Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/st5gvHDxyXLtz2R-vP6v7BCODHs.roa
File: st5gvHDxyXLtz2R-vP6v7BCODHs.roa (raw, json)
Hash identifier: Ak2YjfxU+HetcNWlmKkf+5BA8OJKdeQ2KLfiWbXKcSI=
Subject key identifier: B2:DE:60:BC:70:F1:C9:72:ED:CF:64:7E:BC:FE:AF:EC:10:8E:0C:7B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018ACB81355C11B77ED19264A35ADC56C3F4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/st5gvHDxyXLtz2R-vP6v7BCODHs.roa
Signing time: Mon 25 Sep 2023 08:42:37 +0000
ROA not before: Mon 25 Sep 2023 08:42:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64236
IP address blocks: 89.37.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 05:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:81:35:5c:11:b7:7e:d1:92:64:a3:5a:dc:56:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 25 08:42:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2de60bc70f1c972edcf647ebcfeafec108e0c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:5e:84:d6:c5:83:c1:a1:22:16:5c:fb:5c:
c0:ca:14:78:6c:ac:e3:79:aa:07:1b:54:39:f4:e9:
57:21:1d:38:bc:23:d4:b2:37:f3:7b:27:91:be:cd:
33:74:80:76:7b:9a:8b:9b:9d:25:72:cd:ad:1f:33:
3b:67:30:40:71:4a:b6:ea:56:00:b3:c1:71:45:29:
27:fb:6c:88:23:44:32:f9:73:b2:30:68:5b:38:e7:
db:86:e2:ff:78:75:45:0c:82:e2:80:57:20:7f:20:
21:11:10:71:ad:7b:5f:c7:38:0c:95:9d:c8:11:80:
e4:d6:04:d6:91:e5:20:af:f2:77:86:4b:1b:fe:07:
65:4d:86:a0:33:ce:23:1c:54:ce:a5:ca:c4:98:3a:
5f:3c:57:21:a6:ec:17:8a:64:1c:b5:ed:7a:46:de:
74:fb:a6:e0:b0:16:45:4d:65:a9:7c:c8:09:93:f3:
5b:14:aa:2f:7b:7d:a8:ce:34:58:02:80:bc:9a:ff:
80:6f:7f:a5:93:a9:8f:46:98:e3:4d:c8:52:f7:00:
2c:a7:b8:dd:35:2c:46:e3:b0:bc:41:93:38:cf:68:
2d:01:b6:f7:a2:9f:66:da:a8:0d:ba:5e:22:77:b2:
ad:4a:f6:e4:c9:a5:95:41:15:48:68:be:4d:28:33:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:60:BC:70:F1:C9:72:ED:CF:64:7E:BC:FE:AF:EC:10:8E:0C:7B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/st5gvHDxyXLtz2R-vP6v7BCODHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.195.0/24
Signature Algorithm: sha256WithRSAEncryption
93:db:0c:9e:a0:44:6f:11:94:cd:97:f7:4e:e1:9d:8f:5b:a6:
e0:7b:1c:af:cb:4d:23:ad:df:43:e1:bc:34:c3:ad:30:54:66:
1c:1f:b3:1c:bf:db:db:ff:32:b8:6b:fb:f2:11:59:6c:aa:76:
34:4e:65:59:92:9e:cb:96:d1:c5:84:ce:fe:bf:c0:2a:3c:cb:
0f:54:61:e7:ca:d0:4e:3e:f0:b1:8f:80:3e:9b:55:29:dd:a0:
f3:68:07:08:9d:f1:04:38:fa:d2:9b:b9:8e:00:ea:c9:ea:d7:
77:9b:cb:9d:03:26:db:9b:0a:94:96:bc:f8:57:96:aa:e4:64:
1d:55:d0:e4:7c:2f:fd:42:1c:66:62:7e:f8:71:c5:79:d5:17:
d6:f2:da:9b:76:d4:77:8e:57:2d:95:5d:0c:16:f4:1d:3c:b7:
90:d5:98:6d:7f:15:cf:0e:f9:b2:9b:ae:fa:3c:7a:2e:35:15:
c7:97:43:f7:a3:38:4d:d0:06:89:b5:e6:60:5f:c6:e4:77:ad:
10:48:f9:26:8d:af:81:42:51:56:45:13:39:1e:6a:2b:66:b2:
06:84:8d:ac:4f:dc:d2:cb:0b:c4:33:5b:64:c2:43:ef:81:13:
c2:bb:bd:13:e3:59:16:b2:6b:86:c1:de:05:9d:45:f1:38:fd:
ae:96:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org