Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dJmVedY69N_eqWPUhdukuY8l2rU.roa
File: dJmVedY69N_eqWPUhdukuY8l2rU.roa (raw, json)
Hash identifier: ZdnOZOhln0hG9aM1npQSoAv5O6GyKs9t2JS53p0btLk=
Subject key identifier: 74:99:95:79:D6:3A:F4:DF:DE:A9:63:D4:85:DB:A4:B9:8F:25:DA:B5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0186C1C052C7E5E192DC9526E7322182F61C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dJmVedY69N_eqWPUhdukuY8l2rU.roa
Signing time: Wed 08 Mar 2023 15:04:12 +0000
ROA not before: Wed 08 Mar 2023 15:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 89.37.193.0/24 maxlen: 24
89.35.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 03:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:c0:52:c7:e5:e1:92:dc:95:26:e7:32:21:82:f6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 8 15:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74999579d63af4dfdea963d485dba4b98f25dab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:9f:46:cd:cd:fe:1d:93:0b:fd:c0:91:2d:
1e:5d:0a:d9:08:a6:2d:1a:a0:c1:a6:42:2f:c4:3d:
0f:01:0c:5c:b0:7e:a6:ea:1d:0c:c7:45:9b:1a:37:
ec:ca:1a:51:26:5e:24:c2:00:18:6e:5e:ff:7d:11:
54:4a:80:83:7e:7e:da:e6:cf:d3:5a:6e:40:93:87:
02:61:93:a9:b3:e7:51:cc:fb:58:3a:2c:1b:38:60:
7f:6e:a9:be:93:6e:85:a0:64:84:1d:cb:91:39:7f:
4f:ec:07:10:8a:21:82:84:44:d2:c8:50:70:d4:41:
d0:34:05:ea:cd:2a:c1:8a:86:56:55:d1:b6:35:ea:
05:b0:18:cf:73:e7:a3:77:8d:ff:48:20:71:e3:0e:
3a:ae:e8:d6:dc:5d:2d:e8:7a:ff:1e:08:b1:6e:b9:
87:2a:63:c5:90:90:bb:d5:a4:df:94:96:51:f5:b6:
73:af:d2:90:f1:0b:4c:e4:a6:dc:35:a7:53:68:9b:
4d:23:5a:d1:57:fa:d2:43:db:39:e6:b9:06:bd:aa:
e4:ec:7a:fc:2d:19:2b:b0:fc:ac:98:6b:df:65:8f:
d8:4d:59:0d:49:2c:2b:68:ab:50:e6:9a:ac:81:64:
40:40:d1:d1:e2:f3:88:23:e8:d4:d9:d2:6f:00:fb:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:95:79:D6:3A:F4:DF:DE:A9:63:D4:85:DB:A4:B9:8F:25:DA:B5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dJmVedY69N_eqWPUhdukuY8l2rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.73.0/24
89.37.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ad:fc:b2:a6:6c:46:a2:66:03:78:af:7b:db:35:10:1f:52:
b7:dc:c6:5d:c6:46:f4:ff:26:4c:f6:10:69:69:48:6d:f7:ca:
15:7b:03:1b:72:54:e6:ae:95:32:34:41:5e:62:e8:82:72:a8:
a3:f6:19:e4:b6:bb:82:79:f2:9b:a3:11:30:08:b8:c2:ae:b1:
13:9d:aa:31:b8:7d:62:35:7d:36:e8:94:41:ab:e4:dd:96:77:
31:09:30:bd:bb:91:a4:e3:93:ef:69:b9:91:2e:c3:92:41:f3:
f9:c6:c3:e4:8b:7f:4a:ff:f5:79:38:36:79:da:84:16:a2:4c:
66:a4:5f:db:cc:92:1c:14:af:e4:c3:41:88:37:d8:c5:f7:e8:
aa:56:17:01:9a:5c:fb:49:f2:e8:9a:25:a8:6f:d8:a5:89:95:
88:02:88:ba:3e:36:a0:1f:f1:54:d2:71:52:e7:72:ac:74:d5:
5f:64:f3:d2:20:40:60:fa:dc:53:ce:1d:11:c1:78:a5:8e:aa:
dc:77:94:54:a6:e3:28:65:39:bf:20:43:d8:79:8c:c4:dd:29:
b0:64:5c:22:84:ac:ca:e8:2a:3a:8d:cb:9b:19:83:ea:dc:dc:
d8:33:73:64:1f:b0:95:2b:b1:65:f6:ff:7f:63:4c:ea:b9:79:
01:01:41:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org