Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r8r4w9R4vUOmAXTqTteCQPFb1Ss.roa
File: r8r4w9R4vUOmAXTqTteCQPFb1Ss.roa (raw, json)
Hash identifier: Vdqta4kqoNSRXqxPSkpi8DrmksUOQTWjYDTFInSizNk=
Subject key identifier: AF:CA:F8:C3:D4:78:BD:43:A6:01:74:EA:4E:D7:82:40:F1:5B:D5:2B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187269F25791BF3F0B59963D7166D0E1EEC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r8r4w9R4vUOmAXTqTteCQPFb1Ss.roa
Signing time: Tue 28 Mar 2023 05:09:36 +0000
ROA not before: Tue 28 Mar 2023 05:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:9f:25:79:1b:f3:f0:b5:99:63:d7:16:6d:0e:1e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 28 05:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afcaf8c3d478bd43a60174ea4ed78240f15bd52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:5f:45:1d:5c:87:71:69:a3:c1:8f:42:db:
30:56:a9:64:c8:c1:52:58:ce:af:06:48:86:54:e8:
6a:80:06:6d:2f:60:30:ec:82:35:c5:17:f3:77:51:
3d:36:39:1d:94:4f:70:1d:17:a3:22:ff:68:4e:e6:
87:c5:13:89:15:ce:05:70:34:11:5a:78:a3:f6:e1:
84:d7:b5:a1:06:55:f8:a7:58:44:8d:64:3b:35:cc:
f9:9c:42:5f:92:e1:7d:96:93:7b:75:d8:8e:cd:05:
1e:e9:31:a8:db:87:94:43:76:b4:e8:e2:f8:37:e9:
d0:78:31:e8:e8:de:1d:c3:fa:eb:92:bb:9f:34:87:
71:bf:80:ef:16:cf:ce:59:77:28:82:f0:76:51:05:
54:c9:67:c9:f9:91:61:b9:ac:27:20:48:21:2f:c0:
05:67:d5:82:44:c5:a6:b5:43:ef:e7:a4:2d:54:f5:
c6:47:ac:cd:cb:89:02:e1:c0:ec:6c:bf:c2:16:27:
bc:8f:08:3c:3e:5d:3b:16:30:5d:90:64:5e:5d:6b:
06:b8:42:3c:41:a0:46:6f:0c:44:09:14:5a:f7:06:
7f:85:39:7e:29:88:5a:e1:58:31:4f:32:8c:68:0b:
97:9b:ea:9d:a6:84:34:af:9d:e3:20:c3:b2:2f:39:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CA:F8:C3:D4:78:BD:43:A6:01:74:EA:4E:D7:82:40:F1:5B:D5:2B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r8r4w9R4vUOmAXTqTteCQPFb1Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
77.81.100.0/24
86.107.51.0/24
89.34.202.0/24
89.34.219.0/24
89.35.119.0/24
89.35.129.0-89.35.131.255
89.40.70.0/24
93.114.244.0/24
94.198.171.0/24
176.223.188.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
56:de:d3:30:4a:cd:1c:c8:75:88:c3:0b:28:97:2b:bb:51:53:
ba:d8:09:9d:9a:d8:e3:86:c9:b9:7a:07:7e:96:62:a9:89:50:
20:4e:19:9f:23:3b:7c:c4:de:bb:12:ac:7e:ba:77:b7:60:f5:
f0:78:5f:57:11:f7:9d:aa:12:16:82:11:4e:e4:61:fd:b1:9b:
3f:99:e5:9a:01:7e:ac:58:b1:3f:cd:cb:6d:bd:c8:d0:6a:66:
d6:80:33:5f:52:e9:55:df:e9:ba:a8:e3:7a:0a:9b:8e:af:ef:
38:39:87:86:04:1b:90:e0:f9:09:f7:b0:77:db:8d:24:85:6a:
04:92:57:59:63:cb:67:06:21:eb:01:c2:56:f9:14:95:7c:41:
b4:0f:df:8a:d2:4d:33:b0:66:8d:87:87:59:99:d2:1a:7a:69:
fd:9a:a5:17:ee:b3:6e:c1:94:e8:57:23:cb:23:ae:a4:e2:4a:
27:66:c9:30:38:24:3c:c1:c3:af:f1:c4:43:c1:dd:d2:4a:41:
6e:c5:9b:37:fd:79:85:2d:c8:6d:89:fc:36:c7:e6:6a:c5:0a:
e5:a6:c8:2c:6b:cd:0e:ea:d7:aa:cd:97:bb:b8:36:d4:91:9f:
d4:64:7f:16:98:ff:16:91:10:97:a2:2d:5f:cb:9e:7c:65:0d:
fb:68:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org