Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fO10XRFrWyIbraDahVwAmQqIffM.roa
File: fO10XRFrWyIbraDahVwAmQqIffM.roa (raw, json)
Hash identifier: P4+CEk2COb5m698+Fo16X+aaGIdryiTCfVthFTijcSM=
Subject key identifier: 7C:ED:74:5D:11:6B:5B:22:1B:AD:A0:DA:85:5C:00:99:0A:88:7D:F3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D1790FBAAF1755B0E2CC5C854CD7513A5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fO10XRFrWyIbraDahVwAmQqIffM.roa
Signing time: Wed 17 Jan 2024 13:16:34 +0000
ROA not before: Wed 17 Jan 2024 13:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 13:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:90:fb:aa:f1:75:5b:0e:2c:c5:c8:54:cd:75:13:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 17 13:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ced745d116b5b221bada0da855c00990a887df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:fc:cb:87:c4:90:19:c8:06:8a:6d:48:f5:
00:83:9b:31:4a:b8:db:a2:b0:d1:4b:76:d3:20:f0:
2e:75:47:85:d1:3f:29:52:63:62:23:c5:25:b5:11:
39:08:f0:94:14:f6:b2:f3:db:d7:70:0d:f8:05:e0:
16:f5:fa:e9:d8:7c:26:a9:00:a5:70:d1:d3:6d:d7:
83:df:79:fe:a3:a2:55:31:fc:5e:5b:1b:2c:fb:c7:
05:65:6c:32:c1:68:4f:df:d1:31:57:89:3b:2e:3a:
7c:71:2f:7f:10:71:be:90:cd:f0:b5:d3:a2:f6:ea:
ea:04:56:f2:75:1f:9c:80:99:9d:fd:13:66:8e:fa:
ed:9e:04:fa:e1:b7:44:df:2f:31:e3:9c:6d:e6:03:
f6:06:40:d8:38:7a:cd:8b:42:09:35:72:72:20:74:
de:63:67:f6:42:03:65:25:2b:30:72:9c:ce:17:0e:
6f:27:19:b9:3e:dd:70:8f:c0:37:a9:eb:a0:92:b9:
df:bb:32:d0:b1:39:9e:69:1a:e7:da:67:52:8f:4b:
43:5e:7c:09:71:8b:d7:27:94:93:a2:41:15:4d:7a:
aa:81:20:45:9b:38:9d:9c:f3:d6:14:0d:70:cb:3f:
70:09:d0:c4:c8:bd:dc:32:c3:9e:43:bd:14:8c:0f:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:ED:74:5D:11:6B:5B:22:1B:AD:A0:DA:85:5C:00:99:0A:88:7D:F3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fO10XRFrWyIbraDahVwAmQqIffM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
89.34.219.0/24
89.37.192.0/24
94.176.215.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5a:18:d4:9a:45:e4:00:5c:a8:e0:0c:e8:7e:33:f5:4b:ea:
ca:f5:0b:6e:6a:33:26:b4:83:a9:4d:4f:96:91:dd:ac:94:28:
76:f2:52:86:5f:e0:5e:64:bf:b0:e4:01:a8:ad:58:76:d4:41:
5f:55:dc:b9:e2:22:cb:85:d3:09:8b:bf:03:c8:ba:4d:c3:03:
75:4e:21:f3:63:da:ae:bd:be:84:de:d1:c4:db:45:50:ab:bf:
83:9d:41:e3:73:ea:6b:c5:6f:78:8d:d0:b1:e4:e9:23:19:20:
f4:75:35:cd:b2:6b:9f:18:8a:28:d8:cb:cc:be:89:1c:90:3b:
ba:ee:4d:c1:e3:5e:51:2a:4a:e8:0b:53:e6:2f:ba:29:ea:e5:
6a:2a:e7:1b:c4:3a:cc:03:d2:8d:36:13:ff:ac:69:19:70:97:
6a:3f:25:1f:3c:bc:b7:a6:35:20:bb:01:75:be:e3:bc:49:bb:
4b:82:4a:e3:9b:3d:dd:2f:dd:0a:a2:70:02:91:14:36:ca:df:
d1:6f:8f:da:c7:20:30:0e:75:04:43:bd:e4:1f:03:02:58:49:
34:8b:24:4b:6f:24:2f:1e:a1:62:ef:36:91:fd:a7:23:8b:c4:
46:95:b0:e3:cb:2b:56:cd:67:75:22:f4:49:be:74:f9:aa:3e:
e8:1d:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org