Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YUYXq44r_OwT6dcQ6x7KezLnDu0.roa
File: YUYXq44r_OwT6dcQ6x7KezLnDu0.roa (raw, json)
Hash identifier: aLWSgYZ3UZkwE3YnPFXiRVozcXBl6CgtlIzY9CKK1p4=
Subject key identifier: 61:46:17:AB:8E:2B:FC:EC:13:E9:D7:10:EB:1E:CA:7B:32:E7:0E:ED
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188BEE9A9D5135DB6D9EF9013F896B562D9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YUYXq44r_OwT6dcQ6x7KezLnDu0.roa
Signing time: Thu 15 Jun 2023 11:56:04 +0000
ROA not before: Thu 15 Jun 2023 11:56:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 86.107.50.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 20:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:e9:a9:d5:13:5d:b6:d9:ef:90:13:f8:96:b5:62:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 15 11:56:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=614617ab8e2bfcec13e9d710eb1eca7b32e70eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:eb:92:73:61:93:6b:38:56:6b:30:57:e8:
29:73:0c:cb:71:78:e7:6a:91:3b:79:c9:d4:df:29:
0d:23:b0:36:fe:ff:17:9d:14:0d:02:72:b4:ee:88:
de:77:6c:a3:08:b3:22:89:2c:51:d5:91:6b:9d:f6:
af:cf:f5:8b:2a:fd:8b:41:6a:f9:b3:0c:11:fd:8e:
40:12:fc:2d:d1:aa:8d:d2:cc:47:ca:f8:cd:e3:5c:
44:c7:69:97:89:82:83:70:72:47:87:a0:18:20:bc:
b0:72:43:50:15:56:ad:6b:aa:f6:b0:0f:9c:f2:da:
5a:f8:c6:c3:ca:8d:db:11:4b:84:b6:46:d9:e1:38:
f0:1e:4b:5a:dd:4a:f7:a4:8a:fd:c3:4b:ae:f8:52:
28:af:d8:08:22:82:01:64:1f:d0:0a:08:d3:55:dd:
2b:18:6a:c6:91:2b:b4:76:90:60:bf:d0:c9:05:1f:
69:6e:83:e5:90:50:a1:21:df:fa:24:3a:d4:54:ea:
dd:29:f8:24:46:a1:bd:2e:74:65:f6:6e:68:c9:5a:
4e:be:d3:8b:40:d4:d1:a2:ca:96:ca:93:15:87:1a:
c2:c9:fa:2f:2f:cf:20:39:da:f9:7f:59:c1:58:ed:
5c:0d:06:eb:74:d1:18:f3:4e:82:5f:25:78:fc:40:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:46:17:AB:8E:2B:FC:EC:13:E9:D7:10:EB:1E:CA:7B:32:E7:0E:ED
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YUYXq44r_OwT6dcQ6x7KezLnDu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
86.107.50.0/24
93.115.203.0/24
94.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:10:b2:ed:e9:f1:cf:fb:83:a5:75:c9:0f:d5:b9:3e:4b:dd:
d5:af:9b:0b:6f:49:ea:dd:e9:9d:c2:19:83:ac:80:27:5f:92:
91:1c:9e:0b:c8:68:fd:62:e0:36:d3:cb:6a:d1:ff:67:36:95:
de:cf:b2:51:16:19:4b:63:33:ef:9d:8a:3a:63:e0:7a:4c:f0:
21:42:f2:c4:e2:12:51:e5:ab:f4:2e:05:ce:2c:fe:d6:bb:f8:
b9:27:00:2b:57:86:7e:07:67:03:33:0d:f3:36:25:67:6a:da:
6b:74:65:90:71:98:22:ac:3f:93:7b:d8:94:9c:2e:0c:f0:db:
fc:8e:5e:e1:5a:9c:2d:4b:a4:b2:e6:c3:5f:95:76:5e:ef:b8:
7e:cf:f8:a7:2f:28:21:62:89:fc:78:23:61:62:7e:ac:f3:02:
c9:be:80:16:9d:f2:4a:db:09:88:6a:5f:1e:61:82:2b:11:0b:
93:9e:63:48:58:b3:bd:93:9e:5b:45:fc:ad:0b:8b:7e:65:c8:
54:dc:e1:88:50:42:62:cd:b4:ba:19:36:33:2d:91:24:7f:84:
6a:90:18:58:34:ce:ab:8f:07:90:3c:03:f6:6f:1c:bd:68:82:
71:93:d3:b7:e1:b2:b8:e8:14:b8:1c:bc:a5:26:1e:45:cd:4a:
d3:a2:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org