Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eBlVVBaxbBVkNDKB76AYsPWu-fw.roa
File: eBlVVBaxbBVkNDKB76AYsPWu-fw.roa (raw, json)
Hash identifier: OtW3RDh45NW4S55lGpXfyL+bdaQPifqgoYZm5JvDL18=
Subject key identifier: 78:19:55:54:16:B1:6C:15:64:34:32:81:EF:A0:18:B0:F5:AE:F9:FC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018803F5A2AD0EDEF3F8BBC52EBC4E226FD0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eBlVVBaxbBVkNDKB76AYsPWu-fw.roa
Signing time: Wed 10 May 2023 04:40:09 +0000
ROA not before: Wed 10 May 2023 04:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 89.34.202.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 04:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:f5:a2:ad:0e:de:f3:f8:bb:c5:2e:bc:4e:22:6f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 10 04:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7819555416b16c1564343281efa018b0f5aef9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ad:35:e6:aa:05:16:b2:59:31:fc:ea:9c:f3:
63:a5:7d:06:5b:1e:e9:1d:de:40:80:66:08:84:37:
ed:8f:15:5f:1d:cb:ff:f0:70:8a:8e:c8:64:56:1a:
bf:fe:a8:71:9b:ca:2b:b3:e2:77:cb:2c:e2:29:28:
af:96:97:30:3f:ee:e3:cb:9b:c7:8b:b3:84:43:4e:
c0:ec:e2:02:b9:c6:1e:54:b7:7e:2f:f1:51:41:87:
50:98:53:49:5e:a8:a5:3f:fd:52:6a:9e:3a:8b:d8:
d5:fa:f3:9e:0e:f9:02:81:92:6f:03:bc:6b:f1:77:
20:ed:d8:8a:63:bc:11:80:c4:1b:3f:ff:4c:f0:d9:
a2:38:b2:52:84:40:32:7d:cd:3d:9f:d0:45:7a:89:
37:ae:33:8f:ed:1a:0a:a0:d8:46:c3:1f:19:85:2f:
bb:30:2b:d5:1e:bc:e4:60:92:c5:76:52:09:60:26:
16:25:d8:92:6d:24:d3:a7:cc:d5:3d:24:6a:ed:9d:
6a:f2:29:a0:78:1b:0a:c2:63:24:dc:55:aa:34:57:
b8:a8:32:aa:64:c7:c6:e2:2c:6a:93:a5:08:ed:9a:
de:63:6c:49:fb:e4:80:de:42:12:1f:77:1f:49:8b:
28:a7:70:cf:e7:a2:a4:4b:56:f4:8d:38:e2:e1:ff:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:19:55:54:16:B1:6C:15:64:34:32:81:EF:A0:18:B0:F5:AE:F9:FC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eBlVVBaxbBVkNDKB76AYsPWu-fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.202.0/24
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bd:05:0f:41:11:47:72:48:b5:15:9e:c9:36:c8:6a:ba:e7:
05:8a:89:44:d0:eb:3d:85:0d:11:af:ec:85:6d:27:f2:e5:47:
a0:d6:a7:48:67:5f:0d:b5:e4:b5:4b:76:03:cc:79:37:66:20:
ea:ff:f4:00:59:41:19:37:58:1f:fc:1c:d6:3d:5d:2f:56:38:
58:5d:13:b6:61:8a:29:d5:8a:d1:83:fa:df:08:43:7f:13:93:
a7:08:85:39:65:f0:dc:5c:b4:f2:b0:3d:cc:e2:6b:7d:67:a2:
3b:30:5f:3a:72:b7:4c:a7:23:a6:52:42:72:2d:cc:ca:fa:4c:
6e:da:cb:52:2f:98:5e:32:e1:39:88:da:19:34:4d:79:44:62:
80:0a:d4:29:b7:57:ae:2e:01:13:67:8b:ad:02:25:93:d5:1b:
7b:15:88:60:e6:13:af:23:3c:74:e6:97:95:0c:da:2a:c0:54:
72:96:12:dc:21:27:94:7c:35:32:9e:e0:6b:59:ed:de:19:d4:
90:06:97:c1:c8:02:71:d5:cb:41:bf:ed:78:bd:21:ba:d6:97:
82:02:2d:2b:cb:14:1a:46:6a:e4:28:fd:35:fe:56:e2:c3:51:
d2:77:c4:8b:80:73:a3:11:9f:de:47:5c:01:96:93:91:96:5d:
d4:f7:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org