Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ma9wlvrGkC1GpovM5KFA_cfb9aQ.roa
File: ma9wlvrGkC1GpovM5KFA_cfb9aQ.roa (raw, json)
Hash identifier: votQeVDL1tXgaSCxTUNoDltV3+I0G1B/Jf8g+BsziJA=
Subject key identifier: 99:AF:70:96:FA:C6:90:2D:46:A6:8B:CC:E4:A1:40:FD:C7:DB:F5:A4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018962E8CC91F91FFC56F63269A155638C16
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ma9wlvrGkC1GpovM5KFA_cfb9aQ.roa
Signing time: Mon 17 Jul 2023 08:12:51 +0000
ROA not before: Mon 17 Jul 2023 08:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 89.47.55.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
45.88.14.0/23 maxlen: 23
188.214.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 11:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:e8:cc:91:f9:1f:fc:56:f6:32:69:a1:55:63:8c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 17 08:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99af7096fac6902d46a68bcce4a140fdc7dbf5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a4:ee:d4:34:de:7a:35:ce:b4:37:ac:a1:db:
2d:69:b1:3c:3d:d7:53:e5:cd:4b:ea:18:11:09:13:
61:de:47:42:27:29:3b:aa:5e:c1:52:36:3a:42:3e:
52:9a:b5:92:25:d9:9c:fb:28:b9:1e:8a:51:b2:77:
a9:4d:7d:50:94:d8:49:22:58:69:2e:52:12:33:50:
20:16:31:32:3b:d8:48:0e:b6:7f:9f:22:ba:91:ec:
a3:03:20:b3:e0:17:6f:90:1c:88:d3:71:6e:44:4c:
6e:10:04:64:f1:cb:e6:62:82:63:ec:3b:a9:00:65:
e1:a9:d4:c7:37:68:38:f3:b5:27:67:ff:44:84:ef:
3a:95:0e:0f:a3:c2:cb:1b:e9:bf:de:c7:53:05:f2:
fa:75:fa:d5:23:d2:f2:59:3b:22:c7:2b:32:da:a1:
d1:4c:cb:b8:22:95:c7:4e:b2:c4:8c:0d:62:dc:3c:
b5:72:a9:81:12:e9:3e:50:b0:68:e5:e8:ac:69:64:
3c:84:2f:e4:9b:4a:d7:b7:dd:0c:5d:39:ab:f6:68:
d7:11:44:4b:4a:a5:fe:b9:51:67:89:3d:e8:b6:c7:
5e:ef:36:64:f0:14:1e:3e:74:af:df:e2:06:6d:c6:
cc:50:9d:5c:87:14:13:69:3a:64:81:9a:54:1f:12:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AF:70:96:FA:C6:90:2D:46:A6:8B:CC:E4:A1:40:FD:C7:DB:F5:A4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ma9wlvrGkC1GpovM5KFA_cfb9aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0-45.88.15.255
77.81.65.0/24
86.107.100.0/24
89.34.106.0/24
89.35.130.0/23
89.45.162.0/24
89.47.36.0/24
89.47.55.0/24
92.114.32.0/24
93.90.74.0/24
188.213.216.0/24
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c2:ca:39:d3:0b:98:54:32:c0:cf:24:45:f1:14:15:37:9c:
db:e4:8b:84:49:03:80:40:bb:c7:7d:a9:64:2e:a7:db:75:10:
25:1e:2d:8b:b3:77:ed:47:2b:9b:df:0b:2b:d3:ab:b3:0c:d6:
5c:5c:37:6b:3a:64:5b:4d:ba:52:b7:66:4c:86:ab:b7:d5:39:
f4:6f:4d:46:90:54:51:ef:ef:2e:16:a8:52:21:39:de:41:8b:
6e:fe:01:29:03:a6:cd:04:06:79:58:fc:ef:bc:f4:35:59:84:
11:e2:06:41:00:68:9e:ae:4b:02:44:9e:08:8f:e9:fa:78:ff:
1c:7b:79:84:75:04:be:8c:6d:6e:f2:37:58:78:91:ad:76:1c:
b5:b7:ce:70:8f:1a:fa:cc:cf:25:f4:18:35:84:08:13:ac:6e:
35:cb:fe:c6:88:72:d3:6b:22:e5:9f:4c:ee:a5:a6:6f:0a:78:
75:0c:ee:84:ff:e4:fb:24:7f:d0:3b:8e:98:26:20:16:15:51:
5a:dd:93:98:e7:eb:8a:04:29:54:06:24:ee:93:d3:0a:46:ec:
bd:1f:e2:c6:66:7d:5d:80:87:e9:0a:e5:07:4c:11:40:ce:35:
86:ba:0d:75:f0:0d:73:48:f0:d2:77:81:c2:b6:f3:99:e6:5a:
67:79:bb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org