Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d82VeeN5EuHWmtQloEq3BgKwwVo.roa
File: d82VeeN5EuHWmtQloEq3BgKwwVo.roa (raw, json)
Hash identifier: 0rRZ8e95+J4NHhpVxb1cKZ2eA0seXhk5YNUmDHLhr9w=
Subject key identifier: 77:CD:95:79:E3:79:12:E1:D6:9A:D4:25:A0:4A:B7:06:02:B0:C1:5A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188AF2484414CAA14380482387AC1674EF2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d82VeeN5EuHWmtQloEq3BgKwwVo.roa
Signing time: Mon 12 Jun 2023 10:26:25 +0000
ROA not before: Mon 12 Jun 2023 10:26:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 89.34.202.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.37.195.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:24:84:41:4c:aa:14:38:04:82:38:7a:c1:67:4e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 12 10:26:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77cd9579e37912e1d69ad425a04ab70602b0c15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:aa:8f:9d:94:03:77:0d:b3:51:9e:7d:dc:
5b:bf:83:b2:7a:67:a4:2f:75:e2:d4:df:89:1e:c6:
76:0f:d4:50:63:7f:f0:f6:d5:13:ad:eb:46:87:3e:
ac:3f:1a:84:51:57:55:a4:28:81:37:00:84:be:75:
c2:06:4d:76:9e:b0:0e:14:f4:27:ff:96:c5:41:f6:
22:c7:e0:f4:cd:46:69:b9:9f:20:0e:f6:ee:8a:19:
41:8f:69:c4:96:46:6f:28:67:69:89:00:b9:17:42:
e9:1e:02:02:62:d0:7f:67:d8:d8:10:79:66:0f:ad:
2e:cc:b7:5b:2d:53:cb:db:11:83:3f:30:fc:50:a4:
e5:3b:7f:db:dc:55:5c:da:0a:89:fa:bb:3e:b0:c2:
84:58:50:fb:17:6c:a3:4e:f9:78:e7:4f:1b:46:d6:
95:fc:ab:c6:0e:f3:5b:eb:d8:95:35:e5:b8:43:df:
b0:f7:7b:53:66:c1:5b:61:c7:1f:8d:63:ab:5a:97:
7e:a5:ea:db:d4:46:6c:88:66:31:14:c1:b9:26:d1:
57:06:d4:0e:55:b3:4b:52:b5:1b:93:e7:af:f2:3e:
e2:28:f5:25:47:90:a0:49:46:39:34:6b:29:f2:63:
47:b1:0f:32:30:8d:2f:ee:09:17:b8:b1:84:1f:af:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CD:95:79:E3:79:12:E1:D6:9A:D4:25:A0:4A:B7:06:02:B0:C1:5A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d82VeeN5EuHWmtQloEq3BgKwwVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.18.0/24
89.34.202.0/24
89.37.195.0/24
89.45.35.0/24
Signature Algorithm: sha256WithRSAEncryption
24:21:5d:5e:e1:5f:f4:28:57:4d:87:36:95:9c:72:b1:d9:6c:
6d:a0:c2:ab:a5:c1:07:19:8d:73:9f:09:85:56:72:3d:b6:73:
ca:98:f0:6b:7d:d2:2a:49:e5:89:5c:d5:b3:1b:0f:d0:42:38:
79:e2:0b:e1:12:f9:aa:e6:90:fc:4a:68:67:b3:ec:0c:07:31:
4b:c3:3b:06:08:1d:4e:74:e1:89:60:26:df:93:b9:3a:e7:51:
28:d3:15:a6:2f:31:82:71:21:ee:dc:81:ad:ce:6f:fc:da:12:
87:6a:d5:38:3d:4b:fe:4b:b1:51:07:c9:18:ab:82:d0:94:96:
d7:8d:54:ac:56:e4:65:5a:9b:c1:a2:2a:2d:4c:ae:d3:a5:88:
82:d1:ab:b3:05:ed:78:52:d1:47:89:89:ed:b6:46:6f:ef:ad:
4c:0d:bc:90:c3:b6:13:25:a0:29:7e:85:fb:39:01:a0:c3:03:
88:33:c5:66:ba:2d:34:7d:70:f5:58:ad:a6:d5:7e:bf:dc:63:
bb:c2:b4:d6:c4:fc:b9:d3:f3:07:f8:42:2e:14:e3:5a:36:1f:
b1:bf:49:14:2f:13:a8:98:2a:91:57:58:3b:8a:2b:6c:f8:ed:
da:99:0a:bb:1f:21:4f:0a:d6:27:ff:9b:5d:8e:b5:ff:49:4c:
fa:f6:79:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org