Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aeeDSh8ea0QtD7xXCERK-XYQF6M.roa
File: aeeDSh8ea0QtD7xXCERK-XYQF6M.roa (raw, json)
Hash identifier: 1/IHzTreRZQC+svjiJyXXcVAtjao+MqJQfLxnrdoxSo=
Subject key identifier: 69:E7:83:4A:1F:1E:6B:44:2D:0F:BC:57:08:44:4A:F9:76:10:17:A3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B36CD250239EE7CFFD15A2CCDF37923C8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aeeDSh8ea0QtD7xXCERK-XYQF6M.roa
Signing time: Mon 16 Oct 2023 04:44:55 +0000
ROA not before: Mon 16 Oct 2023 04:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 188.215.31.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 15:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:cd:25:02:39:ee:7c:ff:d1:5a:2c:cd:f3:79:23:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 16 04:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69e7834a1f1e6b442d0fbc5708444af9761017a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:d1:73:b3:e2:b6:f7:4f:32:9f:b8:75:a7:
81:4f:16:c2:12:a0:b2:8a:a7:46:06:3c:de:96:cc:
56:7b:cb:2b:ba:e1:33:9e:11:41:05:9d:25:cc:8c:
e1:88:35:b8:20:5f:e2:3f:cf:1e:2f:53:bd:60:5a:
a4:5f:60:d2:af:47:0a:54:61:bc:37:33:e3:fa:9b:
a3:49:38:c8:73:b2:46:a3:52:a7:67:06:f7:c4:7c:
b6:5f:66:0a:2b:dc:44:f4:36:78:35:56:11:71:59:
41:7f:62:65:bd:50:42:3b:54:76:4d:e9:b0:65:63:
05:cd:93:69:d3:51:26:3c:eb:14:95:9e:63:0c:13:
a2:1e:10:74:31:13:b3:73:dc:bc:dd:17:fc:70:27:
3f:7f:d2:cb:eb:6e:19:24:b2:45:54:6a:61:63:f6:
17:d8:15:e7:ef:1a:9b:9a:ad:6b:e8:71:4c:2a:a8:
bf:1d:27:07:79:62:b4:eb:39:c3:38:a9:4e:33:8c:
9b:3a:2d:3d:73:5e:d0:b0:50:e8:a2:87:ed:08:69:
6f:ad:c7:c9:da:8b:e4:23:d7:a4:6c:ac:96:5c:6d:
b7:24:53:5a:01:d7:64:43:4d:7e:3b:bb:45:bc:45:
02:32:bd:1d:7a:2d:5c:89:06:d4:1b:5e:5d:91:ad:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E7:83:4A:1F:1E:6B:44:2D:0F:BC:57:08:44:4A:F9:76:10:17:A3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aeeDSh8ea0QtD7xXCERK-XYQF6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
89.35.129.0/24
89.40.36.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e7:de:ec:87:48:67:5c:34:34:ca:70:4e:0d:8a:89:1b:0a:
19:80:f5:83:be:e6:95:57:35:56:0c:fa:11:e9:76:c5:15:d4:
b4:23:7a:64:3f:f3:ab:ec:16:b9:b1:bb:7f:45:72:f1:34:97:
98:91:cd:01:84:3f:a1:4c:24:eb:91:ae:a7:89:f7:95:3e:b1:
7b:b7:ba:06:8f:94:34:0f:be:e8:b9:3b:8c:90:4b:fa:b4:7a:
3b:c2:3b:c1:38:67:78:08:30:6b:83:c6:22:e7:e2:50:26:14:
be:ae:41:69:d9:2e:11:77:81:fe:fa:bf:e3:58:58:4a:e9:eb:
07:ac:21:ce:7a:3e:44:61:f3:b1:b7:d3:ae:61:04:e7:fa:61:
e9:74:7c:ff:36:a1:35:9e:01:79:95:e7:7c:a6:fb:62:e0:60:
b2:04:a8:cf:48:18:3f:17:6c:89:8b:7d:c5:d2:18:3d:4a:d4:
de:a7:90:86:62:57:54:63:54:8e:86:05:da:b6:c6:f9:f6:96:
9b:b6:af:ad:8e:ad:38:23:fe:6f:4f:5b:32:92:6a:53:d7:ef:
3b:50:46:4d:ae:c1:b5:ac:74:ae:67:38:70:77:86:5c:e4:da:
b4:b3:11:bd:8f:1d:72:46:fd:3e:01:75:68:ce:01:54:f9:37:
b2:bb:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org