Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/psxH9n5gU7TISvht-QhXSy8TzUY.roa
File: psxH9n5gU7TISvht-QhXSy8TzUY.roa (raw, json)
Hash identifier: 0ZVIsSEVCp0DNsro2KQq52Zm/mYhNmi7PPF3uNYLwKI=
Subject key identifier: A6:CC:47:F6:7E:60:53:B4:C8:4A:F8:6D:F9:08:57:4B:2F:13:CD:46
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B427957A084CD23EDE04E71FF96F72DE8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/psxH9n5gU7TISvht-QhXSy8TzUY.roa
Signing time: Wed 18 Oct 2023 11:08:50 +0000
ROA not before: Wed 18 Oct 2023 11:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 86.107.50.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 04:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:79:57:a0:84:cd:23:ed:e0:4e:71:ff:96:f7:2d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 18 11:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6cc47f67e6053b4c84af86df908574b2f13cd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:0c:36:72:74:98:06:17:9e:f2:e5:fa:a1:
e4:9c:6f:80:7b:94:51:b5:02:cf:b6:dd:3f:78:00:
de:ae:ba:c7:4a:8e:3d:70:0f:93:c2:7a:ff:e6:5b:
2b:cf:76:2a:de:5b:3e:33:9c:97:f2:21:20:06:a5:
58:ee:48:3e:1a:81:48:d9:04:f0:0f:31:81:d6:68:
66:86:f2:2b:95:18:e6:34:1b:6f:ff:3a:33:79:13:
e6:f0:c7:be:7c:24:a4:9c:ec:17:64:ea:b1:cd:08:
a7:2f:6d:98:04:72:6f:23:09:8c:32:9c:3c:3e:cd:
59:ef:5e:ad:ee:fb:14:94:07:03:69:21:98:ec:d8:
10:cd:bb:c9:0e:e0:5a:a4:64:b3:54:85:3f:5e:36:
f3:11:0c:15:d1:8a:2d:eb:ab:5d:25:f6:ba:6a:e8:
7a:fa:3b:13:17:4b:ef:18:2e:9e:7d:95:61:53:3b:
12:e4:34:4e:cd:d9:b1:83:be:80:10:0c:d7:f3:e3:
50:76:72:28:ae:76:6c:d2:91:27:f0:c2:fd:4e:37:
6f:4f:94:e7:21:ce:4e:16:5e:ff:9e:27:d0:be:f6:
cc:78:72:b8:f0:d7:e2:0a:c5:7d:66:89:7e:ef:0e:
5a:b0:37:12:9b:a4:a7:91:38:ce:04:28:21:28:1c:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CC:47:F6:7E:60:53:B4:C8:4A:F8:6D:F9:08:57:4B:2F:13:CD:46
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/psxH9n5gU7TISvht-QhXSy8TzUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
86.107.50.0/24
89.35.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:17:30:90:f6:06:34:b9:37:74:6d:55:90:2e:4c:df:b9:66:
e7:ad:b1:47:2d:39:e0:80:2e:aa:ac:8e:dd:91:c7:4b:75:7d:
4d:e3:59:0f:4c:93:36:8b:d9:47:58:de:a0:bb:b2:c8:f9:ac:
32:2b:46:8a:9f:84:a7:a5:65:1e:f7:a0:bc:1a:f2:1d:c6:c6:
3e:14:c0:7f:c4:0d:40:d1:74:12:f6:aa:bd:a3:db:65:e9:7b:
79:b5:0e:fe:7f:af:b1:6b:6a:ad:80:5a:5d:af:d9:d6:06:a0:
77:70:c8:4a:18:04:40:0b:42:0c:f0:55:57:2e:d7:b3:d2:ba:
39:2d:f3:76:5b:e0:5b:a1:81:8a:77:88:03:35:65:04:d2:dc:
bb:ca:f0:31:f8:8d:e2:4a:50:bf:82:a1:54:43:98:6d:ff:50:
4f:3d:a5:52:ee:9e:a9:bf:70:02:82:dc:46:f1:40:59:4c:99:
f4:79:04:13:31:98:88:0b:46:a0:8a:af:f8:6c:5b:18:5a:c2:
0e:26:1a:3c:ff:54:b3:c0:1d:ae:49:99:b6:0e:d1:3d:d9:08:
e8:31:69:36:32:15:8b:55:1f:13:63:ab:3b:c6:6d:3f:d5:77:
e7:e7:55:6c:31:2a:44:03:96:71:30:d6:41:3d:ad:70:15:db:
08:21:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org