Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_Je4VMOZbIUEMewquke05G9RJgk.roa
File: _Je4VMOZbIUEMewquke05G9RJgk.roa (raw, json)
Hash identifier: QfmVq+YKDiz1D46mMgtZV7hDAFW0m9Uor6AcrXHa2kg=
Subject key identifier: FC:97:B8:54:C3:99:6C:85:04:31:EC:2A:BA:47:B4:E4:6F:51:26:09
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018BD682C9E24B96EB1EDE3F7D976FB3D05A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_Je4VMOZbIUEMewquke05G9RJgk.roa
Signing time: Thu 16 Nov 2023 05:02:57 +0000
ROA not before: Thu 16 Nov 2023 05:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 89.35.129.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 13:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:82:c9:e2:4b:96:eb:1e:de:3f:7d:97:6f:b3:d0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 16 05:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc97b854c3996c850431ec2aba47b4e46f512609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:57:0a:96:6d:2c:e7:87:b2:3a:56:f9:13:
b5:41:7c:ba:c1:d9:74:25:b0:d0:2d:20:27:9c:9a:
04:68:44:19:22:b7:be:76:ac:5f:ac:20:31:7a:da:
80:7d:78:31:f7:c0:58:53:26:49:65:70:15:cb:12:
d3:eb:51:f2:7c:59:3c:b8:3b:ec:4d:d5:78:68:ad:
ed:74:91:c4:04:9d:1d:b8:60:bb:22:97:05:bf:5f:
4d:e7:bb:2d:99:e0:d7:60:90:86:57:88:a3:7f:e4:
75:de:4c:dc:95:a3:c2:9d:dc:22:6a:92:80:12:1c:
d1:d4:f2:54:4f:81:1b:23:bf:51:0f:a3:ba:38:d7:
32:06:5d:45:5b:6f:ea:1c:15:b9:bc:c1:c0:a3:5e:
5f:bd:d4:a4:42:e7:78:81:04:f4:6a:77:79:27:1e:
06:ba:53:b9:bc:66:46:56:b5:ed:a9:fe:66:b9:f5:
55:bb:c5:6b:50:38:94:ea:c1:44:dd:71:e2:b1:5d:
8b:48:e8:b0:a2:24:91:4c:a3:0c:ad:99:8c:4d:26:
39:27:10:7f:f2:87:9f:83:8e:53:c1:c1:a0:51:ce:
f1:e3:cf:08:38:c8:4f:8d:27:50:9a:cc:70:5a:64:
53:a3:6e:af:7b:7e:e9:95:8b:46:5e:d4:9b:ab:f3:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:B8:54:C3:99:6C:85:04:31:EC:2A:BA:47:B4:E4:6F:51:26:09
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_Je4VMOZbIUEMewquke05G9RJgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
89.40.36.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fb:3a:f2:10:1e:e1:2b:fb:31:31:2f:1a:67:45:9d:39:ab:
6a:3f:8c:ae:f8:c7:aa:a9:82:80:7c:32:7c:d7:b3:1b:73:0f:
64:09:9b:77:2a:d4:be:56:c6:70:45:87:3d:de:c0:57:25:a6:
c6:ca:f7:6b:31:11:ab:74:c1:66:12:e7:47:f5:0d:68:d4:35:
f0:3d:b3:bd:cc:5a:d4:f8:5a:3b:71:12:8e:a1:37:9f:c5:5d:
7c:94:a8:81:ac:ba:94:cf:3a:75:8f:a9:20:7c:a2:ed:61:52:
95:04:62:0a:bb:39:43:63:83:4d:7c:f3:c0:1b:cf:af:71:3a:
19:8b:eb:c4:98:f6:a5:bc:63:1c:28:07:74:38:4c:cb:07:da:
29:26:b3:71:80:5a:30:1b:11:2b:87:9e:d0:b4:65:56:6a:a9:
68:ab:b0:07:17:11:59:25:5a:b4:be:83:0d:45:82:ed:2d:c6:
85:98:40:62:82:c2:7b:46:70:1a:36:c6:be:16:d5:3a:4b:0e:
97:1a:5f:cf:87:4a:9b:91:d2:75:b3:83:c5:fb:48:3d:da:2f:
ff:b3:92:7c:ee:5d:8d:f9:f1:7f:0b:30:c0:50:43:75:11:9c:
c3:61:d7:03:38:eb:ee:57:07:7f:5e:38:fc:8f:13:a0:67:0e:
96:82:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org