Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Sp_pHk2dakuyinIWNO_o0Rz4C9I.roa
File: Sp_pHk2dakuyinIWNO_o0Rz4C9I.roa (raw, json)
Hash identifier: IOxyk6pXiz2tQeoQ6RE2FeL2V3C29IhrZbN465fwaeU=
Subject key identifier: 4A:9F:E9:1E:4D:9D:6A:4B:B2:8A:72:16:34:EF:E8:D1:1C:F8:0B:D2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC8D8C3F31CA7CB66281A19688FF2B0DC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Sp_pHk2dakuyinIWNO_o0Rz4C9I.roa
Signing time: Tue 02 Jan 2024 06:24:58 +0000
ROA not before: Tue 02 Jan 2024 06:24:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 86.107.168.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 06:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:d8:c3:f3:1c:a7:cb:66:28:1a:19:68:8f:f2:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 06:24:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a9fe91e4d9d6a4bb28a721634efe8d11cf80bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:7e:22:2e:79:4c:57:0c:30:f6:96:b3:54:
2a:d5:68:3b:cc:c3:1d:5b:5a:a4:58:9c:22:f1:42:
8b:aa:3e:ae:2d:7d:7d:bc:5b:7b:ef:eb:4d:13:ff:
03:14:4b:dc:e1:29:35:73:10:4c:56:6c:84:7a:44:
52:3d:16:28:16:ed:57:7b:c9:60:dc:da:f6:9b:16:
f5:ef:69:55:ce:95:27:e1:fe:bc:2f:b8:c8:b7:03:
69:74:27:75:8c:a1:8d:4d:d6:fe:42:ff:41:ab:d4:
bd:fc:cc:4f:c0:ee:c9:6e:09:29:3e:7f:48:0d:56:
a6:96:86:01:af:81:e8:e2:78:7b:89:96:16:26:37:
cc:e8:30:bb:f0:24:6f:ca:be:98:f4:d9:08:84:15:
aa:d7:61:26:cb:96:90:7d:97:8e:f1:79:ba:eb:55:
57:d0:66:eb:e4:8d:f5:e6:ee:d5:a3:88:03:52:ed:
b0:7a:9e:63:ff:a6:61:05:d5:b8:4a:1b:27:56:6d:
51:65:d2:33:f0:e2:fd:0c:60:b4:a7:86:4a:6b:fe:
c4:31:60:4e:ef:c5:a0:60:95:5d:85:0c:0d:0e:61:
a7:7f:c5:23:75:74:02:39:9f:77:32:df:f7:85:77:
77:c0:e2:15:74:21:cc:05:9d:3e:d0:85:a7:87:25:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:E9:1E:4D:9D:6A:4B:B2:8A:72:16:34:EF:E8:D1:1C:F8:0B:D2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Sp_pHk2dakuyinIWNO_o0Rz4C9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.168.0/24
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ac:85:61:8f:31:7e:23:0a:11:68:a4:7a:3d:9c:c8:66:eb:
21:47:86:17:6e:75:7a:27:bf:bf:86:59:8a:20:49:cd:73:3a:
8a:2b:b9:89:3b:09:4c:44:c1:43:83:6d:59:12:e2:78:36:3b:
96:03:21:b9:98:28:d8:87:4a:bc:87:33:55:e1:0f:18:b7:f6:
a6:c1:78:c9:34:2c:11:4f:12:67:81:39:6d:9d:d2:6e:1f:a9:
31:cc:43:06:7d:fc:78:f3:73:1f:ec:d8:61:27:6c:76:4e:fe:
89:b5:5c:6e:df:bd:c4:72:9f:58:d3:b0:4c:4c:4f:7c:40:ab:
6a:e8:ad:56:c9:6f:ba:97:2e:01:44:d6:b9:91:fa:0a:78:f1:
ed:35:4c:f4:c8:a8:ae:20:e7:d2:8a:47:5b:fb:f0:4e:b3:ea:
d1:2f:59:37:b9:67:0f:3b:36:6a:2a:16:b4:d2:2d:e2:22:8c:
5b:87:76:75:26:70:b7:86:40:70:77:27:25:1c:d7:26:a3:f5:
e6:95:c3:e6:b0:3a:40:56:02:35:db:55:f3:ab:96:96:c6:b5:
51:ce:09:6b:b1:65:d3:0d:3d:31:f5:1c:4b:08:55:17:0e:b3:
0d:a5:54:06:f3:40:ec:8a:24:c1:d9:0a:6e:dc:58:e4:bb:40:
74:7d:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org