Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ffweyFRjXI1P76w5PFj1K4IdWx4.roa
File: ffweyFRjXI1P76w5PFj1K4IdWx4.roa (raw, json)
Hash identifier: /GpzKIIdZYMMFO0lh2cuFURutyb1WNGkwM3sH2yGn5Y=
Subject key identifier: 7D:FC:1E:C8:54:63:5C:8D:4F:EF:AC:39:3C:58:F5:2B:82:1D:5B:1E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A16A14E9922927F29842A53EB2A689DD0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ffweyFRjXI1P76w5PFj1K4IdWx4.roa
Signing time: Mon 21 Aug 2023 05:46:24 +0000
ROA not before: Mon 21 Aug 2023 05:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 89.36.140.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Aug 2023 12:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:16:a1:4e:99:22:92:7f:29:84:2a:53:eb:2a:68:9d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 21 05:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dfc1ec854635c8d4fefac393c58f52b821d5b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:5c:8e:c2:58:f5:2b:a4:b2:bf:3f:b2:bf:
39:ab:cb:9d:0a:27:f8:ab:70:6e:1a:f8:a8:06:6d:
de:80:ec:94:e0:1c:a2:ec:51:db:a7:0f:99:21:d8:
21:25:17:c8:90:1b:62:42:d6:ae:d6:57:37:b8:36:
fd:50:66:16:ac:ac:3b:b8:ff:90:46:b8:cf:ba:b6:
9b:30:c0:a9:5e:45:4a:b2:a8:f6:1a:17:c6:86:b1:
e1:a8:8f:4c:f9:7a:2f:56:b7:f8:f3:aa:a3:c7:41:
0e:33:e5:3d:68:a2:ff:a8:83:51:d0:d7:2e:8f:2a:
68:dd:27:70:33:2c:56:1f:26:40:26:70:50:e6:f9:
cd:ca:51:a6:28:7e:ca:0f:b4:78:c9:f2:f8:55:72:
cd:b4:27:f5:37:27:2e:af:f0:f0:aa:78:1d:ee:ae:
e6:0c:cf:07:d6:03:01:31:89:0e:34:c4:f0:2b:f5:
f2:10:93:07:af:c1:e0:96:09:0b:6c:dc:55:21:2a:
6b:bb:87:73:6a:3e:d8:81:ca:88:df:31:7e:6e:c1:
1b:8d:2f:9d:88:83:a1:a4:81:2d:cf:db:b7:78:da:
53:c1:17:b2:c3:45:4a:9c:5f:6c:4b:52:60:52:02:
72:7c:f8:d5:c0:1c:2a:e9:8a:d0:c3:69:bd:ee:bc:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FC:1E:C8:54:63:5C:8D:4F:EF:AC:39:3C:58:F5:2B:82:1D:5B:1E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ffweyFRjXI1P76w5PFj1K4IdWx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
86.105.4.0/24
89.36.140.0/24
89.40.36.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6c:66:21:37:8a:2a:fa:7f:fd:ce:39:ef:16:79:0b:ec:a7:
a5:bb:1b:ed:a5:7a:78:77:4a:2f:4f:b6:7e:5d:ac:dd:58:1e:
fc:fa:e1:81:91:4b:46:13:f0:77:0f:55:00:52:7d:d0:cd:45:
6d:4f:f5:23:7c:27:28:f9:01:fa:04:d0:54:56:49:41:e5:9c:
9e:6f:0b:7e:1f:0b:5a:c5:a8:7e:6c:5b:bb:1e:63:39:69:06:
44:cf:21:53:6c:05:06:9b:f2:71:e2:71:f9:c7:20:41:1e:95:
20:20:ef:3c:70:9b:3d:17:48:5b:e5:fb:8a:3c:a5:cd:7e:56:
da:e2:80:2c:a3:61:91:35:6c:43:59:9e:c2:2f:43:61:39:2d:
5f:c4:80:1a:95:43:07:25:ae:a2:00:e6:4a:ea:76:8e:5c:a4:
6f:f1:e9:92:31:d5:0c:e6:af:74:9f:d8:cb:4e:27:79:6b:b2:
e1:59:40:14:75:9a:62:e7:57:44:c8:90:49:ca:48:28:22:90:
f3:64:7b:0a:b8:a5:0c:53:ff:31:3f:3b:f3:a0:c1:d8:4b:92:
bf:44:ec:bd:6c:d3:de:9e:40:e5:09:71:69:d9:17:fe:62:5b:
52:19:fd:c3:e8:b6:90:68:e7:bf:a9:e7:94:5c:b4:d1:b9:09:
b0:b3:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org