Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lf4WJOBs7OtS0VxqaUTkrpLPdhg.roa
File: lf4WJOBs7OtS0VxqaUTkrpLPdhg.roa (raw, json)
Hash identifier: PdsRQGTx8wk1i2GR6SAJQSQhA35+DTwZDALjkM2wSxQ=
Subject key identifier: 95:FE:16:24:E0:6C:EC:EB:52:D1:5C:6A:69:44:E4:AE:92:CF:76:18
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189BA7A8182618BAC2845AE387D3CEDD987
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lf4WJOBs7OtS0VxqaUTkrpLPdhg.roa
Signing time: Thu 03 Aug 2023 08:18:57 +0000
ROA not before: Thu 03 Aug 2023 08:18:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 91.132.51.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 11:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:7a:81:82:61:8b:ac:28:45:ae:38:7d:3c:ed:d9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 3 08:18:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95fe1624e06ceceb52d15c6a6944e4ae92cf7618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:17:3c:d5:f0:ee:e6:ce:04:75:43:c5:83:78:
a5:ad:d3:96:0b:9a:5e:55:5f:c9:a4:a1:33:6b:bb:
35:70:d4:d8:98:7f:69:8f:94:45:b5:4d:b8:fa:7e:
84:35:dc:56:c4:ed:9f:9f:5e:e3:00:ed:8f:73:6d:
27:b7:62:0e:71:3d:08:0b:51:8a:e3:bb:b1:04:6c:
b8:66:3b:1a:84:42:ef:36:b0:f5:23:d6:db:68:b2:
01:cc:07:be:0b:eb:b2:58:1d:9e:dd:4b:94:5d:cb:
d2:9d:0d:45:53:7b:1d:47:e3:ca:85:a9:e3:aa:32:
65:89:5a:7e:55:87:23:9d:e7:d8:6c:6f:3f:93:d5:
07:ab:da:bf:7a:64:5e:cd:e9:aa:84:f3:27:c0:55:
e8:48:2f:7b:49:c4:81:af:14:7c:83:28:2e:5c:16:
0a:5f:4c:25:e8:79:8d:22:09:5b:95:b2:a7:68:91:
d3:35:35:eb:3c:10:84:3a:7a:07:ff:ab:3b:63:4c:
b7:c2:12:e9:be:5d:21:c7:8b:0d:1d:59:c4:1f:30:
98:23:6d:41:ed:0a:5b:7e:ce:f0:b3:10:93:f2:8b:
1f:a3:49:09:cb:46:81:92:09:ce:d3:d0:bd:89:62:
03:3e:72:26:df:4a:69:55:cb:c2:fa:e3:aa:5e:f7:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FE:16:24:E0:6C:EC:EB:52:D1:5C:6A:69:44:E4:AE:92:CF:76:18
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lf4WJOBs7OtS0VxqaUTkrpLPdhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.51.0/24
93.90.74.0/24
128.0.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:75:38:da:dd:e1:53:a4:f6:d9:08:a8:0e:dc:2a:c8:84:a9:
f5:e0:1c:26:ca:39:bf:85:68:3b:4f:7c:8c:96:a2:d5:84:14:
64:a6:c0:49:01:4a:4f:dc:50:5f:3d:ce:49:6a:43:3d:f4:d9:
0c:cb:8a:f0:9d:f1:9c:6f:46:bc:f2:72:33:07:f0:e4:69:5a:
47:29:d0:c3:b8:5a:10:0f:12:7c:c2:78:ff:24:cc:e5:02:c0:
ac:aa:17:ae:2e:87:72:8c:65:75:47:e0:50:88:a1:a1:b2:a1:
12:dc:06:33:b6:50:1c:f1:1c:9b:1e:e1:45:89:28:47:d0:e3:
d7:e2:d5:e8:2c:46:e9:38:87:06:99:5d:6f:78:39:68:38:e0:
ae:1b:ae:14:da:3d:30:44:98:60:bb:27:2f:4a:4f:e9:64:d1:
2b:25:df:a3:d0:7d:18:ed:5a:ea:ad:07:29:7a:1f:df:b2:4a:
15:42:62:a9:68:75:88:50:09:12:07:2f:32:17:8d:ce:2f:40:
78:7a:3c:db:5b:b4:03:04:a8:cd:47:4f:88:9d:e4:c8:77:e2:
4f:aa:e9:0f:ad:d3:3d:47:bc:41:e1:33:b6:24:12:63:f4:c8:
60:10:f7:01:97:81:d0:ac:ce:0c:90:a8:9b:4b:0d:c4:e6:54:
ad:18:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org