Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mQpiaKk4irfFJF6UvYJIcC6qjJM.roa
File: mQpiaKk4irfFJF6UvYJIcC6qjJM.roa (raw, json)
Hash identifier: /NePUVd6oQPsep1zgV2yDI6bgaZHswGlS/SUi7T0rkA=
Subject key identifier: 99:0A:62:68:A9:38:8A:B7:C5:24:5E:94:BD:82:48:70:2E:AA:8C:93
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AA93EA73C4CD4C5D00C3D2EFDF688FA02
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mQpiaKk4irfFJF6UvYJIcC6qjJM.roa
Signing time: Mon 18 Sep 2023 17:02:50 +0000
ROA not before: Mon 18 Sep 2023 17:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 2.57.242.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Sep 2023 15:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:3e:a7:3c:4c:d4:c5:d0:0c:3d:2e:fd:f6:88:fa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 18 17:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=990a6268a9388ab7c5245e94bd8248702eaa8c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:d4:65:39:b7:d8:81:b8:cb:df:ff:e7:ac:
56:19:3b:86:a6:51:05:8b:92:dc:6d:b0:3b:01:bb:
12:72:ee:b8:48:cc:3e:77:ae:a1:8b:30:a9:0b:da:
18:3b:bb:a0:ae:90:4a:fc:ae:ad:3a:38:bd:e5:f4:
2c:1b:e9:88:83:d9:61:7a:64:6e:16:b7:c4:20:52:
ac:6f:d0:ee:6a:d5:08:46:d9:86:64:0c:f2:fe:97:
44:e7:2e:72:02:f6:fd:98:ca:2f:52:9e:a0:59:a8:
c5:6d:40:ad:fb:e2:55:a3:f8:a5:2f:24:c3:db:ae:
cd:4d:ad:a6:fa:11:ca:bd:31:4e:2d:4d:3a:af:46:
f9:65:db:4f:ad:5a:2f:58:85:10:11:4b:77:ff:88:
58:00:1f:af:d0:6f:77:fd:f8:14:07:a5:0a:7a:be:
7b:fc:9e:07:07:a2:a6:b5:ef:8b:5f:79:4d:4d:22:
bc:a5:13:da:d4:81:78:c2:9b:87:9f:bd:4a:6d:1b:
5e:ab:09:ca:bb:01:9c:e8:2d:2c:07:63:b1:10:c2:
b8:6e:77:9e:fe:99:bf:6e:80:f4:36:fb:c8:af:02:
6b:6d:d3:fb:23:5f:fc:2b:ed:a2:37:ec:0e:5e:09:
78:93:c0:be:2f:c0:4e:af:ee:bf:5a:d7:fc:88:ab:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:62:68:A9:38:8A:B7:C5:24:5E:94:BD:82:48:70:2E:AA:8C:93
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mQpiaKk4irfFJF6UvYJIcC6qjJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
89.40.215.0/24
89.43.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cc:2c:d3:a1:92:f2:5e:c3:66:d8:ca:88:4d:75:bd:c3:1a:
a6:81:3d:a3:84:d3:c5:55:13:68:be:06:e3:43:29:21:55:2a:
72:73:89:4a:f0:24:8f:9f:e9:2b:52:07:63:70:1e:a8:39:4f:
4d:9d:4c:0a:3c:95:07:ce:1b:19:cb:ff:2e:b1:55:c4:84:45:
89:dc:c3:d1:16:87:e6:cd:1b:c4:1d:5c:a8:aa:c4:3c:5a:51:
55:e9:8e:a0:e8:02:c2:24:c8:be:41:24:37:ef:23:de:f7:ec:
7b:a1:c3:5b:06:02:e1:b1:cd:1b:39:aa:06:85:49:a0:30:c8:
b0:de:96:d4:ce:45:11:b5:6f:69:13:2d:fa:7c:7d:50:b2:ed:
b7:f8:f1:b9:ff:13:59:d1:af:a9:8f:46:3c:6c:e0:94:ff:25:
35:9b:64:2d:77:f2:ff:0f:61:18:6e:08:c1:e4:68:d2:5a:6d:
24:22:e1:c3:49:bc:c3:97:3d:4b:f6:fd:8a:7f:8d:6a:29:dc:
bf:18:11:bc:5e:b2:41:7d:55:8f:61:f3:ca:48:cd:09:bd:30:
b0:0b:ab:aa:91:1f:aa:59:ae:56:a1:ea:52:72:82:6d:2f:83:
47:f2:06:3a:76:11:7c:99:c6:90:43:16:cd:89:bd:53:af:70:
cb:c1:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org