Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rIXYR4bex8Oofrq8TTw78Rh9WjM.roa
File: rIXYR4bex8Oofrq8TTw78Rh9WjM.roa (raw, json)
Hash identifier: vZ+yl2xmRWBk+xSK6/XuB7yzbVW0iVHOA/4T5vp7WRQ=
Subject key identifier: AC:85:D8:47:86:DE:C7:C3:A8:7E:BA:BC:4D:3C:3B:F1:18:7D:5A:33
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A2C27C966622D79E8DDBF0C98F50A5B45
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rIXYR4bex8Oofrq8TTw78Rh9WjM.roa
Signing time: Fri 25 Aug 2023 10:05:19 +0000
ROA not before: Fri 25 Aug 2023 10:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 12:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:27:c9:66:62:2d:79:e8:dd:bf:0c:98:f5:0a:5b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 25 10:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac85d84786dec7c3a87ebabc4d3c3bf1187d5a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:9a:cd:27:14:35:b9:75:e2:a1:60:c5:ab:
be:57:7b:2e:fa:8f:78:cc:80:fb:7b:97:d9:eb:75:
b7:45:fb:39:fe:68:0c:9f:c9:36:10:5a:af:52:a5:
c0:fd:ee:63:74:60:01:2c:75:9e:2d:7c:a1:dd:7c:
c1:2e:e7:ae:73:76:68:2a:e9:a6:69:e6:e8:11:74:
84:97:ab:c6:4e:e6:47:7e:2b:61:cd:14:52:9e:d9:
e2:db:7a:c2:ba:34:5e:69:1a:f3:67:1f:9b:91:42:
65:61:e7:61:8f:5d:2b:dc:a9:15:55:01:7a:83:c0:
04:3e:ed:03:b2:3e:c2:89:06:b9:bc:dc:36:2c:7d:
2f:25:43:42:64:a8:82:f0:2a:3b:24:69:cc:10:7d:
8f:fd:ce:ff:6d:dc:30:be:f2:9d:28:7a:4e:04:a5:
06:7e:6c:33:d2:95:05:b8:43:a6:0f:df:2f:72:89:
0d:67:b4:8d:02:5f:f3:7a:4c:63:3d:2d:2f:bb:20:
9a:5d:95:41:20:0c:8a:92:f3:33:d0:cc:2d:5f:31:
27:7f:6b:91:5f:4c:12:b1:fe:99:7b:f5:82:89:72:
56:74:a0:d3:de:89:1f:8d:20:5c:3c:6c:b1:72:d8:
9f:b2:06:53:95:ae:3c:ca:e4:f7:69:43:81:5f:44:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:85:D8:47:86:DE:C7:C3:A8:7E:BA:BC:4D:3C:3B:F1:18:7D:5A:33
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rIXYR4bex8Oofrq8TTw78Rh9WjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
89.34.219.0/24
89.47.36.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ab:79:ad:3e:55:53:6e:2f:96:f2:f6:6d:94:5c:4a:32:d9:
1c:9b:25:35:d5:59:3c:e2:a1:be:6d:04:b1:af:1f:a1:2c:07:
42:f0:64:6b:38:ca:0e:c0:1e:97:c2:36:01:d7:0e:f9:f8:72:
e8:fc:7f:16:df:d0:56:64:f9:a3:5d:65:35:a1:04:2c:00:0e:
ab:04:7f:33:cb:ea:7c:b2:f5:7f:65:15:07:b2:aa:3b:3e:c8:
be:4c:c7:7b:5c:98:b5:4d:7c:dd:39:bf:ba:c6:1e:71:c5:65:
85:d1:14:80:ea:54:f4:50:68:87:e6:0f:63:16:3f:dc:97:81:
42:05:6d:74:c5:c6:5c:91:d7:ad:75:af:fc:98:52:66:19:86:
47:7a:19:88:f2:63:b1:51:e1:9a:f4:7d:8e:78:04:b4:64:20:
81:ed:9c:05:3f:86:00:83:34:b4:74:7b:73:63:20:0a:1c:17:
70:92:dd:27:57:12:3c:98:ac:76:21:48:b7:60:92:20:cf:95:
41:fb:26:91:64:93:bb:86:52:ca:53:7b:24:c0:a3:9c:c8:d3:
8a:b0:6b:84:54:01:aa:74:94:3d:c9:06:ce:a8:01:b8:5d:2e:
45:52:e0:e7:ad:07:ef:78:5f:8e:16:fa:11:7b:45:7c:29:a4:
38:11:af:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org