Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y7Ib3hD7ZAbrqA7KMOk5aRBzyYs.roa
File: Y7Ib3hD7ZAbrqA7KMOk5aRBzyYs.roa (raw, json)
Hash identifier: TOcht2asUKFioConlu8UEahYh6FVqPSsCNLpUFoxvm8=
Subject key identifier: 63:B2:1B:DE:10:FB:64:06:EB:A8:0E:CA:30:E9:39:69:10:73:C9:8B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F765979991BFCB7347A50922584A6D692
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y7Ib3hD7ZAbrqA7KMOk5aRBzyYs.roa
Signing time: Tue 14 May 2024 09:05:26 +0000
ROA not before: Tue 14 May 2024 09:05:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56322
IP address blocks: 45.144.172.0/24 maxlen: 24
86.107.101.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
94.177.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:59:79:99:1b:fc:b7:34:7a:50:92:25:84:a6:d6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 14 09:05:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63b21bde10fb6406eba80eca30e939691073c98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:00:10:f8:ff:68:1a:23:72:74:2b:5b:3f:
c3:aa:b4:36:2e:99:f9:bc:91:02:c6:c3:0d:0b:9b:
b5:56:f6:ea:83:89:2e:68:47:60:32:cf:6d:32:36:
76:1f:ac:9f:9b:e5:69:e7:e4:7e:ec:75:af:de:18:
4f:60:f9:4c:8a:99:9f:39:66:31:bd:15:87:9e:3f:
0f:de:f7:ce:8c:70:af:89:06:10:9e:6a:a0:d5:84:
0c:c9:a4:99:0a:5d:3e:d4:1b:68:65:c0:3e:87:a3:
e5:f9:dd:c2:ff:6c:11:3f:e2:54:55:78:2c:e0:d7:
c9:98:5c:fe:b1:4e:29:fe:40:f1:90:b1:9f:76:1d:
79:db:f4:75:7e:f9:0c:13:74:78:f6:8a:1c:2c:08:
ee:1c:de:bb:e3:30:c8:cf:16:91:7c:28:8a:29:45:
37:7c:4a:d2:92:0e:e0:6e:da:8d:fc:e5:ef:ba:45:
f3:6f:fd:b1:e3:98:94:16:e6:0f:aa:ee:b0:45:76:
8d:ed:ee:5c:17:0f:91:dc:e5:e9:c7:40:e6:92:5f:
75:31:88:f0:f8:c7:0e:01:44:3c:b3:1c:ee:48:f8:
99:b0:15:ff:38:9a:d3:d7:9e:97:72:fe:1c:02:89:
4b:b0:50:52:a2:bf:94:6e:02:be:f1:85:d7:a9:80:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:1B:DE:10:FB:64:06:EB:A8:0E:CA:30:E9:39:69:10:73:C9:8B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y7Ib3hD7ZAbrqA7KMOk5aRBzyYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
86.107.101.0/24
93.113.57.0/24
94.177.147.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3d:88:f3:36:6c:db:25:3f:e0:8a:93:d0:2f:ca:1c:e1:d3:
5f:83:96:2f:33:a4:aa:37:e1:5f:94:01:fc:72:c3:1c:de:bb:
fa:47:4c:c2:30:84:53:af:16:22:54:96:22:d1:c0:8c:85:29:
43:de:30:f7:78:92:12:70:4c:47:f7:6c:1c:88:b4:a4:0a:e1:
63:bd:14:a2:50:3e:f0:bd:a9:5b:0a:6a:00:08:18:4a:be:00:
df:ea:dd:86:0b:dd:be:a1:ee:f0:e7:0b:52:a0:7c:a6:e4:e3:
61:8c:d0:c1:b0:f7:bb:20:4e:6d:57:4f:3d:d0:a3:1e:26:14:
85:3d:d0:d8:be:7d:d3:1d:ef:b9:b2:0f:db:f7:a1:05:c9:65:
02:da:67:ef:2f:ff:7b:c7:ef:6c:3b:81:68:f7:83:ad:26:c2:
a5:2b:d6:83:6f:11:1a:33:a6:33:51:3b:98:de:0e:5f:91:9a:
58:44:ec:c1:f9:bd:ad:25:54:7c:de:6f:89:95:7e:6c:f3:82:
90:5f:44:9a:ed:87:ec:6b:89:a1:75:60:13:2f:4c:5f:a0:c7:
71:97:50:36:ae:04:b6:60:73:52:5f:dd:9d:f6:de:d2:31:58:
f1:d0:52:75:81:1f:19:8c:ea:3f:0b:0c:d0:ac:85:fe:81:3c:
c2:d2:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org