Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TttRrW3Tb8XWK2EwCg0rMcuWjTs.roa
File: TttRrW3Tb8XWK2EwCg0rMcuWjTs.roa (raw, json)
Hash identifier: ISqCV5kD2BRagRw4RytBbq95FXGvcTABZ70l5Fa8bW8=
Subject key identifier: 4E:DB:51:AD:6D:D3:6F:C5:D6:2B:61:30:0A:0D:2B:31:CB:96:8D:3B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189F7C37132B72DF71B954BC20A4EA9D318
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TttRrW3Tb8XWK2EwCg0rMcuWjTs.roa
Signing time: Tue 15 Aug 2023 05:55:27 +0000
ROA not before: Tue 15 Aug 2023 05:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.34.202.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 06:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:c3:71:32:b7:2d:f7:1b:95:4b:c2:0a:4e:a9:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 15 05:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4edb51ad6dd36fc5d62b61300a0d2b31cb968d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:0b:bc:6c:0a:89:38:95:d0:d4:a0:00:1c:
b1:17:ed:3e:cf:59:fc:bc:d9:f8:6b:9e:55:db:fb:
d3:87:bf:b7:9e:ce:83:51:66:be:52:fe:56:d8:b8:
c6:55:2e:94:ce:65:19:ee:a5:58:73:99:d3:d4:59:
1b:d9:ad:e1:42:a1:da:32:7b:bb:90:ad:30:ee:9c:
9b:12:27:61:74:fb:0e:66:99:ac:9f:02:90:d8:82:
b0:cd:7f:70:e8:c5:09:d8:3d:5b:3c:6a:0c:73:6b:
dc:f9:ab:9d:26:3c:a5:6f:d4:b6:7d:47:29:8e:20:
70:7b:1f:94:27:08:ea:bb:06:78:bd:31:47:2a:67:
02:7a:a0:c8:02:48:9e:fa:b4:6d:55:d3:29:d7:25:
1e:4d:ef:70:47:b4:85:0f:78:86:c6:9d:23:40:c0:
c8:df:ff:2d:3a:83:db:a9:6e:f7:53:0e:32:36:04:
b1:28:b0:54:2d:19:0e:38:aa:81:5b:c4:17:69:8b:
48:0c:80:e3:a7:46:df:a7:bc:9c:1f:95:21:6c:9e:
f7:7e:a2:51:34:78:5c:8e:ce:ff:31:ee:4b:b0:6d:
ce:a3:cc:80:49:5d:a8:1b:02:a6:d0:57:77:5b:24:
81:4a:01:a7:94:99:b7:4f:a5:59:5f:1c:e2:a5:ca:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DB:51:AD:6D:D3:6F:C5:D6:2B:61:30:0A:0D:2B:31:CB:96:8D:3B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TttRrW3Tb8XWK2EwCg0rMcuWjTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.65.0/24
89.34.202.0/24
188.213.0.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3f:4c:04:00:f3:a5:bc:e4:a6:97:35:49:ae:ff:dd:5b:26:
20:e5:4e:f6:e3:b6:d3:60:11:22:79:0b:d5:c6:29:6d:5c:77:
38:c4:77:d0:03:81:df:35:79:ab:cb:54:fd:e5:ca:60:ec:5f:
60:e2:65:95:a1:b5:f8:06:ad:4a:31:59:9c:0d:6e:38:ba:dd:
20:ff:96:9a:db:39:c2:2d:37:47:89:a3:a4:72:47:74:27:b0:
96:70:99:2f:20:42:75:d9:49:5a:0c:eb:27:66:98:59:f0:d2:
38:89:31:5f:a7:53:1f:0d:e7:0b:8e:21:67:2a:4d:af:22:0c:
ca:d2:04:fa:85:c9:d0:63:ed:34:9f:94:b0:5c:b8:7b:aa:84:
9a:ef:bd:48:d2:50:b1:56:b6:db:3f:e6:03:7f:7b:8d:84:bb:
b8:f2:cc:92:44:d7:80:ba:6d:a4:70:b7:8b:71:80:fd:63:62:
46:15:a2:b0:e3:5a:67:49:17:82:2c:3d:70:c9:b7:cd:a4:8e:
41:5c:71:1b:66:2a:fb:80:d7:e6:f0:ea:4d:df:dd:02:0c:65:
81:2a:39:b0:5b:25:4c:9d:86:64:9c:1b:f6:96:31:34:03:dc:
00:6f:39:95:ef:ad:6e:3c:33:18:03:e0:ce:40:5a:b2:b2:96:
42:ac:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org