Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lw8xkby59kkCPe7oLyjvqjIR1jA.roa
File: lw8xkby59kkCPe7oLyjvqjIR1jA.roa (raw, json)
Hash identifier: nfSU7e0X6AffQ17O4q3cseTfXiLPO3LN1JEdXqNiiVc=
Subject key identifier: 97:0F:31:91:BC:B9:F6:49:02:3D:EE:E8:2F:28:EF:AA:32:11:D6:30
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187D2162EB66EECF7CD4422AC04290C5C81
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lw8xkby59kkCPe7oLyjvqjIR1jA.roa
Signing time: Sun 30 Apr 2023 12:14:41 +0000
ROA not before: Sun 30 Apr 2023 12:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 86.107.100.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 12:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d2:16:2e:b6:6e:ec:f7:cd:44:22:ac:04:29:0c:5c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 30 12:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=970f3191bcb9f649023deee82f28efaa3211d630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d3:38:21:20:27:b6:22:0d:5a:c0:8d:a3:85:
68:01:64:97:a1:68:5a:08:45:a7:09:d3:01:bc:bb:
b3:1e:78:f0:38:b8:c2:a1:a3:a3:13:33:fe:99:bc:
e4:1b:1c:51:5b:f8:65:f1:77:fb:0a:4c:ac:43:b1:
ea:24:ea:99:b8:94:bf:b1:2f:e0:bf:5f:26:7b:d7:
68:60:12:7f:3e:89:05:d2:ed:80:a3:72:7b:05:4e:
ce:59:41:87:3f:ba:5b:9c:21:da:34:cb:54:b3:79:
55:08:02:de:d1:25:45:99:62:40:21:fa:1e:af:f0:
2a:03:88:4c:ec:1b:5d:a2:d6:fa:bd:2a:41:37:e6:
e2:ef:7b:0d:77:74:8d:31:2b:18:32:81:df:1f:bf:
7c:ff:76:80:00:63:d9:51:a6:a3:a6:83:d6:24:b0:
80:2e:42:3e:83:64:76:44:7e:f3:9d:c7:02:b4:df:
d4:2b:d8:68:ad:5d:15:f6:8d:29:0c:ab:8e:87:4f:
e0:c5:20:d1:39:74:9b:1e:64:ac:d9:f9:91:ff:c8:
51:de:dc:75:cd:6f:2b:62:f2:76:2f:56:b2:78:a3:
6d:d8:55:f9:64:21:8b:1e:cd:ee:7f:41:74:1c:39:
93:72:41:39:da:ab:3a:af:74:b8:0f:c4:e7:1f:89:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:31:91:BC:B9:F6:49:02:3D:EE:E8:2F:28:EF:AA:32:11:D6:30
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lw8xkby59kkCPe7oLyjvqjIR1jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.100.0/24
89.47.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c8:f7:42:56:35:3a:ee:ed:60:82:53:4e:11:f3:73:ee:09:
da:e7:8d:5d:77:c2:b9:d9:f7:1e:15:72:a5:f5:ef:6a:a3:5c:
11:19:d8:3a:40:88:75:94:fc:cd:48:0d:01:2a:2a:61:c0:03:
00:35:2b:39:15:5c:5a:b4:d7:3e:c8:26:38:83:c3:f3:bb:a9:
32:07:20:a7:cb:04:07:90:9a:a4:a7:21:36:bf:01:a6:e1:42:
1d:40:25:a1:85:e0:99:1d:f0:ef:e1:ca:c5:5a:b9:3f:c1:84:
08:d3:81:ad:71:02:65:3e:0e:54:e3:5f:e0:64:7b:8c:fe:c8:
34:a6:b7:07:8d:28:fc:35:69:c5:07:b2:46:b2:a0:cf:3d:ee:
e3:80:68:53:59:1d:55:53:cb:77:09:d3:02:37:51:2e:3f:32:
cc:0e:e4:37:fd:46:f3:f0:76:55:74:ce:1b:d8:e7:ef:03:db:
a3:e2:58:09:1d:4f:60:00:03:a2:da:17:5f:0f:7d:4b:d1:6c:
95:20:a5:6a:01:50:0c:a7:ba:04:94:e7:f8:f5:01:4f:53:7b:
c3:c3:2c:86:36:4c:bc:1b:94:d2:fd:1f:3a:ed:46:8e:38:6d:
ba:91:f7:b1:e7:21:14:9f:6b:48:fb:49:21:78:ba:b9:ba:cc:
fe:c0:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org