Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qFrG7w3K2NVnIdxoQ_BEMmrxNLU.roa
File: qFrG7w3K2NVnIdxoQ_BEMmrxNLU.roa (raw, json)
Hash identifier: 7A+SaUF3QSp8//Bv/1nzK/Wkuc3RhWPXiR0M3QPb1iQ=
Subject key identifier: A8:5A:C6:EF:0D:CA:D8:D5:67:21:DC:68:43:F0:44:32:6A:F1:34:B5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187453FFE2DA25BE4712347D50629A57086
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qFrG7w3K2NVnIdxoQ_BEMmrxNLU.roa
Signing time: Mon 03 Apr 2023 03:53:54 +0000
ROA not before: Mon 03 Apr 2023 03:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 37.156.5.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.39.125.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 09:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:3f:fe:2d:a2:5b:e4:71:23:47:d5:06:29:a5:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 3 03:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a85ac6ef0dcad8d56721dc6843f044326af134b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a4:80:50:37:24:74:28:5c:a7:57:15:cd:a1:
d9:2c:54:05:9c:2e:13:19:3c:9e:c4:b3:8e:9d:8f:
a7:9b:7d:bc:9c:1d:9d:60:b8:f6:d5:f5:65:f1:47:
b3:86:53:7c:70:34:9d:0e:8d:38:7e:8b:7a:1a:0b:
d0:d2:33:43:41:3a:5a:57:47:2a:d1:54:87:25:e8:
43:e8:5e:a3:8b:6e:27:13:01:d2:39:b3:4e:46:e4:
56:23:e0:e2:f3:06:10:a2:82:b4:47:31:83:dc:5a:
2b:18:51:76:ac:5f:e9:65:d1:0e:2b:ca:2d:59:b2:
c3:b1:66:2b:f4:76:c1:5d:5b:eb:f2:f6:22:37:1a:
64:f1:ec:6d:3b:89:7d:ab:0f:bd:7d:ce:6f:c2:57:
bc:34:83:f4:32:f2:2a:97:ab:fc:94:55:48:98:fb:
e3:30:fb:42:94:5f:95:48:e2:76:7f:92:86:d4:c3:
c1:62:9d:45:7e:d1:70:4c:bd:26:c7:91:77:c8:2c:
3b:8e:7e:0f:e7:72:1a:44:66:8b:39:d0:23:e3:f7:
27:be:79:23:da:a7:14:d5:e9:06:35:8c:ac:dc:b5:
58:16:72:5e:84:33:2d:3a:8f:81:44:be:74:47:e7:
66:22:3b:a3:de:5e:c0:c2:74:98:04:6c:76:a0:03:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5A:C6:EF:0D:CA:D8:D5:67:21:DC:68:43:F0:44:32:6A:F1:34:B5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qFrG7w3K2NVnIdxoQ_BEMmrxNLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.5.0/24
89.34.106.0/24
89.39.125.0/24
89.40.215.0/24
89.46.42.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
88:35:07:2d:bf:2b:0c:ba:31:4e:19:c5:a8:c1:66:52:0f:23:
6a:89:d8:27:dd:0b:4c:f7:fb:a2:17:5e:0e:0b:dd:96:e0:3a:
c5:3d:e9:ce:36:9b:0a:dc:ee:cf:5d:b2:9d:bd:b9:d7:00:e4:
fe:39:31:58:70:e3:74:ac:46:fc:69:6f:01:a8:bd:42:ef:81:
83:dd:7c:e9:db:7a:5f:d6:82:b6:c7:14:0a:36:48:11:34:6c:
0d:73:2f:a6:89:44:7f:56:b6:16:2a:6e:f0:f9:a1:c4:ee:81:
de:6f:63:34:83:2e:7c:a3:e2:ba:ad:25:41:ec:61:99:d6:b3:
66:81:b0:d4:fa:26:69:44:b5:c6:35:9b:0a:69:26:d9:dd:e0:
b3:11:f7:da:78:d4:e4:dd:f5:7d:a9:a5:6d:8c:09:7f:3e:a6:
df:d5:9f:a9:89:1f:e6:a2:d8:21:e2:0b:ac:58:94:74:9f:cd:
12:3b:da:c4:0e:16:91:fe:a4:11:c3:fc:db:7f:ee:ec:7a:83:
40:f3:a5:94:8e:d2:7c:dd:ed:ed:2b:03:09:2d:f2:90:34:b0:
62:89:b6:ac:2a:51:64:e5:31:32:9d:07:17:5e:2c:7e:ac:1f:
84:ac:91:10:15:08:c2:1b:49:e8:92:52:99:8c:c9:e8:f9:42:
cb:b9:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org