Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XOHaRz40pnq-n3SCEZZ3L1x-Tzc.roa
File: XOHaRz40pnq-n3SCEZZ3L1x-Tzc.roa (raw, json)
Hash identifier: Tv2/g4C72jD2V6+KTdBSGd8eDqL3dsHdW/O9smDwl9k=
Subject key identifier: 5C:E1:DA:47:3E:34:A6:7A:BE:9F:74:82:11:96:77:2F:5C:7E:4F:37
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B1DEEB55DB32020455015509AECA7D783
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XOHaRz40pnq-n3SCEZZ3L1x-Tzc.roa
Signing time: Wed 11 Oct 2023 08:51:05 +0000
ROA not before: Wed 11 Oct 2023 08:51:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Oct 2023 09:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:ee:b5:5d:b3:20:20:45:50:15:50:9a:ec:a7:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 11 08:51:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ce1da473e34a67abe9f74821196772f5c7e4f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:b9:1a:49:67:19:4a:df:58:6e:e9:50:56:
2c:fc:f1:d5:a8:74:db:0a:d4:b2:13:ef:43:72:84:
14:b8:e7:97:27:ee:e4:a3:ae:41:d2:8e:92:9d:10:
23:18:11:e9:b4:6a:db:a0:4c:4a:cc:e7:01:8d:87:
0e:03:b5:02:ef:89:c5:60:1a:59:85:59:4c:70:2f:
b0:e1:e2:ba:38:8b:7d:32:27:7c:ce:96:23:39:5b:
ae:7d:06:b7:eb:05:a8:be:ee:37:81:93:2a:a8:17:
e1:bd:eb:d6:37:e0:db:3a:6e:ee:f8:a8:63:d8:dc:
66:47:a5:24:5e:de:6f:91:3a:cc:16:61:6f:45:4b:
b8:de:fc:71:f1:4a:a6:1e:64:98:45:aa:5d:40:68:
c3:a1:c0:eb:b3:8f:80:34:9e:8d:88:77:37:75:4f:
2f:98:1e:b8:7b:28:9f:63:f3:f8:9c:f4:12:40:0f:
9e:da:14:30:bf:69:60:74:56:96:78:96:0a:d3:13:
6a:17:ec:b3:ed:b7:0c:b8:b2:5b:e4:3c:54:44:9a:
ef:fc:d4:7a:03:18:0d:bb:fd:83:c8:d1:5c:d7:a5:
5a:a7:57:9b:b5:22:fd:9d:41:2b:1a:94:fa:a6:ba:
b2:93:20:8a:70:c1:82:9e:3c:f9:6d:6a:e7:99:d1:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E1:DA:47:3E:34:A6:7A:BE:9F:74:82:11:96:77:2F:5C:7E:4F:37
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XOHaRz40pnq-n3SCEZZ3L1x-Tzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0/24
86.107.51.0/24
89.35.119.0/24
89.35.130.0/23
89.47.55.0/24
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ac:c0:3c:b2:1a:18:71:b2:f8:f2:1a:97:ab:4e:86:f3:e7:
5e:af:39:e5:fd:9b:9c:7a:e0:f5:19:1a:03:ab:bd:8f:6f:70:
49:6a:f9:f7:34:7c:a0:7a:0c:f8:a9:dd:5e:35:a1:75:ed:0a:
84:4d:77:47:6d:ac:3d:eb:38:c4:28:9b:e6:be:2a:05:c0:2a:
40:62:ac:45:db:28:ec:66:4b:80:80:e9:f3:4b:26:2b:84:21:
3e:41:9e:98:e9:26:f9:7e:12:22:6f:11:2e:80:ba:76:54:0e:
14:a8:b3:fd:e3:13:d4:21:89:a1:9a:b3:bc:81:13:15:23:e1:
f8:93:d9:70:2d:b1:12:29:69:43:f1:06:4e:2b:3e:1d:b0:0c:
ae:92:4d:68:45:e6:41:ef:bf:30:e8:b1:7e:c0:03:60:bb:84:
b3:ca:4e:8f:8a:b9:2c:b3:85:a8:9d:32:31:b4:f7:6f:53:06:
e2:fd:f3:c1:35:46:31:ef:b0:63:9d:99:00:04:91:4a:d7:f0:
89:b6:fe:01:95:7d:13:b4:0a:f6:c2:81:44:5e:dd:2a:c9:d7:
44:31:85:0a:a8:d8:a2:70:c0:0b:89:a0:69:63:1b:61:58:45:
ba:09:5d:de:ef:6c:e0:5b:a7:c2:b9:3e:6e:61:8b:d0:8f:49:
52:ac:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org