Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ep8ryTAXQ1x6n5Ri14V8691xkbw.roa
File: ep8ryTAXQ1x6n5Ri14V8691xkbw.roa (raw, json)
Hash identifier: Md6Z9ZZ3Xr0b12GcBf9F8AB1UHJ+KEkF9yZvwy+a69o=
Subject key identifier: 7A:9F:2B:C9:30:17:43:5C:7A:9F:94:62:D7:85:7C:EB:DD:71:91:BC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A65B4C92ED195A95B47B98063BA369724
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ep8ryTAXQ1x6n5Ri14V8691xkbw.roa
Signing time: Tue 05 Sep 2023 14:17:41 +0000
ROA not before: Tue 05 Sep 2023 14:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 91.216.185.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 14:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:b4:c9:2e:d1:95:a9:5b:47:b9:80:63:ba:36:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 5 14:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a9f2bc93017435c7a9f9462d7857cebdd7191bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:32:af:20:47:57:49:37:84:7d:6a:69:4a:
97:26:9b:48:6a:75:28:4d:33:f1:7c:e5:f5:b5:52:
e4:fa:33:6e:2f:c2:40:0b:d5:ae:ec:4d:06:1a:7c:
e4:d2:5f:19:ef:4d:77:75:75:0f:89:b9:a6:12:32:
1d:e1:4f:a8:2c:a2:ff:19:b0:05:e5:65:c0:f2:d8:
d8:23:95:10:1a:c1:eb:b9:de:c1:81:70:24:07:a5:
4d:12:9f:4d:4b:46:fe:d5:25:67:a8:6e:d5:60:7c:
ca:20:0b:6a:8d:29:c2:82:c5:6d:58:96:6c:b5:76:
83:1b:36:cf:b8:31:26:a8:a1:c9:1f:b4:eb:fd:35:
86:bf:e7:66:65:3f:60:3e:55:69:d8:ec:5e:72:7a:
d4:62:c7:2c:1d:8f:78:70:fd:bc:99:5d:c4:96:70:
e8:e6:7d:e5:3e:64:d3:d0:59:69:ab:9a:6f:e5:46:
dc:ea:28:2e:86:20:40:a1:32:58:e6:2a:13:e6:a6:
f5:e1:15:ff:c9:3b:f1:84:52:b4:62:33:d6:09:56:
b4:84:d1:86:89:29:76:d8:39:6f:76:b3:c9:b7:2e:
74:c0:24:62:56:5a:4a:1e:82:b7:e6:2e:68:57:57:
8b:41:0e:68:33:91:5f:53:9a:ef:d2:d1:e9:9f:6b:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9F:2B:C9:30:17:43:5C:7A:9F:94:62:D7:85:7C:EB:DD:71:91:BC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ep8ryTAXQ1x6n5Ri14V8691xkbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
86.107.100.0/24
91.216.185.0/24
93.115.203.0/24
94.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:09:25:53:d2:23:76:fb:f7:e9:6d:82:ac:ae:9e:de:b3:19:
53:2a:b8:29:98:c8:a1:b9:ab:f3:25:3f:09:e8:46:19:f4:8a:
72:69:66:c8:d9:94:f3:6a:d0:7e:8f:15:2b:16:3c:0f:46:f8:
cb:72:ce:fd:65:98:27:26:03:f3:c8:67:9a:bb:9d:5c:cd:63:
4e:b0:76:99:08:84:15:a9:ad:76:b1:4e:22:54:c7:99:81:76:
12:57:cd:6c:15:89:c3:f2:16:4e:5b:2d:14:0e:fa:34:55:0a:
88:cd:c8:01:50:e9:02:8f:b5:28:f6:c9:bf:95:fe:cc:6d:62:
22:9e:4e:0a:d8:d2:e2:2b:a8:2d:9a:93:9c:7e:26:8e:a0:11:
0c:58:a5:7c:ac:d2:bf:48:33:37:d8:84:e1:28:7f:61:df:14:
19:08:2d:67:b4:84:20:57:23:74:8a:e0:a8:33:c7:2a:71:12:
80:8e:c6:7a:20:f6:60:33:bd:7a:53:ff:f2:cc:6e:ab:e2:ff:
64:45:93:41:f3:a6:e8:fe:c5:8b:51:9f:0a:6a:98:ba:8a:11:
f5:74:8c:d3:a6:68:e5:5f:f1:b1:33:86:77:13:57:ae:e7:c7:
95:60:06:1a:ca:c8:ce:54:f5:3e:11:a8:3d:44:95:ad:99:74:
da:f8:d4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org