Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rFNQxMdHQT0D506_DznGnN0OfEM.roa
File: rFNQxMdHQT0D506_DznGnN0OfEM.roa (raw, json)
Hash identifier: X96GD9qiBP8o31OiAcq+8ZsklfnBCZzDSLKe8kXmugQ=
Subject key identifier: AC:53:50:C4:C7:47:41:3D:03:E7:4E:BF:0F:39:C6:9C:DD:0E:7C:43
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01872CB62D821CD4CC52CECAA2C2EB77A91E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rFNQxMdHQT0D506_DznGnN0OfEM.roa
Signing time: Wed 29 Mar 2023 09:32:29 +0000
ROA not before: Wed 29 Mar 2023 09:32:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 2.57.241.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:b6:2d:82:1c:d4:cc:52:ce:ca:a2:c2:eb:77:a9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 29 09:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac5350c4c747413d03e74ebf0f39c69cdd0e7c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:b7:26:b2:eb:e6:8a:00:e8:8c:90:43:21:
18:43:14:3d:f7:fb:e7:fc:cb:d1:ef:fc:f4:29:c5:
13:78:22:3e:db:81:4f:e8:17:45:8c:86:55:f0:52:
1b:84:c9:58:c4:15:8f:3f:6c:d4:52:af:cf:7a:24:
cb:dd:4a:65:92:8e:73:e7:5e:e9:e8:f7:bd:14:34:
4b:3d:03:9b:3c:9d:c5:a3:c9:cb:0c:da:f4:d3:20:
f2:65:36:15:b9:46:fc:0e:6b:1b:d3:c2:8c:69:f3:
74:6d:0f:1c:e0:fa:11:cd:07:3c:cf:eb:a7:1c:ab:
26:06:b8:e3:06:16:53:9f:4f:2b:01:69:e7:28:7c:
da:f4:f6:56:56:e8:cc:a0:88:2d:5e:7e:85:9b:ca:
a5:1f:33:b3:18:d5:c4:06:13:88:e6:65:ed:c8:7d:
75:40:6b:6d:f0:8b:8f:96:47:81:49:fd:8a:77:c3:
23:b3:29:50:23:66:4f:3b:df:4c:df:43:3d:17:96:
31:68:d1:ed:ba:33:c7:bd:e2:8e:43:69:0f:77:af:
6c:ea:b4:12:8d:27:80:10:2e:46:6f:db:08:5b:62:
de:9d:4d:ed:3b:9b:8f:9f:28:7e:41:0b:68:e6:e3:
c5:a9:10:58:e7:a1:bd:46:4e:f4:1c:9c:e2:80:59:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:53:50:C4:C7:47:41:3D:03:E7:4E:BF:0F:39:C6:9C:DD:0E:7C:43
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rFNQxMdHQT0D506_DznGnN0OfEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
92.114.54.0/24
93.90.74.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9c:38:e1:34:8e:44:cc:03:b1:43:f7:df:4b:61:ab:a1:d1:
e5:14:70:9a:12:2f:d6:11:f6:ca:ef:63:8e:ec:0d:58:45:ac:
d5:5f:87:49:12:f0:4c:88:e0:e1:b9:43:cf:42:8f:0c:71:d6:
0c:f5:b6:a1:6e:b3:ab:a8:28:a7:bc:42:8a:fa:e7:01:20:c6:
81:d9:84:ab:5d:fa:a2:d6:4e:db:ae:c6:eb:92:8a:7e:8e:94:
13:96:14:38:e4:23:35:54:79:8d:31:51:2b:87:6a:99:ae:26:
21:1a:4c:f9:62:d5:0a:c2:2e:64:55:8d:81:86:79:50:dc:63:
8f:e1:ba:2c:b1:27:02:97:7b:a9:86:00:8b:e9:ca:0a:e7:92:
08:e6:bc:22:21:27:8f:c5:6e:58:88:65:bc:e9:18:6c:3c:8b:
74:8e:af:e0:d7:4a:7b:d0:db:ff:c4:60:67:d9:51:c8:4e:e6:
f0:08:97:62:f0:82:f8:23:f4:73:2c:b4:9f:f2:07:fb:a6:4f:
2f:cb:50:7e:42:6f:df:37:64:1c:8a:3d:9b:0d:9e:92:a9:31:
ea:11:32:9c:c7:29:bc:83:8b:bf:02:c3:a5:79:9c:01:35:7c:
50:2b:cc:dd:d2:bd:fe:a5:43:10:87:b0:54:87:1e:86:bb:21:
12:60:7e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org