Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SkfE4PlR1wBJq6Uk5ESitRJZ7II.roa
File: SkfE4PlR1wBJq6Uk5ESitRJZ7II.roa (raw, json)
Hash identifier: dicCboRicDQ+0+EU/lBD8PNP1Ip0ZI0QE51DmH41viQ=
Subject key identifier: 4A:47:C4:E0:F9:51:D7:00:49:AB:A5:24:E4:44:A2:B5:12:59:EC:82
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01872BC1BBB17735A45305C6C7C15E89A013
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SkfE4PlR1wBJq6Uk5ESitRJZ7II.roa
Signing time: Wed 29 Mar 2023 05:05:29 +0000
ROA not before: Wed 29 Mar 2023 05:05:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:c1:bb:b1:77:35:a4:53:05:c6:c7:c1:5e:89:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 29 05:05:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a47c4e0f951d70049aba524e444a2b51259ec82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:f4:37:c8:0e:c8:62:88:45:e5:06:0c:02:
a9:02:00:93:d4:fb:28:97:c5:81:b9:ba:ed:c4:91:
bf:9c:23:7c:25:ed:12:a6:40:b7:f0:84:52:10:3e:
ee:92:a3:8b:8a:ea:30:13:c8:b3:3c:f6:a8:f9:6a:
89:7e:ca:95:94:e3:e0:20:d4:32:ea:a7:ac:6a:c7:
d2:88:ca:e2:be:22:aa:09:84:77:2d:bd:dc:0c:75:
e1:20:45:64:51:f3:89:2e:06:9b:7f:5d:00:50:10:
37:a9:07:e5:9e:78:c3:1b:c5:e6:e4:e3:e7:de:bb:
98:cc:5b:76:a4:42:7c:a5:0c:f8:a2:17:d0:f9:28:
2e:bb:e4:29:2b:ce:e7:ae:3e:5f:04:4e:0d:8b:cf:
31:c8:44:17:42:28:1c:f6:f1:b3:26:da:a5:b5:c4:
40:68:53:90:e1:d7:19:00:89:13:d4:e0:a8:e9:0f:
4b:18:a3:83:37:f1:86:ae:57:91:ac:2f:46:1c:5e:
3b:ef:fb:43:3d:35:63:fb:ae:12:cf:1b:d8:9a:b9:
bd:c8:cd:c7:c5:05:d3:ed:68:fb:1b:64:7f:9c:d0:
55:30:e8:c0:e4:66:e1:01:a6:3f:ce:4e:1e:d4:85:
f1:c9:ad:67:69:9b:3a:e6:c8:d9:ca:f7:41:bc:88:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:47:C4:E0:F9:51:D7:00:49:AB:A5:24:E4:44:A2:B5:12:59:EC:82
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SkfE4PlR1wBJq6Uk5ESitRJZ7II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
77.81.100.0/24
86.107.51.0/24
86.107.100.0/24
89.34.202.0/24
89.34.219.0/24
89.35.119.0/24
89.35.129.0-89.35.131.255
89.40.70.0/24
89.45.35.0/24
89.47.55.0/24
93.114.244.0/24
94.198.171.0/24
176.223.188.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
67:59:27:88:b1:f2:73:43:e5:c8:fd:e9:66:66:40:bc:71:18:
65:60:2a:03:8e:0a:73:af:a9:80:fa:2b:99:0d:83:85:5e:4c:
1f:82:a3:f7:94:7c:3c:7f:7c:0b:d6:1a:81:48:cd:a3:44:ac:
99:88:69:8f:a2:b0:62:5d:56:5c:48:de:07:49:97:93:50:7c:
51:03:c6:20:71:b5:35:9a:98:18:86:b2:69:76:b0:c6:27:8c:
79:b2:6a:56:47:49:ba:8d:13:ca:b2:0f:06:30:b0:1a:90:53:
cb:60:3b:32:fd:c5:cb:e2:c4:a2:7a:11:31:9f:3d:18:37:f8:
64:3f:dd:ad:a3:1c:e0:20:71:67:46:b0:7c:41:5a:32:10:1a:
bd:a4:75:0c:5d:64:74:a4:bc:b0:5b:65:7c:53:74:dd:55:da:
3d:6d:40:a3:fb:59:94:e6:01:62:42:94:d0:f3:eb:36:ac:88:
36:8c:49:c5:f7:0c:5a:34:40:a3:ee:32:4f:83:57:a2:3f:7c:
1e:51:3c:b9:00:f3:cc:fa:b6:8f:c3:63:0a:ef:bc:83:d4:35:
a5:78:3b:bf:fc:be:32:31:27:68:de:1d:0d:c9:54:c1:03:4b:
e9:59:56:e8:88:ce:d5:50:7d:0a:45:72:17:fa:9b:33:f1:b8:
0a:a1:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org