Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l3qrxkvUJQ2fmXF-D8BxMoueFHU.roa
File: l3qrxkvUJQ2fmXF-D8BxMoueFHU.roa (raw, json)
Hash identifier: yXxOa6KRpfGFOERNf3rKAJWeJIsWvfPKEru56nuSBoQ=
Subject key identifier: 97:7A:AB:C6:4B:D4:25:0D:9F:99:71:7E:0F:C0:71:32:8B:9E:14:75
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187235EEE74017B66AE44C5A4BC9AF0C50F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l3qrxkvUJQ2fmXF-D8BxMoueFHU.roa
Signing time: Mon 27 Mar 2023 14:00:36 +0000
ROA not before: Mon 27 Mar 2023 14:00:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 86.107.50.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 07:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:5e:ee:74:01:7b:66:ae:44:c5:a4:bc:9a:f0:c5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 27 14:00:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=977aabc64bd4250d9f99717e0fc071328b9e1475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:f2:fa:54:fa:44:96:46:56:3b:4c:88:bd:
43:e1:d0:33:30:96:19:09:01:6b:2f:7b:61:a1:8a:
e4:4f:a5:3f:fb:1e:b3:13:de:dc:16:f6:53:f5:b0:
b6:55:db:0b:39:a3:48:67:ab:e8:44:75:f1:27:5e:
76:77:5a:23:1d:78:f4:82:02:6b:a7:07:08:88:11:
c4:eb:f0:b2:74:3b:f7:eb:c9:3c:55:c2:4f:cc:7c:
dd:ac:0f:03:6e:8e:cd:97:49:37:60:c8:e9:35:84:
8b:dd:6c:ca:a8:99:eb:79:f8:27:41:6f:fe:bb:23:
69:0d:af:dd:51:10:87:98:27:7d:92:cd:05:71:9c:
e4:89:ec:62:5a:81:8d:ad:94:d4:b3:0a:d4:bc:5d:
0a:66:f3:b5:99:05:e0:61:c9:dc:af:f6:28:3d:cb:
bb:e0:34:e5:74:41:a5:13:5a:ab:f0:d6:40:c4:a5:
08:9a:66:75:18:b4:52:5b:21:d9:57:77:26:2e:27:
11:68:df:a3:43:8d:f6:0f:20:42:6a:86:b5:63:c5:
54:ea:c3:6c:6b:0a:ce:49:e1:ef:6f:42:47:17:aa:
e8:fe:7d:76:fc:d4:9d:ff:48:40:0b:f0:4c:c9:43:
35:87:89:89:0c:2e:ee:53:54:45:4b:d1:a6:0d:42:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7A:AB:C6:4B:D4:25:0D:9F:99:71:7E:0F:C0:71:32:8B:9E:14:75
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l3qrxkvUJQ2fmXF-D8BxMoueFHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.50.0/24
86.107.168.0/24
89.37.192.0/24
93.115.203.0/24
176.126.174.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:eb:5b:c8:4a:57:0e:af:31:0f:91:f9:cf:c3:e9:9a:7a:56:
16:44:67:0a:48:43:2c:df:9c:b8:d8:c2:67:fa:c0:d4:76:20:
44:73:16:1a:b5:78:61:fc:8c:97:c4:16:4f:ca:b1:5a:75:4c:
23:15:50:59:5d:fb:8e:6c:56:d0:0b:f4:0b:71:65:5b:66:34:
1a:99:52:01:67:b6:67:43:e1:0e:69:a6:6f:f7:1d:d7:9b:de:
f6:f2:38:63:75:01:59:f7:ba:ca:3b:69:95:c1:88:0b:f0:55:
5b:de:d4:fe:d8:6b:b0:df:6b:66:b6:06:72:70:e1:27:b9:6b:
17:3a:1a:e0:a6:87:2a:08:8c:79:58:4c:30:d3:2f:10:37:ce:
c7:97:24:a5:02:da:4e:84:64:20:da:3a:5a:cf:bc:d9:bb:db:
72:73:33:d5:28:76:c5:1c:3a:db:c8:1e:6a:f0:4e:b3:bd:bc:
96:e7:bf:11:43:f3:6d:e3:52:ad:ad:62:39:f1:11:df:9c:3c:
76:6e:40:f9:0f:8a:d8:2c:40:f0:7c:5e:5f:09:4f:46:9b:49:
f6:f8:43:7f:d4:5c:ab:79:50:78:f8:46:64:c5:eb:34:a0:da:
df:f5:54:ef:a9:9c:07:1c:18:a9:c7:6b:ee:5f:de:c1:d1:60:
c1:08:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org