Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/X6Ok7b8zYQHOLFvntYTb7k40QQc.roa
File: X6Ok7b8zYQHOLFvntYTb7k40QQc.roa (raw, json)
Hash identifier: zwFWy3zDz/NzsHNFz4xMtPB5QF36rbglyK+1jwvOPHM=
Subject key identifier: 5F:A3:A4:ED:BF:33:61:01:CE:2C:5B:E7:B5:84:DB:EE:4E:34:41:07
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193762FE4013DD35AFD9DDA895EBF6383A4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/X6Ok7b8zYQHOLFvntYTb7k40QQc.roa
Signing time: Fri 29 Nov 2024 04:31:10 +0000
ROA not before: Fri 29 Nov 2024 04:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 89.40.70.0/24 maxlen: 24
185.254.67.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Dec 2024 10:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:2f:e4:01:3d:d3:5a:fd:9d:da:89:5e:bf:63:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 29 04:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fa3a4edbf336101ce2c5be7b584dbee4e344107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:5b:72:6a:43:8c:8d:1a:a9:21:db:77:ea:
c2:e2:67:51:fe:96:0a:8d:d7:ae:e6:9d:7a:6f:0e:
ee:d8:87:f9:c9:e8:c2:1e:ec:46:3f:fc:d4:72:8c:
a1:ac:25:76:46:21:e2:00:2d:84:05:42:1a:80:76:
18:94:67:de:02:35:d2:dd:8e:7d:eb:f2:de:ce:8e:
2d:55:ef:ee:d8:5c:ca:54:73:e3:12:03:c1:74:fd:
8e:d0:cc:b9:86:09:65:1c:30:06:5f:0b:1b:d3:59:
e5:46:41:c9:c7:9d:91:b6:c2:f7:91:eb:79:ee:d8:
a4:6b:bb:cd:87:b0:82:ac:2a:87:25:ad:dd:d0:f3:
a0:89:7a:ed:17:d7:86:08:6c:d8:44:a0:7c:93:e7:
f5:1c:c7:ad:bc:6e:85:14:80:1c:7d:05:e1:79:af:
45:60:4d:5e:ad:45:49:e6:32:7d:c9:5b:95:32:f4:
ea:6f:36:72:2e:ac:86:c0:d3:a1:e2:9d:ee:a3:39:
f4:06:5c:b9:87:cf:6c:8b:0c:76:8f:9c:6a:d1:07:
fd:92:6e:b8:18:0b:a4:e7:72:ed:85:6d:67:86:44:
97:62:9c:7b:38:b4:fd:2c:13:25:de:74:da:75:92:
04:95:59:ec:ce:75:f4:dd:64:fc:0e:4e:48:03:df:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:A4:ED:BF:33:61:01:CE:2C:5B:E7:B5:84:DB:EE:4E:34:41:07
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/X6Ok7b8zYQHOLFvntYTb7k40QQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.70.0/24
185.254.67.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
56:85:ac:38:f6:53:f1:5c:d2:83:ed:3a:e1:5b:57:81:75:3f:
26:00:b3:7e:cb:56:73:6f:90:2d:34:e9:05:2b:0b:ff:5e:58:
0a:31:f4:c4:43:7a:24:64:4c:be:53:72:e7:af:a1:37:21:f1:
cd:b9:f3:2e:27:b0:79:48:d8:04:de:3a:26:83:f4:71:14:f8:
90:5d:f1:5e:d9:4f:22:89:fd:8d:89:e9:78:b6:54:17:c3:93:
87:39:54:29:da:3c:65:3c:9c:b9:4d:37:64:5d:29:9f:d7:3b:
08:2c:ba:aa:5c:34:10:59:df:9f:f7:9f:22:1a:dc:b2:67:bc:
db:52:43:f1:ab:34:af:12:5c:bf:cb:09:3f:70:d6:4e:ed:22:
e9:8a:7b:e2:62:86:17:c4:2b:8b:9d:fc:a7:99:bc:d5:2f:35:
d0:ab:b3:e3:36:aa:ac:42:74:d6:90:66:ed:bb:d6:f1:49:2f:
17:6e:c0:47:93:06:47:91:f1:3c:80:23:77:ce:b9:ee:d5:94:
42:a2:b5:ee:e1:e5:3e:4a:63:d9:2d:d5:d6:57:93:55:58:97:
51:0d:8b:59:76:b2:53:9e:3f:9a:31:f5:69:93:fa:d7:6c:8d:
50:a3:3d:a1:a5:10:92:3c:66:20:a3:ff:05:fb:dc:f0:70:ad:
56:22:f7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:00:10 2025 by rpki-client