Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SeP4Qcy13AR6jYwWITgO9ho8OgY.roa
File: SeP4Qcy13AR6jYwWITgO9ho8OgY.roa (raw, json)
Hash identifier: E5BApQjpoDei2LpST8JEHkzsq3CS5ck8XM7fGgKIlIo=
Subject key identifier: 49:E3:F8:41:CC:B5:DC:04:7A:8D:8C:16:21:38:0E:F6:1A:3C:3A:06
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AC686CBFC26EBBE1F4392A8C3468C3D95
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SeP4Qcy13AR6jYwWITgO9ho8OgY.roa
Signing time: Sun 24 Sep 2023 09:30:37 +0000
ROA not before: Sun 24 Sep 2023 09:30:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 92.114.93.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 12:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c6:86:cb:fc:26:eb:be:1f:43:92:a8:c3:46:8c:3d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 24 09:30:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49e3f841ccb5dc047a8d8c1621380ef61a3c3a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:25:22:b6:b9:3d:91:99:4c:0d:71:f1:21:
e2:a1:7e:ba:93:c9:75:4e:3d:f9:41:66:be:b7:b4:
f1:3a:57:b6:91:42:6f:57:96:2d:36:4d:c1:67:11:
b1:a4:c5:a7:16:17:18:34:12:99:4f:1e:d8:2e:24:
e0:6a:47:a0:94:49:7f:93:28:c3:ea:d4:fd:fe:08:
43:72:3d:91:9d:f1:7e:08:11:9f:a9:61:1a:18:99:
7f:63:a6:e8:b1:ae:9b:39:55:46:80:1d:1a:67:08:
32:d1:fc:1f:1a:3e:e5:0d:b9:e2:31:56:d2:17:e9:
41:51:05:a4:cf:47:11:37:fc:ac:50:ff:4e:71:7f:
64:65:35:93:85:b4:90:a3:ab:08:86:4b:f3:5e:49:
db:96:d9:c1:04:3f:3a:ad:2d:38:49:e7:39:96:8b:
d8:c6:5e:c3:d6:57:32:43:8d:c7:5d:90:2c:19:fc:
24:a5:5e:ec:ab:80:d1:f7:88:01:14:b8:d4:fd:f3:
29:df:88:5c:56:d8:fc:4e:c7:b9:19:3f:30:5d:f9:
98:40:bd:b1:95:b6:c7:74:68:f7:50:fd:09:bc:cd:
6f:64:72:89:e0:0d:68:61:b6:2b:97:12:eb:15:dd:
2f:78:72:45:48:65:be:e8:7a:0c:69:ae:c5:17:86:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:F8:41:CC:B5:DC:04:7A:8D:8C:16:21:38:0E:F6:1A:3C:3A:06
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SeP4Qcy13AR6jYwWITgO9ho8OgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.168.0/24
89.47.36.0/24
92.114.32.0/24
92.114.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:56:3e:6f:63:81:e8:cf:a2:4e:e1:27:30:9e:45:02:bc:ae:
3c:8f:70:d1:bd:09:a2:07:25:3e:c7:69:90:54:91:51:76:fa:
b4:a9:a3:c4:9a:c1:10:6a:7a:80:a1:41:24:24:33:a2:58:8d:
51:46:14:30:e8:a1:19:02:e1:d1:dc:0c:f4:bf:cd:06:9d:8a:
22:8c:5f:21:7a:74:c4:8c:4a:fe:80:1d:07:8a:ba:71:9f:0e:
3d:8a:cc:d0:a3:f5:33:28:3f:c4:ce:cb:90:0b:8b:5b:3c:36:
a5:fe:9c:6a:79:4f:53:2d:cc:b8:e0:82:1a:d6:44:d0:22:c1:
86:31:3c:7a:0c:d4:70:d6:0d:b1:5e:54:71:ee:68:5f:c4:96:
e7:bf:ee:8b:0c:0c:20:ea:35:fb:7a:17:99:30:e2:c9:75:a6:
e1:0f:ad:a0:46:38:5b:12:6e:9f:57:4c:87:67:d7:b0:44:06:
2e:39:70:02:3c:36:9b:ae:e4:92:0a:cf:63:ed:d6:69:6c:e4:
46:f6:27:9f:1b:95:74:02:c8:7d:d2:0c:cb:db:30:ec:4a:0e:
8c:c6:8e:e6:20:26:31:68:4c:94:84:5f:f3:0b:7f:bd:ec:e4:
cf:73:2d:d5:cb:ec:fa:ff:e6:a8:fe:1d:36:96:6a:13:05:55:
d9:40:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org