Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/p1zvvsaPBBRlJzUdNx12MpePgIA.roa
File: p1zvvsaPBBRlJzUdNx12MpePgIA.roa (raw, json)
Hash identifier: ems2BIelksvQGhiNg5VWub+tqTZIJfTyPsRAEETf6cI=
Subject key identifier: A7:5C:EF:BE:C6:8F:04:14:65:27:35:1D:37:1D:76:32:97:8F:80:80
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189BBFEB308A0A868D541FB1D23EC0CC219
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/p1zvvsaPBBRlJzUdNx12MpePgIA.roa
Signing time: Thu 03 Aug 2023 15:22:58 +0000
ROA not before: Thu 03 Aug 2023 15:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 188.241.136.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 16:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:fe:b3:08:a0:a8:68:d5:41:fb:1d:23:ec:0c:c2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 3 15:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a75cefbec68f04146527351d371d7632978f8080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:e6:eb:3a:e0:68:21:c2:51:88:e6:38:82:
7b:20:e7:d9:df:84:2b:8d:f8:3e:da:92:b2:a9:c2:
98:cc:a5:25:43:92:dc:9a:15:b5:10:55:57:8a:f5:
74:cc:75:ba:6e:45:e0:ef:c5:bd:24:f2:50:8b:4c:
9d:20:6c:50:ec:5c:09:b2:4f:dd:05:6e:d2:5c:f4:
36:ec:48:81:7f:6e:46:8f:91:9b:a7:63:98:9a:92:
96:29:2e:74:9b:d2:91:25:20:65:7f:0f:d5:9b:c2:
37:8f:3f:e0:e2:98:66:2f:57:51:e0:8d:97:e6:9e:
da:03:f0:1d:00:8f:25:a7:ca:c8:62:9d:7f:0b:ff:
6c:24:e4:02:bb:b4:af:57:3f:ca:49:be:29:54:4f:
41:e4:bf:03:e1:b1:05:91:f2:92:77:64:fe:b3:7b:
93:85:d5:78:63:c6:1e:cd:75:72:78:3b:41:39:f8:
5d:81:f1:b8:e7:d9:72:c4:f2:24:cc:be:18:d3:21:
c8:6c:26:f1:33:26:14:33:2d:75:d6:3d:af:99:d1:
49:68:09:5c:e0:07:55:73:d7:44:97:fa:03:02:fe:
44:92:19:58:e8:ef:5b:e8:77:ee:0c:a5:91:97:e3:
bf:ed:fe:91:5b:8c:a1:ac:44:86:b5:4e:78:f2:34:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5C:EF:BE:C6:8F:04:14:65:27:35:1D:37:1D:76:32:97:8F:80:80
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/p1zvvsaPBBRlJzUdNx12MpePgIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.194.0/24
94.198.171.0/24
188.208.103.0/24
188.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
12:92:c9:83:3e:7a:93:8b:a6:d4:60:a7:7a:a0:c1:c7:b4:23:
69:84:35:36:3f:c7:af:53:7f:e2:7f:26:8f:2a:73:fa:88:0c:
a7:e2:88:a7:73:05:e0:8b:4f:d1:c6:32:40:a7:b0:2a:c7:b1:
b6:59:b5:d7:12:6a:9a:f2:8d:ad:cf:4b:f2:74:01:cb:38:96:
b0:00:7b:31:41:03:de:2b:d5:cb:ab:02:f3:55:57:4e:ed:3f:
94:c5:61:cb:11:cf:4c:a4:62:f6:49:4f:80:a9:f6:ff:ea:90:
32:8b:13:75:5a:c5:22:c7:c9:c9:d4:f6:da:fd:e1:3e:24:b6:
f9:7a:74:17:ab:84:97:17:99:5d:4d:5c:65:39:f8:33:7e:ba:
b7:c2:20:4e:76:1a:87:47:ee:76:8d:bd:81:28:77:eb:0f:64:
fa:8e:0a:2c:38:5e:e4:2e:55:b1:5f:ed:d3:da:8a:86:2f:96:
25:5f:fe:b9:1b:78:35:e9:a4:13:ec:f6:9c:16:62:63:34:ba:
60:a8:b3:a9:1b:63:d9:4d:8e:de:e9:77:cc:23:f9:9c:d3:6c:
1a:8f:68:1f:da:da:bd:1c:77:01:99:21:d7:cd:e3:e0:de:cd:
73:36:40:a4:23:2c:9e:4e:4b:8b:15:94:54:43:28:4c:24:3e:
22:a9:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org