Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UI_y74jruyo6wXq-tkCe3bSozkE.roa
File: UI_y74jruyo6wXq-tkCe3bSozkE.roa (raw, json)
Hash identifier: tcd7OwgKpY41JkVqbM+FRTkxOQB+2ZsNc02uRGsjcAA=
Subject key identifier: 50:8F:F2:EF:88:EB:BB:2A:3A:C1:7A:BE:B6:40:9E:DD:B4:A8:CE:41
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FD9615EDFBC29769373B3CE9B7473CF61
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UI_y74jruyo6wXq-tkCe3bSozkE.roa
Signing time: Sun 02 Jun 2024 14:36:28 +0000
ROA not before: Sun 02 Jun 2024 14:36:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56322
IP address blocks: 86.107.101.0/24 maxlen: 24
89.45.44.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
94.177.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jun 2024 07:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:61:5e:df:bc:29:76:93:73:b3:ce:9b:74:73:cf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 2 14:36:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=508ff2ef88ebbb2a3ac17abeb6409eddb4a8ce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:ad:6a:fc:91:e3:f6:20:60:92:c4:58:22:
f0:da:1c:90:98:e5:be:36:bf:da:cb:7d:2a:f1:cf:
e8:ad:b6:00:12:05:30:85:f7:ed:57:8d:ba:b8:53:
d6:d2:47:65:ad:95:6e:76:4d:c7:8f:1b:e5:c0:41:
3e:f7:e5:15:68:3b:b8:26:24:b3:6d:17:d3:31:35:
2c:e6:4d:53:7b:5a:00:9d:38:ac:95:78:41:32:fc:
e7:66:fb:f8:d7:4e:d5:99:d0:b7:21:54:92:14:29:
3a:3b:9c:5a:41:27:89:80:ec:fa:71:6c:63:14:fd:
1b:ab:11:51:f8:56:de:c8:53:92:93:2c:74:c4:93:
af:49:81:cb:ed:14:01:04:03:62:9b:be:ca:aa:f6:
79:c0:3a:d9:78:4b:c2:e1:c5:f9:c4:79:f8:5e:b3:
3a:f6:d3:16:36:3f:11:5e:39:f0:b2:92:7b:be:df:
7a:c9:24:c5:ba:bd:7e:a1:26:e2:02:bc:58:ee:55:
10:70:1d:74:70:33:6c:25:bb:6f:5a:8d:61:e4:33:
39:ba:df:7c:0b:8f:d6:54:f5:56:2d:82:c1:15:85:
51:b3:be:c7:d3:ad:30:f2:36:75:49:28:60:64:fa:
89:a6:fe:57:e0:c6:72:f7:97:c2:77:13:90:97:28:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8F:F2:EF:88:EB:BB:2A:3A:C1:7A:BE:B6:40:9E:DD:B4:A8:CE:41
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UI_y74jruyo6wXq-tkCe3bSozkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.101.0/24
89.45.44.0/24
93.113.57.0/24
94.177.147.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b8:95:86:bd:cf:e1:01:f5:9c:4d:48:f3:2f:98:09:58:2b:
72:da:ad:b7:83:e6:5e:6a:ab:ae:8a:86:8e:b6:fb:17:a7:4b:
a5:45:d6:e6:88:81:d0:43:ce:49:00:b5:02:3e:fd:49:b9:28:
87:f6:98:59:0f:a9:0e:ca:2f:af:f4:fa:a0:bd:22:83:c0:60:
3f:f5:dd:bd:ce:aa:c6:f2:33:8f:b7:60:b6:56:1f:b0:4e:82:
35:f9:07:09:65:f2:b7:77:bf:b9:3b:42:34:a6:50:b3:ee:f0:
cb:8c:10:37:79:1d:11:48:3e:d8:a3:6b:a0:15:d9:27:ae:68:
6f:de:ec:8c:b2:60:3e:7e:95:7c:76:8e:b4:00:55:91:0c:56:
39:1b:26:d2:fe:3e:55:f6:e9:1c:33:27:6a:20:c3:02:96:7f:
60:ee:cc:f1:64:9d:4e:a2:14:33:05:d1:a3:77:aa:3e:b7:f8:
08:44:b2:5d:73:9d:ef:c2:bb:a4:e3:39:aa:30:90:c0:82:6d:
2e:c4:c1:47:3e:bd:12:e7:d8:e6:78:df:a3:84:74:89:42:f2:
79:cd:48:c8:ac:3b:46:ef:30:71:79:42:c4:1e:b6:30:d6:51:
1a:6b:12:17:8f:48:61:7d:04:26:26:0e:30:2e:80:9f:1c:88:
21:d3:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:07 2024 by rpki-client on console-ams.rpki-client.org