Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/f6dpJfYiSHv7plNO-58QRDgzPV0.roa
File: f6dpJfYiSHv7plNO-58QRDgzPV0.roa (raw, json)
Hash identifier: pOOgPYZzO0cjeruiX0pG1pyS6JX8QBQTNXn1ymwIQ5Q=
Subject key identifier: 7F:A7:69:25:F6:22:48:7B:FB:A6:53:4E:FB:9F:10:44:38:33:3D:5D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FD9615E8BC693B43557E96D14A0D04E8A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/f6dpJfYiSHv7plNO-58QRDgzPV0.roa
Signing time: Sun 02 Jun 2024 14:36:27 +0000
ROA not before: Sun 02 Jun 2024 14:36:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 89.34.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 06:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:61:5e:8b:c6:93:b4:35:57:e9:6d:14:a0:d0:4e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 2 14:36:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fa76925f622487bfba6534efb9f104438333d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:66:57:81:30:aa:1d:89:8b:e8:62:e2:42:
c2:c0:de:c2:eb:03:25:9d:83:f9:60:16:60:cc:f8:
2a:68:a1:bf:da:fe:e4:cd:a0:73:7a:d5:97:a6:60:
54:6a:3b:48:ec:3c:82:37:0d:63:40:66:12:06:3d:
04:19:6c:99:ca:c6:74:c2:24:cf:2b:f7:5e:9f:73:
59:8f:d1:6d:e2:af:11:04:a1:53:9b:68:a7:94:c0:
c8:64:80:66:f0:fc:65:e2:20:02:78:2c:10:9f:c6:
df:ef:72:65:76:94:2f:1c:67:32:12:23:1a:71:2e:
fa:18:0a:09:12:0f:9f:50:c9:58:bb:b1:36:d7:0a:
16:1a:5b:63:0c:cf:8e:5f:18:44:df:98:71:c9:05:
5d:31:7e:34:fa:0a:76:a2:19:54:3b:4f:e3:20:d8:
4b:b3:d4:0d:99:3a:c8:a1:93:f9:0f:e1:64:ad:24:
86:5f:73:34:0c:e6:c4:2e:7b:cd:b9:14:ac:89:da:
ef:73:21:01:24:98:c4:dd:67:f2:b6:e0:b5:16:33:
a3:8c:81:3a:68:4d:89:43:24:b3:01:66:16:15:c0:
73:72:ec:06:9d:b3:d8:f2:d4:b2:8b:65:81:04:ef:
84:d1:60:00:b2:0d:af:ab:51:07:cc:01:eb:87:24:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A7:69:25:F6:22:48:7B:FB:A6:53:4E:FB:9F:10:44:38:33:3D:5D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/f6dpJfYiSHv7plNO-58QRDgzPV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.202.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d7:da:a2:6d:00:82:17:9f:29:5d:6f:53:21:02:cb:83:23:
13:ce:c5:9e:0b:cd:20:dd:d4:63:fd:99:91:0a:87:f3:37:86:
df:e2:cd:05:24:74:1a:c4:3d:0c:8c:c7:ac:35:ba:6f:a1:50:
6c:cd:64:db:86:b3:dc:b4:3b:14:38:67:6e:af:fd:4a:38:70:
a2:99:d7:90:1b:3b:d7:00:49:cb:24:a6:d4:79:84:85:b7:30:
87:b6:90:99:f1:2c:e7:05:02:63:53:83:49:42:80:76:82:f0:
6a:f5:29:8e:f8:5d:be:cd:08:f4:7e:fa:7f:3e:2f:b1:cc:6a:
83:97:08:b4:fa:7a:8a:88:35:ca:11:0a:1f:65:26:3f:47:f2:
84:53:31:0c:d0:50:df:02:bd:1a:95:7a:22:47:05:03:1e:7a:
dc:03:8d:87:3c:a5:da:b6:3b:56:cd:0d:d6:fb:a0:02:5c:9f:
d5:b1:12:76:d3:e8:36:fb:e8:21:3f:79:37:6f:14:e2:52:08:
62:5b:68:89:78:50:6b:17:9e:9d:ee:7e:73:6f:46:24:c6:85:
c3:bd:c7:8d:25:c1:dd:bd:c1:a2:24:e0:4a:46:98:cd:01:69:
0c:43:38:73:b7:5f:6e:6a:bf:38:77:38:50:98:32:8c:12:8d:
e4:21:23:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/ZYV6LxpO0NVfpbRSg0E6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNjAyMTQzNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmE3NjkyNWY2MjI0ODdiZmJhNjUzNGVmYjlmMTA0NDM4MzMzZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPRmV4Ewqh2Ji+hi4kLCwN7C6wMl
nYP5YBZgzPgqaKG/2v7kzaBzetWXpmBUajtI7DyCNw1jQGYSBj0EGWyZysZ0wiTP
K/den3NZj9Ft4q8RBKFTm2inlMDIZIBm8Pxl4iACeCwQn8bf73JldpQvHGcyEiMa
cS76GAoJEg+fUMlYu7E21woWGltjDM+OXxhE35hxyQVdMX40+gp2ohlUO0/jINhL
s9QNmTrIoZP5D+FkrSSGX3M0DObELnvNuRSsidrvcyEBJJjE3WfytuC1FjOjjIE6
aE2JQySzAWYWFcBzcuwGnbPY8tSyi2WBBO+E0WAAsg2vq1EHzAHrhySxnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+naSX2Ikh7+6ZTTvufEEQ4Mz1dMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZjZkcEpmWWlTSHY3cGxOTy01OFFSRGd6UFYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSLKMA0G
CSqGSIb3DQEBCwUAA4IBAQBz19qibQCCF58pXW9TIQLLgyMTzsWeC80g3dRj/ZmR
CofzN4bf4s0FJHQaxD0MjMesNbpvoVBszWTbhrPctDsUOGdur/1KOHCimdeQGzvX
AEnLJKbUeYSFtzCHtpCZ8SznBQJjU4NJQoB2gvBq9SmO+F2+zQj0fvp/Pi+xzGqD
lwi0+nqKiDXKEQofZSY/R/KEUzEM0FDfAr0alXoiRwUDHnrcA42HPKXatjtWzQ3W
+6ACXJ/VsRJ20+g2++ghP3k3bxTiUghiW2iJeFBrF56d7n5zb0YkxoXDvceNJcHd
vcGiJOBKRpjNAWkMQzhzt19uar84dzhQmDKMEo3kISMQ
-----END CERTIFICATE-----
Generated at Mon Jul 1 09:20:23 2024 by rpki-client on console-ams.rpki-client.org