Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jDglGCafN5m1SJ269xIrPv8QBco.roa
File: jDglGCafN5m1SJ269xIrPv8QBco.roa (raw, json)
Hash identifier: yLMwRAhpCHmzqbbrYgE6VvgGTPNcNWHn0GIsKs6UIUw=
Subject key identifier: 8C:38:25:18:26:9F:37:99:B5:48:9D:BA:F7:12:2B:3E:FF:10:05:CA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B1928569F910379035B74C7A8D7F4A7D0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jDglGCafN5m1SJ269xIrPv8QBco.roa
Signing time: Tue 10 Oct 2023 10:35:55 +0000
ROA not before: Tue 10 Oct 2023 10:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 89.37.193.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 12:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:28:56:9f:91:03:79:03:5b:74:c7:a8:d7:f4:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 10 10:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c382518269f3799b5489dbaf7122b3eff1005ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:46:27:24:da:0d:02:9f:b7:91:82:43:43:
0d:d0:95:a4:c3:5e:81:e1:05:ba:db:f3:a5:bc:09:
d8:71:5d:13:da:97:f3:62:f3:36:84:d4:e9:f8:c0:
c3:a5:1b:2e:f3:66:dc:d4:ef:83:4e:7e:66:fd:56:
62:51:09:16:4a:8c:17:c6:9d:ca:5d:f3:ee:2c:5a:
b7:b1:97:11:cf:46:0d:d3:62:dc:5c:e8:2a:93:23:
44:6a:26:6b:36:c7:d1:43:42:03:c1:66:22:aa:a7:
4b:d4:93:27:7d:ec:91:ac:97:16:82:c5:e9:ef:d4:
1a:a6:51:3e:31:bd:75:a6:7f:8a:61:9d:62:7b:eb:
9c:e0:e5:67:37:4d:d9:57:13:31:e1:dd:e3:61:13:
31:da:11:0f:8d:28:69:71:d7:ad:4c:44:46:a5:4b:
45:b9:7e:db:8a:cb:5c:3d:b7:73:1d:e7:4b:9f:6a:
c7:23:12:76:2f:f5:c6:e8:66:8e:99:ba:b6:86:48:
10:4d:79:81:cd:27:d1:93:7d:d1:76:dd:6a:7a:75:
47:8c:c0:85:75:73:2d:ec:f0:b1:56:73:52:54:53:
8e:29:8d:12:45:84:0c:ff:5a:f4:83:2b:bb:e8:42:
0c:33:ab:f5:76:7e:e0:c3:2d:6c:86:b9:fd:82:d3:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:25:18:26:9F:37:99:B5:48:9D:BA:F7:12:2B:3E:FF:10:05:CA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jDglGCafN5m1SJ269xIrPv8QBco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.140.0/24
89.37.193.0/24
94.177.51.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c4:33:fc:e7:f9:e0:af:5f:60:1d:69:8d:b7:1e:56:54:42:
2e:c1:fd:47:bf:93:fb:12:42:80:3a:26:7d:f4:f6:c6:26:61:
51:0e:77:9f:ed:7e:38:ad:bc:f0:5c:b3:14:37:56:c9:e0:b6:
5e:f8:72:ca:36:36:5c:d7:96:1a:bc:51:a5:ae:19:a9:d4:4b:
ae:ad:1e:3b:89:07:d5:2a:5b:48:88:c6:3c:ea:77:2d:ae:a7:
33:5a:12:02:61:3b:34:98:ee:ae:a8:aa:88:3e:d7:6e:cb:57:
73:59:88:db:22:d8:20:0f:6b:82:70:2a:ad:e3:1f:c7:83:a5:
af:d2:61:4e:a7:d8:32:48:70:62:4d:10:66:03:f2:f6:e5:1e:
e6:80:88:fd:57:4a:4e:e3:0d:ae:b0:df:96:e9:38:84:34:df:
54:0e:ec:5a:72:20:75:06:3e:6b:48:0b:17:ec:34:b9:c4:99:
7b:27:cf:b1:55:9f:b4:b0:67:bf:7d:f3:86:59:40:3a:fa:4f:
5e:4e:71:95:f0:bd:b4:1d:d6:26:c4:1f:8a:e3:1a:cf:cd:2b:
fa:a4:9d:ee:47:54:87:24:63:e3:58:59:99:41:8d:00:eb:2e:
f5:38:6d:45:90:82:b6:4d:49:69:82:5b:8c:11:76:35:59:60:
b7:83:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org