Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oAtruolp-VWoGSQ7_dQVM-FmOoI.roa
File: oAtruolp-VWoGSQ7_dQVM-FmOoI.roa (raw, json)
Hash identifier: FS5IBmZ4W9wkNcsrsrGdqehmto8GqDNMcfGCpX+V7jg=
Subject key identifier: A0:0B:6B:BA:89:69:F9:55:A8:19:24:3B:FD:D4:15:33:E1:66:3A:82
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01886AD417C1EDD792DD88832A553B9E7EE2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oAtruolp-VWoGSQ7_dQVM-FmOoI.roa
Signing time: Tue 30 May 2023 04:04:24 +0000
ROA not before: Tue 30 May 2023 04:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 89.34.202.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 04:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6a:d4:17:c1:ed:d7:92:dd:88:83:2a:55:3b:9e:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 30 04:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00b6bba8969f955a819243bfdd41533e1663a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:d2:ea:ac:57:7c:45:39:a0:0e:54:e2:95:
bb:7b:99:14:be:21:c9:32:49:ae:25:78:42:eb:1b:
6d:b3:43:ad:73:c3:56:62:2a:2f:39:31:1a:90:0d:
5c:92:7b:8f:2f:d5:85:6f:81:23:2e:83:bb:51:79:
39:02:de:20:cb:6a:48:43:fa:43:c5:b4:a0:fd:2f:
7e:1d:64:07:dd:47:63:c7:b7:77:e4:68:12:63:fc:
9c:78:9b:e9:2f:8f:7a:78:55:40:11:17:75:7a:df:
c4:c1:d1:72:26:1c:b9:e1:bb:60:b7:c4:b8:cf:0b:
50:2b:f1:86:4b:9d:61:e5:fd:a9:0c:c0:8d:79:06:
a1:0d:a6:a0:b8:8c:fd:ca:dd:50:ca:45:72:f1:4b:
45:53:9a:25:31:a0:98:d9:de:0a:d1:c7:15:a3:16:
2c:48:98:7d:71:2b:7b:c6:d3:a2:86:51:5d:4f:1d:
be:f2:22:69:6b:13:f2:2b:77:97:dd:8e:57:b6:4b:
35:f9:55:d3:e2:b0:c8:71:35:a1:96:1a:af:50:cb:
df:80:2a:21:a7:7b:30:03:7b:f8:7f:1f:4c:92:cb:
52:45:6c:db:40:13:ab:22:d3:3d:36:20:4b:13:2c:
df:e3:78:22:50:e6:45:02:b1:93:44:76:41:a5:f1:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:6B:BA:89:69:F9:55:A8:19:24:3B:FD:D4:15:33:E1:66:3A:82
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oAtruolp-VWoGSQ7_dQVM-FmOoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.18.0/24
89.34.202.0/24
89.45.35.0/24
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:60:8c:ed:6d:49:7a:53:5f:79:4d:df:af:98:d6:84:68:93:
f1:f6:4f:40:08:c5:ed:ae:fa:e8:5e:1d:6c:1f:4c:5e:f2:52:
18:be:99:5e:63:f0:b6:10:e3:9f:5e:d5:8e:20:13:4d:93:09:
db:0f:6a:f9:29:93:1a:38:14:03:4c:4c:4e:e9:ec:7d:b9:64:
8f:e7:e3:48:67:8c:14:ae:c3:9f:df:cd:5b:1c:cd:40:85:aa:
a1:ba:07:3b:b9:9e:50:56:93:cb:1b:e9:1d:a9:cb:5c:2d:a9:
d1:77:58:ae:e5:15:15:a1:92:f8:2a:c3:5a:54:9f:62:84:06:
3c:4f:9c:33:1c:75:ee:9a:ed:11:4f:b6:5e:1b:cd:ca:ad:b3:
9c:3b:55:31:57:28:fd:ce:77:3c:73:84:2a:b3:54:90:43:15:
3f:3c:e3:6f:f0:80:15:95:0c:22:0a:ef:64:2a:18:ed:de:62:
1a:70:99:53:7a:bd:c9:79:7e:d7:84:f6:76:fd:87:9b:71:86:
e4:0b:1b:7f:90:34:2e:00:0e:dc:bb:01:26:97:44:94:81:ba:
fc:3b:46:7d:d6:d2:62:e9:30:5a:f3:07:78:87:f6:14:34:92:
f2:a6:46:03:63:99:c0:95:fd:2c:74:29:4f:af:27:31:0e:7d:
ac:1f:9d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org