Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Syev2qMoYwRcw_Vgq--L6FtcO6k.roa
File: Syev2qMoYwRcw_Vgq--L6FtcO6k.roa (raw, json)
Hash identifier: MVqpS/Sd4nj6fU7G03QvyudPVD3Oyfz5x7o6Dpwf5w4=
Subject key identifier: 4B:27:AF:DA:A3:28:63:04:5C:C3:F5:60:AB:EF:8B:E8:5B:5C:3B:A9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FE4E55CC098101B372EA02579B86E35A2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Syev2qMoYwRcw_Vgq--L6FtcO6k.roa
Signing time: Tue 04 Jun 2024 20:16:27 +0000
ROA not before: Tue 04 Jun 2024 20:16:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 85.204.22.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 10:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:e5:5c:c0:98:10:1b:37:2e:a0:25:79:b8:6e:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 4 20:16:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b27afdaa32863045cc3f560abef8be85b5c3ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:08:0a:e6:27:95:70:40:ea:fa:6d:c9:87:
3c:b7:f6:1a:fb:34:98:e3:48:48:5a:2b:27:25:e9:
ce:72:c4:47:21:26:a8:79:10:39:c8:f3:e8:bf:5e:
e4:08:da:e9:ef:e7:45:0a:c5:a9:f4:39:1c:4b:5b:
64:7b:f9:1e:f6:59:15:c5:5d:e6:14:ed:e6:c7:46:
3a:2d:60:98:be:13:be:f6:b9:12:4d:cc:c8:3a:fc:
5e:e8:d5:22:ed:00:4e:1a:b6:25:8d:34:5c:8c:5c:
ee:57:7a:77:88:d4:30:5f:49:b9:84:ec:6b:2b:47:
10:a4:80:9e:ba:34:9f:97:a6:71:24:67:d3:18:e1:
42:a5:3e:09:59:1b:0b:c0:d6:b8:dd:d6:58:a7:9b:
e2:46:f0:b7:da:11:ab:5f:af:0e:2f:c3:f4:95:32:
db:91:5a:76:38:f3:f5:ca:32:20:b7:a3:c1:99:48:
77:6e:26:04:52:66:4b:4b:ec:9b:b9:ba:08:d5:88:
ee:de:d8:74:31:c9:cc:7f:f0:f4:e3:1a:74:8a:44:
03:6a:83:bb:04:9b:23:ee:7d:20:84:fb:85:15:a7:
ef:7a:53:a0:0b:98:9b:b7:27:1b:20:c8:56:af:f7:
6e:a3:30:dd:92:5c:2a:b9:71:2f:a3:9c:21:b1:f6:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:AF:DA:A3:28:63:04:5C:C3:F5:60:AB:EF:8B:E8:5B:5C:3B:A9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Syev2qMoYwRcw_Vgq--L6FtcO6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.22.0/24
94.177.51.0/24
Signature Algorithm: sha256WithRSAEncryption
07:83:61:20:49:f0:bd:f7:a1:c9:9f:51:4f:49:e1:d0:76:29:
f5:cf:79:99:4a:66:ee:ac:66:d8:7f:b8:53:05:db:98:52:80:
9a:b2:a3:42:49:1c:16:12:e4:8a:92:b2:29:c5:f6:7c:50:f1:
44:28:a3:72:2b:60:60:fd:21:42:ec:0a:0c:a3:38:ab:da:c0:
cc:b6:61:eb:20:97:78:3d:42:96:b5:b9:3d:e9:d2:19:bd:39:
52:4a:19:75:df:7d:7f:cb:e0:54:42:22:85:f4:09:a1:d4:a7:
c4:d8:59:71:e0:05:41:ec:3e:19:33:8a:59:0a:4d:65:e6:e7:
92:35:93:e6:e8:c3:1e:91:b7:9c:17:98:2c:85:2a:3f:0e:37:
60:14:49:bf:7d:38:53:84:57:59:bd:ec:b6:72:9b:74:6b:0f:
de:54:5e:98:de:16:0e:62:f5:c9:e0:a3:74:56:f6:c0:8f:00:
2b:76:6d:a8:48:2a:cb:8a:19:09:3c:d5:d0:7e:e8:68:0b:51:
a0:a2:fc:af:c7:e2:30:64:70:87:70:a0:d8:e7:2a:dc:22:aa:
67:15:47:72:fe:4e:e4:a8:91:a7:87:6e:b2:4c:37:3a:26:0a:
13:4b:e4:e3:61:0f:0f:9e:e8:4c:3d:5c:fb:13:ba:91:0a:c1:
33:93:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 15:24:33 2024 by rpki-client on console-ams.rpki-client.org