Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bHsI5hiykt2bjKavjSwUFRF_X-A.roa
File: bHsI5hiykt2bjKavjSwUFRF_X-A.roa (raw, json)
Hash identifier: 0wyQOBvS2z1GEOSUZOVH/WqyxYvk0T4oVMrRft1EMNo=
Subject key identifier: 6C:7B:08:E6:18:B2:92:DD:9B:8C:A6:AF:8D:2C:14:15:11:7F:5F:E0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A9EB757250D3369D83767E0197CB12839
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bHsI5hiykt2bjKavjSwUFRF_X-A.roa
Signing time: Sat 16 Sep 2023 15:58:50 +0000
ROA not before: Sat 16 Sep 2023 15:58:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
94.177.150.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 11:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9e:b7:57:25:0d:33:69:d8:37:67:e0:19:7c:b1:28:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 16 15:58:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c7b08e618b292dd9b8ca6af8d2c1415117f5fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:0b:a2:19:94:e4:03:ac:f1:14:a2:5f:8d:
9e:58:28:9d:3b:cf:1e:75:28:de:83:9f:c5:b3:a4:
60:d6:f4:4a:54:a9:f2:9a:e2:df:a0:20:25:2a:7a:
ae:e9:6a:45:cf:18:2b:41:bb:e0:32:cb:7d:f8:76:
2a:43:ea:87:b9:5f:d6:77:fb:6e:37:69:fb:45:c4:
f3:f5:69:7a:0f:8a:c0:34:01:d8:3e:8a:42:8d:78:
c4:50:bb:38:90:4e:2f:21:a4:0f:c2:03:c6:e8:e6:
6f:2c:f4:6a:de:7c:00:bd:25:00:b6:1b:fa:ce:41:
08:51:a5:14:29:83:15:c3:9a:39:b4:7e:b4:e9:c4:
42:75:ce:24:ae:a5:ac:13:84:b1:0a:b9:9b:06:cb:
11:63:a0:6b:d2:64:64:a5:b0:b8:05:eb:df:cf:d1:
01:56:9b:c4:0d:d7:a1:f2:40:a5:68:8c:10:58:93:
68:74:87:9a:91:2b:0d:65:e9:3b:78:99:7e:49:02:
d7:85:e0:b6:ac:f1:25:01:1f:26:cd:76:46:d9:66:
09:fc:4b:c5:23:8f:21:ae:c9:86:1d:c2:72:22:35:
fc:af:c2:38:51:bb:48:63:80:b4:fe:87:ab:06:d7:
2e:54:c5:31:6d:50:96:72:0b:c9:55:f5:d9:fa:ad:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7B:08:E6:18:B2:92:DD:9B:8C:A6:AF:8D:2C:14:15:11:7F:5F:E0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bHsI5hiykt2bjKavjSwUFRF_X-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0/24
86.107.51.0/24
86.107.168.0/24
89.34.106.0/24
89.34.219.0/24
89.35.119.0/24
89.35.130.0/23
89.47.36.0/24
94.177.150.0/24
188.214.107.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
14:00:22:b1:43:4d:ae:10:aa:10:2a:78:06:53:53:c9:f9:aa:
77:6f:1b:a8:25:95:48:1e:ca:5b:5d:5d:de:c6:7d:5d:74:b5:
f2:4b:b5:d5:8b:f1:42:85:a6:5b:03:dc:c4:28:50:58:71:b7:
36:63:9f:5f:2b:01:9a:61:5e:cf:1b:78:0b:f9:8c:c5:24:0c:
f1:f8:63:88:63:bc:92:f2:7c:e7:48:85:12:59:e1:93:6b:f9:
de:2f:12:02:52:78:13:22:31:2d:82:0f:91:a2:ad:e6:0b:95:
95:dd:93:6c:75:34:a9:7f:7c:2e:18:f7:5e:14:d2:7a:25:da:
fc:9d:fe:99:21:82:ed:56:0a:cf:a0:29:28:fe:a6:c6:2d:2f:
ad:a5:03:3c:60:d1:1b:f5:12:f3:6f:9b:ab:03:ce:71:84:8c:
79:0a:20:d2:f7:1b:90:13:7e:f2:5e:16:3c:fc:a8:bf:f4:3a:
53:aa:e9:64:e4:ff:d4:a8:37:8e:e7:88:d9:b9:27:2b:0e:ce:
16:de:f7:d8:87:3c:33:83:62:64:76:7a:2c:49:2a:3d:0c:5c:
d6:06:80:ee:0e:ea:54:9c:47:e5:fe:1f:e6:b7:f7:d1:49:92:
01:43:b2:e1:12:e2:85:cd:a9:ab:43:7d:e3:4f:1a:39:b4:31:
11:74:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org