Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dRpizX8dB-dOqtza3PZIoytaSu4.roa
File: dRpizX8dB-dOqtza3PZIoytaSu4.roa (raw, json)
Hash identifier: 7/sDABmC5J4Ev3GoI2k1ffVM7qFhfuwTVWZCIDnIA5w=
Subject key identifier: 75:1A:62:CD:7F:1D:07:E7:4E:AA:DC:DA:DC:F6:48:A3:2B:5A:4A:EE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019276780DE3242873738AC18AC1F514C54A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dRpizX8dB-dOqtza3PZIoytaSu4.roa
Signing time: Thu 10 Oct 2024 12:47:12 +0000
ROA not before: Thu 10 Oct 2024 12:47:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 89.45.44.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 17:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:78:0d:e3:24:28:73:73:8a:c1:8a:c1:f5:14:c5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 10 12:47:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=751a62cd7f1d07e74eaadcdadcf648a32b5a4aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:1e:06:71:73:fb:19:a2:47:14:a5:09:9e:
c9:f2:df:8c:d1:6d:c9:59:73:c6:03:3f:a2:01:56:
6a:f5:be:48:77:cd:9f:a9:e3:ed:37:ad:11:4b:14:
ed:55:c0:be:bf:7c:45:83:d7:70:9e:ed:16:5b:14:
dd:0d:1f:ef:90:8d:28:a4:45:0e:08:b2:98:3a:dc:
6c:23:13:d1:b3:06:21:fc:71:60:16:16:f5:3a:06:
9d:84:fd:50:a4:4a:06:a3:5d:d6:6e:5d:75:8f:8a:
69:f4:cc:f9:22:f6:20:ee:89:9f:70:2c:82:e6:06:
4d:1b:0a:b0:e0:09:2e:73:6e:50:9e:0a:c9:80:9c:
f0:d2:f8:9e:d3:bc:e3:a7:ff:64:a1:ee:87:83:f3:
1d:23:79:f3:c9:e8:aa:dd:05:da:4f:7a:b0:83:50:
ea:e7:93:4c:1e:41:86:ef:e4:92:cc:6b:90:c7:e0:
62:ee:41:67:71:4c:1a:63:7a:78:6f:b0:27:dc:7a:
9f:d1:08:90:bb:66:68:1b:d7:33:d1:a1:6b:47:10:
15:3b:39:06:74:d0:a8:23:39:10:43:af:bb:75:e3:
a0:80:b6:9f:dc:80:ae:da:0a:5d:60:7b:77:5b:c4:
f7:4f:bb:65:5f:77:89:c6:a3:b5:d2:d7:3b:0b:0f:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1A:62:CD:7F:1D:07:E7:4E:AA:DC:DA:DC:F6:48:A3:2B:5A:4A:EE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dRpizX8dB-dOqtza3PZIoytaSu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.44.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5a:1d:4c:d4:bc:60:1d:e4:1a:79:7e:41:ab:b9:4c:57:f8:
85:29:db:e4:65:da:0f:e2:2a:68:1d:1a:f2:6e:a4:1d:97:2d:
f0:c6:4d:24:db:31:20:05:7a:fa:ea:a2:ef:2c:5d:4e:df:c6:
db:e2:44:76:31:e9:82:f4:c8:3a:39:b5:72:e0:ba:83:b9:0b:
58:fe:5e:b3:b8:65:a4:73:b3:bc:3c:62:05:06:a4:e6:27:04:
59:f1:f2:ff:32:a1:68:ab:b3:2f:24:aa:97:1b:15:21:46:8c:
cc:d7:de:48:55:be:2f:c2:eb:ac:23:e4:82:2a:07:c5:97:9a:
bd:ac:ae:5d:35:c3:63:28:f9:c9:65:5e:36:4b:ef:9c:25:90:
61:61:89:f2:af:c2:b1:e9:ca:16:92:38:66:40:05:ea:c9:ea:
04:06:56:94:5e:8e:04:f8:26:4b:6f:51:6d:df:02:a7:9e:4f:
ad:a6:5c:5b:61:4b:6e:bc:0f:35:f6:f9:8a:ec:37:26:d7:52:
d0:b7:ea:a9:46:7c:fb:87:0a:e2:ba:58:66:51:e0:e5:05:57:
74:ce:42:40:e0:85:47:9b:11:da:ac:3a:37:3f:4e:d7:bf:e0:
d5:92:eb:43:f2:5f:96:2c:90:7d:56:00:69:ca:98:92:13:82:
e2:f2:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:51 2024 by rpki-client on console-ams.rpki-client.org