Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fDOFDYVMYPUmhN50-3dmTX1ZG_w.roa
File: fDOFDYVMYPUmhN50-3dmTX1ZG_w.roa (raw, json)
Hash identifier: NSGGhpWx+OqXCG7Y/RUKiJn/ktl5G/mqxIp98fpV8l8=
Subject key identifier: 7C:33:85:0D:85:4C:60:F5:26:84:DE:74:FB:77:66:4D:7D:59:1B:FC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190653A01A8A5027196C8CC51D1D6C69A6F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fDOFDYVMYPUmhN50-3dmTX1ZG_w.roa
Signing time: Sat 29 Jun 2024 18:20:18 +0000
ROA not before: Sat 29 Jun 2024 18:20:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 85.204.22.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 20:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:65:3a:01:a8:a5:02:71:96:c8:cc:51:d1:d6:c6:9a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 29 18:20:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c33850d854c60f52684de74fb77664d7d591bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:1b:31:3e:8d:a1:c5:89:b5:63:03:bf:bb:
85:4b:e6:94:ae:dd:76:ce:c5:68:0f:e6:a5:74:c6:
a8:df:0b:08:4c:96:e4:cf:5a:8a:b4:c1:06:a5:c9:
cf:c9:d0:bd:44:50:4a:a6:1b:e1:8c:8a:14:46:9f:
40:20:35:bb:f2:5a:f1:ea:0b:9b:b4:e6:75:79:eb:
ee:bb:30:31:84:b0:bf:e6:a2:14:28:9f:2f:33:d2:
4b:bc:f2:50:11:24:8e:a0:96:4e:2a:1c:4b:01:53:
50:6f:64:ed:fd:c0:c8:5d:f2:ea:6f:4d:5e:56:6b:
58:de:f9:c9:c3:e4:a7:17:96:48:26:59:37:7f:3c:
44:c5:b3:8b:36:76:92:e7:96:96:b5:b1:3e:dc:79:
26:c5:c3:c0:7b:07:36:16:66:c1:00:ca:f1:25:cb:
e6:a8:5a:14:af:e0:5f:9a:05:56:72:c9:a2:71:3e:
ee:c4:0c:4e:ee:02:cd:a5:e9:ac:86:5f:03:48:97:
17:b2:09:ef:e5:0d:27:bb:b2:c0:22:c5:04:76:5b:
39:43:52:c4:bd:0b:4f:b3:cd:68:f5:5a:7d:06:71:
47:db:68:27:f0:eb:df:fb:7f:4f:90:a0:7a:23:49:
97:67:70:a7:dd:45:e1:1b:58:3f:bc:f9:06:2c:c0:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:85:0D:85:4C:60:F5:26:84:DE:74:FB:77:66:4D:7D:59:1B:FC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fDOFDYVMYPUmhN50-3dmTX1ZG_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.22.0/24
94.177.51.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3a:22:b9:eb:a8:8f:e6:97:8c:fb:7b:87:0a:5b:69:29:48:
71:da:35:77:56:3c:ec:6a:16:9a:28:e5:2e:3b:10:ac:00:92:
ce:7b:fd:4b:70:a0:af:18:cd:f3:e1:9a:5a:e0:de:97:79:3f:
25:dc:5c:87:3f:f0:4e:c7:59:a9:e5:f5:d5:81:31:87:a1:4e:
07:35:a8:bc:e1:24:96:8f:4a:9c:1b:49:21:45:92:b9:12:12:
da:ee:4a:43:0e:b3:4b:b7:1a:03:7c:73:53:a2:74:7d:06:0d:
ef:a0:29:0e:c6:dd:58:55:73:50:52:5a:2e:e9:f3:71:62:01:
28:45:38:af:20:52:0b:62:b4:38:3f:6c:ca:6c:da:e2:ee:ea:
12:66:09:0a:14:72:6e:78:21:66:03:f3:71:26:71:94:c9:15:
9b:16:34:85:b1:99:45:35:67:a2:61:b9:20:60:78:8f:2f:92:
e1:5f:af:42:48:c5:8e:6a:07:cb:4a:43:bf:b4:c2:5d:e0:5f:
57:2f:01:f7:7c:46:54:41:b1:4c:c6:a4:c5:6e:9c:c0:f9:23:
bc:45:4f:52:fb:59:21:96:4e:a5:31:0a:13:e7:c7:99:fd:fb:
1a:e5:27:7d:f9:79:e5:b1:03:44:91:6a:fc:c9:f5:a3:96:dc:
0e:c5:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:29:31 2024 by rpki-client on console-fra.rpki-client.org