Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sfzoGJsrcCv2aBTaY3UIgdbAsNM.roa
File: sfzoGJsrcCv2aBTaY3UIgdbAsNM.roa (raw, json)
Hash identifier: b0NrPwI4W4SZNNcpYKjnZyH2Ig1DRj8iQ3wlT88DgME=
Subject key identifier: B1:FC:E8:18:9B:2B:70:2B:F6:68:14:DA:63:75:08:81:D6:C0:B0:D3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E407BEC31FE4C2548641E08324B657A93
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sfzoGJsrcCv2aBTaY3UIgdbAsNM.roa
Signing time: Fri 15 Mar 2024 05:00:46 +0000
ROA not before: Fri 15 Mar 2024 05:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 89.36.140.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 09:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:40:7b:ec:31:fe:4c:25:48:64:1e:08:32:4b:65:7a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 15 05:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1fce8189b2b702bf66814da63750881d6c0b0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:93:82:2f:c3:7d:91:fd:0c:82:fc:e2:2a:
aa:29:f8:7a:d7:2e:13:dd:04:f6:e0:58:aa:a0:d7:
14:b9:2b:56:a9:96:d8:00:a9:32:15:09:c6:9b:99:
25:dd:c4:bb:a2:01:fe:e2:2a:a2:45:0f:78:27:27:
ef:2b:d6:4d:33:7f:3f:b1:5a:4d:64:ea:05:78:7d:
2f:a5:0c:25:4b:9a:ec:e8:fd:aa:26:f8:17:6f:7d:
fa:0f:ab:9c:26:3b:3e:79:00:8b:7a:86:16:4f:2a:
25:d2:49:95:02:23:f7:74:f2:05:45:7c:5b:41:6f:
33:bd:6b:2a:b5:82:cd:2c:3d:06:2f:f4:21:e1:0b:
de:fd:d6:21:2b:d5:f7:64:b2:a5:a7:3d:cb:58:b0:
d2:54:8b:95:ae:81:3e:67:cb:39:68:5b:aa:19:ef:
3d:0e:28:f2:3f:08:62:1c:d8:64:56:51:a8:bf:55:
5d:09:56:ed:14:c9:2c:94:f9:06:47:a5:11:82:bf:
60:77:9c:39:cb:8f:e2:a4:6e:2d:cd:72:ec:63:be:
e0:e6:82:0a:9e:1e:99:91:1e:02:da:0a:46:a7:eb:
be:52:87:2f:29:a2:0c:1a:ef:c6:40:f5:ad:11:97:
6d:13:2a:43:b1:3d:a5:0e:4f:25:79:f3:0d:8c:e1:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:E8:18:9B:2B:70:2B:F6:68:14:DA:63:75:08:81:D6:C0:B0:D3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sfzoGJsrcCv2aBTaY3UIgdbAsNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.140.0/24
93.115.203.0/24
Signature Algorithm: sha256WithRSAEncryption
34:59:83:a4:d2:13:34:d5:fc:65:68:d8:f2:89:0e:71:68:6e:
c4:ae:52:f8:41:a1:4b:57:69:b7:f2:95:71:7e:d4:8f:22:7f:
c6:83:93:93:fe:45:0f:91:f9:1a:5d:75:18:cc:63:dc:14:13:
92:71:87:4a:53:bb:b4:e2:e9:1d:a9:f5:6e:ce:d5:9c:1a:51:
66:d2:81:bb:41:51:c9:d8:5f:e1:d6:0e:dd:8f:34:b0:0f:6b:
51:cb:dd:87:fd:e4:1c:38:80:bf:2e:04:01:f8:ba:f0:46:b5:
f5:6d:9e:15:9f:26:f7:dd:56:f9:2c:c7:9f:2e:94:a9:f0:33:
01:41:66:be:29:70:e7:91:04:16:2c:af:8b:e5:86:1f:96:e7:
56:41:e0:df:ac:a8:7a:ba:7b:22:7a:af:e9:40:ae:2e:5f:0d:
9e:20:49:21:3e:59:4c:bc:c7:4c:8d:1d:a2:5f:d4:1f:3a:d8:
c9:64:ad:1c:20:7e:76:2b:82:c6:0e:03:2f:3e:17:83:89:bf:
db:2f:88:e0:83:7b:59:6f:ef:6f:02:87:e4:92:8b:e7:00:33:
95:55:e9:8f:f4:d7:20:5b:bc:37:2c:be:dd:8e:b5:86:4e:5e:
e6:8c:4e:a3:19:13:d4:8d:74:8c:0d:e5:94:c0:60:d1:40:bb:
95:79:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org