Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_R9tfm_zAOahQ3vy93VT96wzwlQ.roa
File: _R9tfm_zAOahQ3vy93VT96wzwlQ.roa (raw, json)
Hash identifier: 5T491tj7ZwxX1gfxB/KjXLSHkSsl07gx9X/H51M8TKE=
Subject key identifier: FD:1F:6D:7E:6F:F3:00:E6:A1:43:7B:F2:F7:75:53:F7:AC:33:C2:54
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188999756035C996EDB13FD41BEDED1E144
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_R9tfm_zAOahQ3vy93VT96wzwlQ.roa
Signing time: Thu 08 Jun 2023 06:00:11 +0000
ROA not before: Thu 08 Jun 2023 06:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 2.57.241.0/24 maxlen: 24
89.35.73.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 09:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:97:56:03:5c:99:6e:db:13:fd:41:be:de:d1:e1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 8 06:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd1f6d7e6ff300e6a1437bf2f77553f7ac33c254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:61:51:7c:b7:88:ed:61:0c:b7:59:f1:5e:
4f:5f:40:45:e3:1c:18:6c:bc:cf:8e:2e:04:42:63:
59:2f:44:0d:fc:ef:7e:ca:b9:04:32:5b:9a:8d:b8:
a4:e7:0b:eb:29:42:f4:e8:e4:72:0f:60:9f:29:06:
12:82:57:90:2c:18:cc:95:71:bb:01:77:cd:8a:41:
13:28:82:8e:ee:6f:4d:0f:4a:ca:49:fe:64:3a:00:
c2:45:cc:8d:3f:6f:42:77:69:80:96:64:a7:98:a1:
f8:59:6a:e7:ab:19:42:9f:42:0f:3f:1e:e7:71:0d:
89:3e:8d:65:a8:e5:e7:1d:17:aa:55:22:fe:78:57:
25:08:42:e4:c4:a4:aa:00:e9:85:b7:87:32:df:f9:
7f:70:90:c4:c9:ba:b4:58:29:4d:86:18:3c:e7:3a:
ff:7d:41:d5:ef:3d:5a:2b:a7:59:58:4b:64:33:3c:
6a:15:a4:58:91:04:b3:6c:87:92:91:60:14:3a:32:
63:ac:d3:a2:5f:81:19:ae:ff:b2:d8:87:b6:ea:dc:
e7:62:44:0e:a6:71:1b:ce:f3:59:d9:6b:00:e2:d0:
8f:c9:b4:b5:d4:ff:c4:21:2a:d4:ab:de:dd:29:a9:
5a:01:82:b8:ba:05:fe:35:a6:53:b4:02:9b:7b:a2:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:6D:7E:6F:F3:00:E6:A1:43:7B:F2:F7:75:53:F7:AC:33:C2:54
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_R9tfm_zAOahQ3vy93VT96wzwlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
89.35.73.0/24
93.90.75.0/24
Signature Algorithm: sha256WithRSAEncryption
20:74:a9:bc:3a:fc:42:3c:dd:29:ec:db:da:bd:ac:3c:7f:31:
b2:fc:7c:40:9a:45:46:f6:d8:6f:2a:b3:a3:3c:c8:4e:d0:91:
45:bd:28:7e:e2:2b:15:4d:99:35:69:4c:e1:b4:ce:5d:55:ad:
bc:1c:10:b6:ab:57:36:d8:5f:aa:dd:a5:8b:9f:ee:ef:01:51:
ac:cd:b9:c6:7c:64:a2:a7:2f:7f:2e:74:e4:77:19:3a:92:2e:
c6:66:d9:89:7c:f5:88:aa:2f:8e:3a:14:f3:be:cf:13:5b:5f:
c7:80:d1:3e:f3:99:dd:3d:19:81:1d:d6:d2:5d:02:92:74:87:
a4:38:0b:1d:f7:98:06:f3:90:2f:c8:e5:25:21:57:d3:44:9a:
13:5d:2d:6f:ea:f2:dc:7c:0a:81:52:ae:44:4e:d1:e3:c1:1e:
04:5d:f0:7f:44:2b:39:fe:de:ca:73:3e:72:0f:06:80:1e:07:
b1:42:70:5f:2b:cd:e4:03:92:1d:20:59:31:c5:d4:6b:2e:aa:
df:61:1a:83:c4:59:9e:95:a0:f7:e7:3e:94:da:ae:15:32:a1:
81:fc:a1:c3:3c:e3:21:dc:e8:d1:fb:2d:a6:df:99:30:79:5e:
62:67:79:42:b5:31:ea:fc:fa:1c:50:14:7b:f7:b8:75:65:cd:
93:04:55:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org