Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_L4QSb4ciF8Wu2xIYZpwj6s8yT8.roa
File: _L4QSb4ciF8Wu2xIYZpwj6s8yT8.roa (raw, json)
Hash identifier: 63tV0QYvCbw/C95VGVizOQx6xDRiXP32C9dutFedn8Y=
Subject key identifier: FC:BE:10:49:BE:1C:88:5F:16:BB:6C:48:61:9A:70:8F:AB:3C:C9:3F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC49336FFDEC9BC084C5EECDA0DE8B247
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_L4QSb4ciF8Wu2xIYZpwj6s8yT8.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36113
IP address blocks: 86.107.50.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 09:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:36:ff:de:c9:bc:08:4c:5e:ec:da:0d:e8:b2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcbe1049be1c885f16bb6c48619a708fab3cc93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:e3:29:64:ad:c6:ca:20:4f:fb:7d:93:ba:
fa:4e:36:6c:1e:2f:f4:55:a3:93:46:f8:46:cc:bb:
b0:33:a5:84:16:17:39:c8:2f:14:3e:f2:a0:e5:24:
5a:50:84:fe:64:d5:e1:ad:97:f7:d6:66:2e:25:88:
3f:83:7f:fe:70:9b:82:0c:fc:41:c7:82:6a:3f:c5:
75:6a:d0:9f:2a:2c:e3:d9:ef:d3:23:0b:2b:37:15:
90:f6:d5:5e:45:ca:d9:fc:65:ca:a2:2a:0f:5c:24:
bf:93:06:b5:97:81:d2:26:ac:42:05:b8:43:94:0c:
d3:f1:22:b2:b1:92:a6:d4:4d:d7:f0:ca:e8:f3:bd:
1c:90:b8:3e:87:40:40:85:b2:17:db:85:73:ae:a9:
13:6f:da:49:73:3b:36:da:14:ca:3e:a0:e1:6d:fe:
a7:65:70:ab:c9:98:da:d7:db:95:66:76:11:8f:16:
39:fa:45:d5:79:bb:85:db:34:95:83:1c:18:2a:59:
07:6c:8e:e4:22:05:0c:96:31:bb:65:49:80:d9:fc:
d5:01:35:f8:db:3e:c2:61:73:68:f0:f7:78:ad:b8:
bf:f6:01:a8:43:60:de:6a:c9:62:09:32:9f:e8:64:
0e:f9:4a:63:30:61:8a:ed:07:70:9c:47:5f:2e:d2:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BE:10:49:BE:1C:88:5F:16:BB:6C:48:61:9A:70:8F:AB:3C:C9:3F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_L4QSb4ciF8Wu2xIYZpwj6s8yT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.50.0/24
89.40.215.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ef:54:de:71:61:75:e1:a1:50:2a:10:be:9b:d5:83:c8:39:
8d:7e:2f:4c:d9:84:74:0e:87:6d:d2:22:71:c4:58:b2:2c:4b:
ed:36:91:b4:0b:05:66:a4:89:3c:ef:a6:1b:03:d0:ab:c5:f0:
a2:a1:83:7a:9a:5d:45:71:8f:49:d7:17:31:5a:99:f2:9d:85:
f4:7b:a4:17:a6:4c:2b:e6:1c:ee:00:96:81:a3:8a:76:37:4f:
03:75:a5:c3:5f:95:dd:75:e6:88:b3:6d:84:d6:f3:ab:20:95:
dc:01:d6:ec:d6:ca:d4:bd:84:58:70:32:9c:b6:21:12:0a:29:
96:5c:c8:bc:5d:99:85:3e:6e:0a:74:6c:3c:2e:17:7a:ad:b3:
2c:01:0c:ac:74:58:cb:3a:bc:ba:21:99:93:19:38:2a:e3:4e:
3f:ae:70:a1:a9:b4:a5:a6:6e:a0:a7:d1:76:62:e1:cc:6e:86:
f4:03:1d:9f:83:42:db:7e:58:73:6c:cb:ff:4a:f0:e6:e0:cf:
23:d4:69:04:d9:47:6f:78:ea:42:43:f4:10:35:c0:e8:bd:d0:
76:36:b0:de:d5:6b:3f:9f:d6:7b:d2:2b:e7:a5:67:b7:d0:00:
d9:91:44:dc:f0:ec:a5:d8:7b:69:62:8c:5f:ef:c7:ae:64:01:
04:5c:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org