Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fhFDBKXmrs1STu0_FXQ3t2WP4sI.roa
File: fhFDBKXmrs1STu0_FXQ3t2WP4sI.roa (raw, json)
Hash identifier: 1eolW6gRh0Qh5F+u+RloX3zuQ2/6nOgLL91Ibd3iX28=
Subject key identifier: 7E:11:43:04:A5:E6:AE:CD:52:4E:ED:3F:15:74:37:B7:65:8F:E2:C2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B2D7D1CEF48A89A67705099898A96C8E3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fhFDBKXmrs1STu0_FXQ3t2WP4sI.roa
Signing time: Sat 14 Oct 2023 09:20:55 +0000
ROA not before: Sat 14 Oct 2023 09:20:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 20 Oct 2023 04:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2d:7d:1c:ef:48:a8:9a:67:70:50:99:89:8a:96:c8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 14 09:20:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e114304a5e6aecd524eed3f157437b7658fe2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:70:29:3f:9c:26:59:2a:54:95:70:13:94:
71:d2:39:b1:dd:f7:8d:04:c5:2b:ee:58:82:b2:d7:
57:e0:b7:5a:33:f7:54:fb:6a:65:d2:02:ce:5d:44:
02:cd:e3:4d:14:63:ee:8a:82:88:51:3e:6c:6e:5d:
bd:17:1f:7d:cc:de:0c:1e:e9:25:bf:db:19:90:34:
f4:98:87:1d:80:a0:65:2b:14:32:4a:64:1f:fb:d0:
28:d7:38:5b:f6:e0:21:a2:e2:03:c1:54:2b:6f:7e:
40:a9:1a:dd:f4:8d:a8:1d:f0:cb:f3:ab:eb:35:52:
4c:ff:81:5d:26:a2:2e:e1:a9:aa:6a:f0:2e:42:57:
54:27:f9:37:4f:ef:cc:ff:6b:86:c6:a5:36:41:9e:
6e:f4:24:b0:40:2a:e7:9d:32:08:83:2a:0a:c0:d1:
6d:2d:63:c9:f6:27:d0:8a:67:4e:0f:85:04:df:47:
d9:fc:c7:6a:dd:2c:47:12:42:d5:83:e8:c2:88:e9:
12:96:17:24:2c:d1:1b:fb:b9:e1:2d:59:e2:60:d0:
61:b3:ea:c1:62:9b:c2:f3:8e:11:94:b1:51:34:a6:
06:3a:3a:07:43:9c:1e:a9:40:81:48:48:c7:5c:69:
19:53:ea:5a:37:28:05:d9:e3:f8:cb:51:89:30:b7:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:11:43:04:A5:E6:AE:CD:52:4E:ED:3F:15:74:37:B7:65:8F:E2:C2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fhFDBKXmrs1STu0_FXQ3t2WP4sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0/24
86.107.51.0/24
89.35.119.0/24
89.35.130.0/23
89.47.55.0/24
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:34:97:af:e7:14:88:40:22:c4:7e:69:b1:b6:3c:5d:dc:29:
e8:96:ac:56:2e:7c:dc:5a:fb:68:1a:50:88:3b:9d:e5:57:d8:
74:f3:7b:d8:69:19:bf:14:ff:b4:a3:b9:b2:38:3a:5e:bc:e5:
b0:93:7a:60:ac:45:a4:69:ae:71:37:e0:5b:c8:58:d6:d4:85:
6a:08:da:ed:2a:dc:04:1d:52:e8:8e:30:81:7b:54:93:55:18:
e1:2c:d2:8d:ef:2c:42:42:42:36:57:d5:05:a7:f5:8c:a4:41:
33:b3:d1:9f:e3:87:b7:07:13:28:8a:c7:64:09:b2:61:d8:77:
4c:57:8b:0a:08:dd:8b:ca:c2:2c:5d:66:ad:84:7a:02:9d:07:
e8:5e:02:11:52:74:0f:1d:d7:af:f1:97:0a:78:03:0c:df:c6:
17:79:db:dc:7c:56:98:1b:d3:4c:d8:ab:16:34:3c:62:47:c1:
69:7c:fd:70:30:5c:93:ab:d2:ec:72:28:0c:4d:09:d4:bb:cf:
2b:ad:87:31:21:74:ae:4e:28:c8:93:2b:c5:34:68:e4:f1:25:
86:c1:95:d9:30:8e:54:1d:dc:ff:f5:da:7f:a2:67:16:86:54:
18:d3:dd:98:65:c4:41:c4:72:be:cb:54:90:6a:c7:ee:7d:3d:
94:52:42:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org