Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/myo0IyK5Dq6ohz6EdnD8NTISVAc.roa
File: myo0IyK5Dq6ohz6EdnD8NTISVAc.roa (raw, json)
Hash identifier: 0bvkWzpeuKpzABcIQHbzyOEdB6SDzGePKV6V1U5QbBI=
Subject key identifier: 9B:2A:34:23:22:B9:0E:AE:A8:87:3E:84:76:70:FC:35:32:12:54:07
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A0766FCEEABA5D4712B93824840D1E1DB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/myo0IyK5Dq6ohz6EdnD8NTISVAc.roa
Signing time: Fri 18 Aug 2023 06:48:24 +0000
ROA not before: Fri 18 Aug 2023 06:48:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.34.202.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 10:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:66:fc:ee:ab:a5:d4:71:2b:93:82:48:40:d1:e1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 18 06:48:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b2a342322b90eaea8873e847670fc3532125407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:b4:73:38:21:6d:23:c6:36:19:cf:9b:d1:
ac:89:17:b1:52:89:ec:3d:94:84:4c:ae:16:c1:a6:
40:57:90:7c:dc:49:9e:ad:15:54:fd:b5:92:be:85:
50:b7:df:7d:a4:c6:e8:dd:9e:6a:7e:cc:02:a9:7e:
ea:83:82:fd:27:46:0b:fa:38:5d:67:22:f4:f8:0c:
7c:e6:75:2b:54:a2:61:cf:98:aa:af:38:00:62:ff:
85:50:68:18:ea:6e:19:cf:ea:24:20:67:85:39:55:
7d:d0:c5:91:78:30:da:81:f9:41:f5:84:e6:37:54:
a3:a9:be:b9:f5:10:dc:b1:c7:69:42:2f:d1:7f:2f:
2f:37:4b:d1:d4:7f:0f:9d:8a:77:e2:41:93:09:b3:
8e:e3:3e:37:18:9f:3e:51:80:a9:e8:a0:0f:2c:5b:
69:b0:57:24:18:6d:f6:09:90:ac:69:fd:90:04:83:
a7:7f:3b:0c:5c:6e:e5:e9:64:84:fe:c7:24:87:ca:
7f:b2:1d:eb:68:57:c4:e2:93:83:84:dc:b5:03:bc:
6c:2d:7e:2f:52:4a:0c:c2:dc:f4:1d:a8:e3:fe:65:
7d:1e:a1:23:5f:c0:0e:9d:0f:95:8c:08:cc:e9:be:
f7:83:1e:13:de:c1:86:38:28:eb:e2:62:8b:a2:d1:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:34:23:22:B9:0E:AE:A8:87:3E:84:76:70:FC:35:32:12:54:07
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/myo0IyK5Dq6ohz6EdnD8NTISVAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.65.0/24
89.34.202.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
09:be:61:9c:1c:e3:fa:d6:7e:2b:57:4e:c5:29:48:93:4d:c3:
e8:1d:5b:96:61:f7:c1:19:8b:e0:df:5e:da:7b:9e:ee:60:94:
f9:90:c9:e5:ac:ef:0b:84:54:14:98:7c:42:06:8f:03:17:db:
c3:c8:1b:31:ad:cc:9d:57:28:82:ae:f2:d0:9a:06:a1:44:b8:
67:b1:f0:7c:b4:91:1d:a5:00:44:e9:ff:26:e1:ad:08:3f:71:
1b:b2:f5:8c:e6:bb:39:6c:34:df:15:42:59:38:31:a5:74:d6:
83:02:a9:36:e0:f2:ef:ad:3b:3e:07:40:90:ee:02:34:23:c7:
ae:9f:96:f7:c9:48:72:c8:c9:87:96:07:23:ad:ed:b7:47:7d:
b4:a6:d9:43:7c:c0:e6:b5:2b:9f:8b:04:22:2f:fc:fd:7e:a8:
d5:dd:ff:36:b1:21:8e:76:05:bf:83:48:03:9f:6f:66:4b:98:
b9:5a:f5:8e:10:87:af:b2:26:c6:98:d7:02:9e:5a:08:67:96:
66:de:98:fc:16:4c:1b:07:07:1e:2f:e4:14:01:dc:25:26:97:
88:f9:a9:a7:db:5c:d3:47:f4:30:61:68:59:10:ad:96:c1:86:
29:69:27:73:20:c3:13:37:b4:5a:e4:4c:f1:54:c7:0c:be:85:
11:b6:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org