Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pM3nRzL8SjN068NBnS9w-Aw9HQ0.roa
File: pM3nRzL8SjN068NBnS9w-Aw9HQ0.roa (raw, json)
Hash identifier: ZK4CTt9n3TKyLqObBp1Z3cuU6a8zEiKQ+mcyJKK0M5Y=
Subject key identifier: A4:CD:E7:47:32:FC:4A:33:74:EB:C3:41:9D:2F:70:F8:0C:3D:1D:0D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F3A6435268B75D292A3C82B6C5DE12EA5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pM3nRzL8SjN068NBnS9w-Aw9HQ0.roa
Signing time: Thu 02 May 2024 17:39:56 +0000
ROA not before: Thu 02 May 2024 17:39:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56322
IP address blocks: 86.107.101.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 14:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:64:35:26:8b:75:d2:92:a3:c8:2b:6c:5d:e1:2e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 2 17:39:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4cde74732fc4a3374ebc3419d2f70f80c3d1d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:3f:23:80:bc:04:3f:5e:5f:f4:76:82:28:
8d:6b:ef:72:ea:98:cc:51:ed:5d:7a:a9:c0:15:e8:
a4:40:33:e3:cc:8f:d6:b6:e0:c5:f1:19:7c:b2:3d:
d7:27:d8:2f:c7:c7:f8:05:37:2b:93:52:26:e1:50:
86:83:9a:e9:e4:06:8b:20:c0:81:48:b7:6c:dd:f3:
e5:78:ec:da:5a:e5:fa:2c:ea:a9:c2:36:f9:07:07:
dd:d3:d4:5b:1f:64:ac:56:39:eb:6f:45:7f:29:da:
db:c9:a1:9e:df:53:55:00:ea:06:9d:d7:bb:ab:e4:
ee:41:bb:8f:de:b0:38:1b:6b:8c:68:ad:09:cf:23:
d0:d6:f5:81:92:8c:6d:3a:7d:66:6a:d5:e7:38:50:
66:2b:1b:8a:65:4f:a7:b2:43:0c:11:55:ff:ab:30:
c9:66:53:0d:b9:f0:bd:3c:81:60:cc:44:a0:0c:76:
ae:d2:3e:5c:ce:3e:e8:49:00:e8:a3:cb:dc:2f:f8:
2a:55:84:ef:46:0a:d7:a3:44:f8:1e:ee:24:86:3e:
30:a4:39:9e:d3:7f:94:70:90:0d:6b:3f:df:46:55:
c0:fb:d3:3f:b1:db:01:40:d1:aa:3e:bb:b3:71:6f:
cd:0d:59:ef:14:c9:a5:5c:44:cb:4a:a0:ea:fd:86:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CD:E7:47:32:FC:4A:33:74:EB:C3:41:9D:2F:70:F8:0C:3D:1D:0D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pM3nRzL8SjN068NBnS9w-Aw9HQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.101.0/24
93.113.57.0/24
94.177.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:44:57:b6:29:36:04:d6:6b:01:75:3f:5b:1e:23:de:03:fe:
7c:2e:c5:65:73:ce:96:d5:32:37:e5:c3:85:88:e9:9f:da:2f:
9c:ed:a8:90:c3:ad:7c:8e:22:1a:fe:d0:7a:bc:ee:4d:c0:9c:
6f:15:8f:90:23:37:15:b3:a7:a9:b6:c7:45:a0:77:6b:50:6b:
7e:44:e2:10:20:a3:1d:8b:d6:80:ba:a3:20:1f:84:71:1d:d3:
19:ea:ae:0f:fa:5f:8b:13:94:43:3c:6a:93:78:4e:43:ca:83:
c7:c3:21:03:24:a3:b8:06:c1:38:93:da:16:24:27:15:81:d4:
7a:d2:c0:52:38:f2:02:50:84:08:e2:5e:b4:80:ca:32:76:f8:
29:c0:9a:0a:85:f0:20:48:ba:05:0d:8e:22:40:a1:ab:89:12:
8f:d5:e6:d0:52:fb:23:f0:3a:9c:d0:4c:d6:b5:d9:0f:e8:08:
ea:aa:13:10:1c:29:27:0a:61:01:f7:4e:0a:11:d7:47:31:40:
02:7b:32:06:2a:fa:40:44:7a:3f:1e:75:29:22:e6:cc:06:29:
e7:f0:dd:c4:e7:6e:d7:61:34:8b:9d:27:d6:b1:e3:b7:db:4e:
fc:25:d7:f6:38:d5:49:12:80:31:95:d1:20:ca:91:8a:fb:43:
36:40:ac:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org