Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Xvxi5oT_WrQKYTJIXHpzeOKSpT4.roa
File: Xvxi5oT_WrQKYTJIXHpzeOKSpT4.roa (raw, json)
Hash identifier: TU279td0kOlNXyt4EBUEYGXN6NAR8qSvwCiZlqBuGsQ=
Subject key identifier: 5E:FC:62:E6:84:FF:5A:B4:0A:61:32:48:5C:7A:73:78:E2:92:A5:3E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC493447675ACCE8A6BFDB49E7BE1DCB2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Xvxi5oT_WrQKYTJIXHpzeOKSpT4.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400377
IP address blocks: 89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 09:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:44:76:75:ac:ce:8a:6b:fd:b4:9e:7b:e1:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5efc62e684ff5ab40a6132485c7a7378e292a53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:6b:3f:b4:a8:70:48:0b:6b:08:a3:37:6f:
00:de:cf:5e:85:c7:e3:0e:64:54:ab:54:72:d1:8e:
d3:9c:2f:87:63:0c:96:4b:4d:c7:e4:9d:38:06:78:
b4:bd:d8:2a:bb:dc:4b:0e:1a:e7:85:ee:cb:84:51:
bf:9f:a4:88:47:32:c0:a6:fa:d7:d3:9b:75:94:be:
77:7f:21:8b:64:30:a5:c2:a8:48:f7:52:39:93:85:
8e:40:30:f6:ea:03:9a:95:59:83:81:9d:7d:01:56:
30:14:b1:57:6e:04:69:9f:fa:d3:c3:bb:e2:52:06:
0a:06:e4:e4:75:78:c8:75:ba:38:6d:68:86:81:27:
3a:3c:8c:4e:af:de:61:86:46:5d:b4:0c:32:1a:0a:
58:20:b7:cc:7e:16:7b:0e:d0:26:52:92:bb:2c:ce:
e8:c0:8f:d1:18:2d:1b:77:a4:79:21:09:4c:a7:c4:
89:33:85:cc:86:f3:16:4e:14:69:e0:a4:17:fb:62:
cc:50:c1:b8:ff:e0:b8:e0:d3:64:1e:f8:49:b6:28:
ed:66:97:fd:56:fd:f4:f5:1d:96:38:ce:9a:c1:e4:
e6:9e:c9:3c:59:be:4f:b8:a6:69:ef:36:d2:4b:c7:
3e:d2:b6:b8:9c:6e:96:b4:62:93:22:7f:49:74:56:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:62:E6:84:FF:5A:B4:0A:61:32:48:5C:7A:73:78:E2:92:A5:3E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Xvxi5oT_WrQKYTJIXHpzeOKSpT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:98:ff:fe:b3:e1:ce:0b:aa:29:1e:89:7e:0d:42:41:89:df:
4d:72:a6:90:fc:f5:31:6f:82:6e:a8:38:05:ad:80:29:9b:60:
ec:99:43:92:5f:e9:38:69:ce:fa:68:8e:b5:24:b4:5f:ef:e1:
a5:61:d6:3e:b0:6b:d1:7d:96:54:37:34:a0:dd:40:c4:7e:81:
53:ad:39:ec:54:9f:8b:6e:08:84:b2:70:b5:55:c0:f3:c2:31:
80:ec:bc:c5:54:bc:60:b5:0d:68:92:8b:62:95:af:88:41:64:
33:ab:a1:1d:bf:60:e4:c1:33:59:c7:5f:a5:30:d9:70:44:c0:
d6:ac:b4:ef:6d:7e:b8:53:61:e0:42:e0:0b:91:59:69:a6:90:
ab:7b:fe:a2:42:51:80:0b:4b:12:74:ce:75:a8:4f:c5:17:71:
10:3d:ad:f7:b4:17:65:99:9f:99:90:6d:9a:e9:b4:9a:87:53:
10:1d:3e:32:00:98:df:de:84:6b:e6:d1:e2:c8:01:57:eb:fe:
3f:58:d1:fd:d2:a6:1c:e1:2c:57:c6:f8:dd:79:2d:aa:d4:b1:
a5:2b:7b:62:2a:94:9b:9f:46:b1:33:14:be:a7:2b:a1:80:1d:
a2:1f:09:92:9f:df:d5:a6:24:2c:a2:c5:1e:96:ce:18:df:a2:
64:8a:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org