Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/itb7KLWuwYK0sGQIOxhbQgOr_jk.roa
File: itb7KLWuwYK0sGQIOxhbQgOr_jk.roa (raw, json)
Hash identifier: vGW3M2zFLIFj1GfYHkr8ukgpxQmWGPvqGvJgW9kSLWk=
Subject key identifier: 8A:D6:FB:28:B5:AE:C1:82:B4:B0:64:08:3B:18:5B:42:03:AB:FE:39
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187C6CABD723A9D56040F44ABC29A757D7F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/itb7KLWuwYK0sGQIOxhbQgOr_jk.roa
Signing time: Fri 28 Apr 2023 07:36:28 +0000
ROA not before: Fri 28 Apr 2023 07:36:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 188.212.121.0/24 maxlen: 24
92.114.93.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 09:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:ca:bd:72:3a:9d:56:04:0f:44:ab:c2:9a:75:7d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 28 07:36:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ad6fb28b5aec182b4b064083b185b4203abfe39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:81:78:87:83:47:43:8b:8e:24:ca:2e:33:90:
20:d2:4a:f0:75:7e:5a:33:c5:40:bf:66:36:61:ac:
33:d0:83:14:ab:02:db:d4:41:93:29:a6:fe:63:ac:
b0:e9:97:8a:2a:f9:9e:76:a1:c6:23:c5:47:14:5d:
8c:34:c4:9d:0e:62:83:f7:60:b9:5c:48:52:95:e1:
e3:0c:95:ce:b6:58:00:16:a6:1e:7b:d3:6b:cc:d3:
87:c5:b3:5b:05:8e:a4:fd:33:87:28:9d:32:5a:48:
e0:8d:5d:f9:32:68:02:70:f8:e3:d6:9b:fd:96:b9:
94:03:31:d7:c5:68:e0:72:27:51:6f:0d:94:dc:7d:
61:23:ef:d9:fa:64:b2:45:df:6a:b6:79:da:83:33:
cf:8c:02:89:c2:36:4a:dd:61:72:59:7b:2a:9b:83:
3e:ac:9c:1e:e0:0a:84:9f:d2:94:0d:f1:75:3f:f0:
d8:c1:82:7e:9b:a3:80:0f:e5:f2:65:b6:d2:a7:2c:
5c:50:7a:14:a9:a7:19:09:06:7b:e1:26:19:53:b4:
85:6f:c7:82:88:4a:72:ee:03:0e:8b:cb:52:35:8d:
37:f4:57:81:6a:bc:21:d7:7e:a0:9f:f5:31:19:aa:
f7:3a:19:1f:46:4a:82:7a:2c:17:f0:a2:bb:b8:ea:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:FB:28:B5:AE:C1:82:B4:B0:64:08:3B:18:5B:42:03:AB:FE:39
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/itb7KLWuwYK0sGQIOxhbQgOr_jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.36.0/24
92.114.93.0/24
188.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2f:7b:00:51:30:d8:1d:e4:85:00:e8:f7:9e:95:4a:93:de:
19:e4:51:8d:46:90:86:81:e5:78:49:40:74:05:06:e7:3f:08:
66:99:e9:34:d2:00:e6:84:ab:6a:af:56:b4:99:9f:1a:38:d9:
af:59:00:70:8a:98:dc:ba:c8:1e:80:8c:c0:8d:aa:e0:38:0b:
e5:a1:71:74:45:af:06:31:88:7f:be:03:05:11:3a:ba:41:4e:
f9:5d:b1:20:a5:8b:a5:78:1c:ea:40:24:46:1c:12:5e:54:70:
66:5b:1e:26:8b:f3:00:2a:a2:3d:52:41:96:1b:c7:61:68:24:
13:28:68:9a:33:19:be:45:e9:d9:ce:49:fb:6b:e4:b0:c7:84:
2b:8a:02:ee:87:70:5f:ae:5a:f7:c9:fa:bc:59:c4:30:89:a8:
9b:04:6b:32:68:0b:2c:e4:13:c5:48:6f:7c:dc:63:12:2d:3c:
39:38:56:8e:df:59:bc:ed:bd:02:99:99:ae:0f:28:c4:ab:07:
4a:a8:be:d4:6b:74:f8:59:ad:1c:b6:72:3a:07:69:01:6d:d6:
96:49:a7:3d:91:4e:5b:1c:7e:4f:e8:7f:a4:76:c5:b6:f9:7f:
74:d5:cf:29:86:82:a6:19:9b:79:81:1c:f2:de:a0:2d:cd:e8:
0e:76:bb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org