Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WYaxYIAsZMcxBxY88TX40_JTJD8.roa
File: WYaxYIAsZMcxBxY88TX40_JTJD8.roa (raw, json)
Hash identifier: Qg/ETCeX4q/VmxNqJyLfp0HF2YD6RcW82DRL46EWtw0=
Subject key identifier: 59:86:B1:60:80:2C:64:C7:31:07:16:3C:F1:35:F8:D3:F2:53:24:3F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B31D6647F959D7CA0385D78480E48C3DC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WYaxYIAsZMcxBxY88TX40_JTJD8.roa
Signing time: Sun 15 Oct 2023 05:36:55 +0000
ROA not before: Sun 15 Oct 2023 05:36:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 188.215.31.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 04:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:d6:64:7f:95:9d:7c:a0:38:5d:78:48:0e:48:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 15 05:36:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5986b160802c64c73107163cf135f8d3f253243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:db:9e:6a:80:e6:c4:e4:ab:a8:37:b0:e1:
9b:16:83:00:04:81:e6:c1:3f:82:9a:1a:84:d4:8e:
e5:93:7a:fa:4b:b0:ef:d3:6b:91:93:e9:81:11:05:
8b:37:f3:49:54:a0:43:d8:68:37:2f:e7:c0:9d:14:
05:69:c4:7c:bb:82:61:7f:cc:7d:70:1e:31:d8:93:
97:d3:d3:d5:51:af:63:89:22:ba:fe:ec:28:58:d4:
f6:21:42:27:aa:08:62:b7:83:8f:68:5e:a7:5c:ce:
7a:b4:03:a4:e9:96:46:59:7a:bf:e6:1b:ef:ea:af:
e1:12:a5:03:cd:40:e6:9b:ac:f5:ed:2b:97:9d:69:
3c:d1:03:24:53:69:a1:3e:bf:54:40:d9:fc:73:6d:
ea:2e:eb:d2:3b:95:b2:93:3d:1f:d9:02:48:e5:c5:
91:5c:dc:50:d4:fc:03:b5:66:ce:30:ba:d3:7b:c0:
9e:46:16:84:1e:a0:d9:ea:3a:42:1a:a5:a7:96:b6:
3c:39:69:7d:b4:a9:80:fc:6c:b7:98:51:c2:1c:bc:
ee:49:4e:20:53:6c:1b:66:a9:ce:3f:72:73:cf:44:
13:12:f6:fd:df:cb:6d:0a:c7:d6:17:c7:22:e7:77:
21:04:fa:34:98:84:40:9a:ce:3a:70:6f:00:59:5a:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:86:B1:60:80:2C:64:C7:31:07:16:3C:F1:35:F8:D3:F2:53:24:3F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WYaxYIAsZMcxBxY88TX40_JTJD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
89.40.36.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e1:50:16:a0:44:fa:40:07:46:17:5b:c7:d0:bb:92:60:a6:
ee:f2:8f:85:85:05:d1:5f:d8:0f:f1:e1:0d:ef:55:c6:c7:5c:
9d:d8:ff:6b:41:81:2f:d8:e9:b1:e9:57:f4:46:9a:d6:a3:65:
13:f6:bb:be:45:a9:7b:06:cd:f0:ce:29:af:9a:80:86:ab:be:
40:f8:7e:0c:3d:b6:9e:53:e9:00:f6:cc:82:9a:78:a5:5c:4f:
70:fa:a4:97:58:88:8e:0b:67:fe:78:e1:07:61:cc:04:4e:94:
ad:33:29:c5:d8:e6:ea:0b:87:05:21:19:95:d2:8c:9c:bf:dd:
75:ca:44:29:7c:3a:aa:21:83:36:18:db:98:c7:95:e5:7e:b3:
d2:aa:2a:3d:7c:3d:b8:21:85:c7:3e:76:df:64:a2:34:45:59:
26:9b:ee:42:f9:2a:44:6c:6f:bf:87:55:3d:0a:91:ff:2e:9b:
86:4a:38:65:5a:e9:30:de:b4:2a:42:6b:ee:eb:f7:ae:c5:4a:
49:ed:66:f9:69:91:e6:98:3a:a0:aa:fc:04:4d:e4:f5:82:e6:
54:30:bb:28:1d:89:c9:3a:bb:c7:66:0f:dc:3f:4d:32:2a:7e:
d0:9f:3d:58:c1:a1:62:45:55:a0:7d:2f:8c:a0:bd:a4:f5:0e:
a8:d6:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org