:4c:c3:1a:ff:27:ce:
41:6b:9e:0f:3b:bc:f6:ff:22:aa:8a:58:e5:82:73:
e5:ec:19:dc:b4:50:d0:6e:8e:59:e5:7a:38:98:46:
33:5b:39:2e:5a:13:84:34:80:40:c7:58:a6:f2:b2:
13:4d:c0:8b:91:2d:a6:36:a5:07:04:e8:7d:43:b3:
c1:68:94:4e:c7:bb:5b:00:d5:17:88:99:d5:14:64:
ce:9c:a2:89:c2:b1:fa:c0:64:e7:4c:56:e8:00:c3:
c6:38:3a:78:70:a0:56:ac:92:fb:50:8e:48:49:06:
49:ae:8e:6b:71:27:8d:33:ec:83:c7:77:c8:d5:40:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:00:BD:C3:39:B1:8A:0D:B3:A8:7C:17:37:8D:41:C0:CB:E4:20
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Rl8AvcM5sYoNs6h8FzeNQcDL5CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.18.0/24
89.34.202.0/24
89.37.195.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9f:2a:a0:ba:c0:20:20:f4:79:00:64:16:59:7d:ba:b8:e3:
6b:87:36:58:49:26:77:49:fc:f6:2e:23:0b:e1:18:74:d9:f1:
3f:70:bd:86:c2:e1:f1:66:f1:ce:d2:a4:c2:bf:77:cb:67:7d:
49:3a:02:50:22:0a:f9:b2:f7:28:20:c3:f4:34:26:81:91:fe:
e5:fd:5a:dc:b2:36:b7:05:9f:30:53:88:5c:8c:6d:e4:ca:66:
a9:2e:19:43:d9:6f:e1:fc:34:42:ff:d7:40:e2:a2:e8:be:42:
57:b3:3c:c3:78:fb:d0:dd:d4:4c:81:ae:eb:f3:2f:46:9b:9d:
a6:42:3c:6e:f1:28:4c:75:02:1e:6c:21:e7:67:90:c1:c6:86:
ac:8d:63:1e:3e:92:b4:6d:1c:38:b8:3e:fe:3b:36:b1:c3:a7:
b8:54:26:49:bd:8c:65:0d:3a:66:f8:a1:a0:56:6f:9d:3c:ac:
90:5d:d3:38:43:f7:89:66:cf:a6:6e:6e:d3:c7:33:5b:93:97:
e2:90:6c:f2:2c:fb:5c:3a:a8:d7:3f:9f:1f:b4:2d:d4:87:4d:
08:b0:55:78:0b:c7:4d:97:1c:47:f1:2d:bb:a1:80:99:7b:7e:
d2:61:eb:2e:05:71:4e:a4:fa:24:32:12:f8:9c:83:4b:7f:cc:
dd:1c:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org