Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dPpS-TGm0B6INrZ1_eKKsrhngeY.roa
File: dPpS-TGm0B6INrZ1_eKKsrhngeY.roa (raw, json)
Hash identifier: lMK56vsjiUYkyOqBZ6BX8lDwUjEz8ER6Co6Oq5FKCuA=
Subject key identifier: 74:FA:52:F9:31:A6:D0:1E:88:36:B6:75:FD:E2:8A:B2:B8:67:81:E6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AE6ABE6F9EA9C04B58A324D2F92B14B0A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dPpS-TGm0B6INrZ1_eKKsrhngeY.roa
Signing time: Sat 30 Sep 2023 15:18:59 +0000
ROA not before: Sat 30 Sep 2023 15:18:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 89.43.62.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 18:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e6:ab:e6:f9:ea:9c:04:b5:8a:32:4d:2f:92:b1:4b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 30 15:18:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74fa52f931a6d01e8836b675fde28ab2b86781e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:ef:29:a4:79:44:37:39:bf:74:e6:1c:0d:
22:6e:cd:02:c6:25:a3:cc:b7:1f:29:2f:9b:31:a3:
60:4b:f8:c9:e9:53:9e:7a:93:7d:38:0c:75:81:50:
73:c5:76:2b:18:2c:ed:f0:77:60:03:7d:c0:01:7d:
6b:bc:9f:6a:f0:a3:ef:a9:71:f7:ba:34:59:b5:78:
da:0f:59:45:a3:a7:2a:a3:4d:d2:1b:bb:59:b1:5a:
50:f0:d2:b6:66:12:ad:84:cc:08:b3:93:3a:62:49:
f4:b3:be:3d:b8:a9:4b:8c:68:66:e6:68:20:33:1d:
0a:d6:3b:a4:55:e9:26:72:23:84:e1:ce:2e:45:df:
0e:bc:cb:e7:e9:92:64:24:c4:75:54:c1:81:72:af:
bc:4b:81:ec:bd:8c:30:91:9d:f6:af:9d:14:60:a2:
9b:99:81:79:90:27:c5:aa:df:69:c4:5e:d0:ce:c6:
8d:c1:88:52:09:87:99:80:24:f0:6e:b5:6f:85:d1:
9d:ba:fd:ec:a4:02:f9:09:d5:f1:7c:ac:b9:4b:7a:
af:46:70:2a:1c:80:2d:c0:52:8b:f2:4e:e2:93:bc:
46:a6:f6:11:91:ef:16:07:05:38:11:b6:7a:10:01:
95:d0:e1:ab:bb:70:84:07:14:4c:b1:b9:62:1a:ca:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FA:52:F9:31:A6:D0:1E:88:36:B6:75:FD:E2:8A:B2:B8:67:81:E6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dPpS-TGm0B6INrZ1_eKKsrhngeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.215.0/24
89.43.62.0/24
Signature Algorithm: sha256WithRSAEncryption
08:3f:77:e9:e9:57:1d:45:82:5e:16:23:1f:71:c9:be:57:0e:
f0:0c:60:be:67:e4:66:c6:d9:01:43:0d:56:17:5d:33:44:49:
2a:0e:24:3b:83:31:de:46:8b:db:f0:fc:80:f2:ab:8f:46:c7:
a7:ed:02:c2:7a:79:81:9b:2d:40:34:41:a3:fa:bb:9e:3b:57:
b7:33:cd:c0:e3:a1:4b:4f:ce:3a:af:7c:3a:b7:ab:15:c8:2b:
27:92:ee:9a:e8:2c:03:a5:e9:fa:f2:cd:f1:71:e8:8c:12:91:
3a:5f:21:9d:b4:c8:b9:f8:35:5a:e2:d0:32:2e:f4:ef:58:34:
22:83:dc:86:3d:45:e4:3a:ae:0f:c2:6f:89:26:90:83:b0:70:
68:51:61:b6:78:2d:5c:b4:d7:9e:29:97:9f:00:d7:5f:83:03:
0e:4b:03:f2:b7:ba:f1:7e:56:68:33:6e:24:1a:2d:51:d1:cc:
97:37:b4:30:70:b9:12:1c:9c:58:15:9f:40:7c:c9:f3:19:94:
bc:2b:c0:d9:97:3b:07:07:7d:c5:75:f0:e1:fc:aa:fe:fb:6b:
0e:9f:ee:61:cd:5e:57:7d:06:f4:53:02:93:13:da:3e:bb:13:
81:e5:5a:fb:c3:3b:61:27:1b:ce:7a:be:27:19:26:e6:61:b3:
bd:e3:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org