Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V88oZhI1OHpQapx5ghvxsvWc-4U.roa
File: V88oZhI1OHpQapx5ghvxsvWc-4U.roa (raw, json)
Hash identifier: 3yrPhALwiBAJ0/Au7WKfUB+bVuvmV32+ymBxaUNDVRk=
Subject key identifier: 57:CF:28:66:12:35:38:7A:50:6A:9C:79:82:1B:F1:B2:F5:9C:FB:85
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185AAC65BB12954FBA2F117FCD7C3E65829
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V88oZhI1OHpQapx5ghvxsvWc-4U.roa
Signing time: Fri 13 Jan 2023 10:56:44 +0000
ROA not before: Fri 13 Jan 2023 10:56:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 86.107.168.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jan 2023 07:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:c6:5b:b1:29:54:fb:a2:f1:17:fc:d7:c3:e6:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 13 10:56:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57cf28661235387a506a9c79821bf1b2f59cfb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:be:c6:d6:d0:ab:70:2d:5f:45:1e:f5:06:
77:97:39:35:fd:66:a2:f2:33:09:54:0c:cd:9a:b7:
8b:71:87:8a:70:ee:ff:5f:88:77:ac:12:9e:f1:c5:
66:7e:64:10:6a:64:28:17:c0:20:25:ef:5b:23:0b:
4a:5c:f2:ac:51:72:e2:4f:8f:aa:2a:af:d5:2b:72:
47:31:a2:32:73:6a:b6:c4:a4:06:b3:ac:fd:ad:40:
28:e7:e5:c2:4b:b6:e4:32:54:eb:42:9e:43:3b:65:
d5:f5:b4:71:39:dd:51:dd:69:1b:20:84:24:3d:31:
bb:29:73:b7:07:6a:93:5e:e4:82:ff:f3:cd:cb:53:
d8:15:8a:3e:5e:50:e7:87:17:bc:5f:26:e4:09:33:
fb:87:8c:64:ef:67:fd:46:92:89:53:98:4f:8b:0b:
54:7a:f0:cb:3d:ea:b6:2a:30:2c:09:af:55:32:4e:
e4:c7:c9:41:b2:c5:ef:39:5c:3e:ef:07:13:b8:07:
78:fe:75:b7:05:9f:d8:aa:3d:c6:3c:13:db:0d:8a:
13:af:b0:9d:9b:47:ae:a7:42:30:b2:26:ef:63:34:
09:37:dc:ee:43:7f:1a:a6:18:13:4c:01:6b:dd:43:
2d:23:da:b1:83:4d:09:e3:62:f2:83:ba:fb:f9:2d:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:28:66:12:35:38:7A:50:6A:9C:79:82:1B:F1:B2:F5:9C:FB:85
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V88oZhI1OHpQapx5ghvxsvWc-4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
86.107.168.0/24
93.90.74.0/24
Signature Algorithm: sha256WithRSAEncryption
50:97:e4:bc:15:72:ac:a7:2b:36:81:9b:18:f8:81:2c:84:08:
f0:22:98:d5:14:c2:c8:13:0a:4c:a4:e1:cf:d2:fe:b6:c6:32:
b1:9f:47:46:3f:53:df:63:64:20:11:b2:d5:63:93:aa:72:45:
5c:59:d2:c6:4d:cf:d3:76:16:ac:f4:ff:4a:8c:36:73:fc:6b:
90:c1:88:35:e5:e4:34:b4:fa:8e:a9:08:ed:a1:32:ab:65:88:
98:5c:c3:83:b0:df:88:94:fc:b3:29:6a:ad:23:c4:88:82:b9:
58:dd:5c:5b:8d:89:72:d2:b1:a9:8d:5d:82:fd:84:37:20:b6:
b8:63:76:76:a1:f8:f7:d3:7b:8d:b4:43:a3:d4:bd:90:70:f0:
ae:7c:46:1e:a4:7b:cd:e3:5c:e7:73:e8:b5:65:d4:8a:10:e0:
46:b7:3f:3e:76:00:3b:32:05:36:46:75:15:f8:4c:3e:77:b3:
27:7b:cc:08:59:2f:60:29:5b:ad:de:04:ba:1b:4c:7a:8e:7b:
41:7a:00:be:a6:35:6e:21:b1:1b:20:87:98:f4:1c:4d:77:41:
ee:a5:00:b5:ff:cf:c7:0d:61:b0:c6:5a:cc:8d:09:b7:28:41:
e8:af:7f:bc:0b:49:cb:0c:4b:ee:c6:f5:08:89:3a:2b:c3:4a:
fe:2e:4b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org