Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UMToSPSap8mKrdhIgYNfoXrIEzY.roa
File: UMToSPSap8mKrdhIgYNfoXrIEzY.roa (raw, json)
Hash identifier: 07KbDr9tUJBpcM2Pv2oEB+9SX0bC8uemkLVt49zS+gg=
Subject key identifier: 50:C4:E8:48:F4:9A:A7:C9:8A:AD:D8:48:81:83:5F:A1:7A:C8:13:36
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C3F42F51727437CCC08EF1E7FE79F7A18
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UMToSPSap8mKrdhIgYNfoXrIEzY.roa
Signing time: Wed 06 Dec 2023 13:13:21 +0000
ROA not before: Wed 06 Dec 2023 13:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:42:f5:17:27:43:7c:cc:08:ef:1e:7f:e7:9f:7a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 6 13:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50c4e848f49aa7c98aadd84881835fa17ac81336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:7c:e0:e5:ae:62:60:14:8a:27:63:b3:e9:
92:dd:d2:2d:67:07:a9:10:b1:90:76:05:b7:f5:1c:
67:5d:89:89:61:80:99:cf:67:e1:3b:c8:a6:ef:31:
df:00:12:8f:40:e4:69:96:f7:a6:ff:f2:d7:df:de:
81:3b:57:ca:49:cb:00:9d:2f:4a:c1:e1:d7:52:bc:
ed:63:40:09:c9:66:d7:70:0b:a7:b0:14:60:a4:f1:
9c:d7:1f:49:11:3d:d9:21:af:88:90:35:02:2a:e5:
e5:c5:5a:74:dc:96:a3:1b:3a:4b:c5:d8:78:1b:18:
89:ac:ea:bb:31:92:b6:b1:c5:60:df:89:a1:13:7e:
a7:71:a1:10:55:10:72:2f:5c:3a:61:28:72:7f:50:
fd:4f:d7:35:0f:e7:9a:1f:7c:28:a9:00:df:7a:a6:
8c:cd:69:7a:f2:ab:d1:89:c5:50:d7:aa:e6:7a:09:
6b:20:75:30:a0:8e:ee:cf:c1:3f:c8:56:7b:a9:ed:
9a:5b:99:1c:e1:cb:fd:f9:48:0a:c7:00:b2:fc:d4:
e4:15:4d:59:ec:61:72:af:9f:15:b6:af:ee:77:33:
7f:15:47:77:32:19:d6:a5:09:e7:04:ae:dd:b1:6b:
bb:35:2d:4b:17:dd:c7:d0:a9:80:bd:de:4a:b9:15:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C4:E8:48:F4:9A:A7:C9:8A:AD:D8:48:81:83:5F:A1:7A:C8:13:36
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UMToSPSap8mKrdhIgYNfoXrIEzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b7:4b:1a:2a:48:5f:05:6c:63:02:a3:b2:c5:91:98:dd:d7:
d6:f9:84:38:2b:1a:f6:75:7c:23:95:4e:ec:44:1f:27:0b:61:
a6:8a:e8:f7:09:a5:54:df:24:9e:c4:13:8e:16:a2:a7:0f:6c:
8c:a9:f4:ef:46:22:8a:cf:31:6d:32:48:6c:2d:60:88:11:f1:
20:91:da:1d:3e:4f:07:72:76:8d:14:90:97:0c:d4:de:19:b1:
31:a6:59:5b:9d:4d:29:d6:21:e3:fa:46:05:10:57:f1:1f:e0:
91:56:9d:4a:10:a7:ce:75:96:62:ae:b0:31:8f:24:6f:05:aa:
6e:d7:be:61:50:f8:06:4d:55:ae:ba:15:10:4d:e3:16:6e:ae:
62:fc:f6:41:f1:1d:dc:dc:16:05:a6:8a:c1:71:39:a5:cd:17:
c1:bc:b9:d0:ad:62:f5:98:2c:a9:86:b7:7a:6f:f8:6f:d1:e6:
74:93:65:d3:5d:07:99:1b:20:49:bd:96:7f:cc:d5:67:33:ac:
aa:a3:d9:43:68:4d:f6:03:ee:37:a6:e8:2d:f3:e2:4f:7e:c5:
93:96:c6:60:1c:bb:19:a3:07:f8:3f:c2:d0:de:80:65:af:ce:
5d:dd:99:1d:e4:72:7d:93:46:48:cf:d6:41:a1:b7:aa:77:34:
99:44:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org