Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t-oztgfd99115lci8IP_a3HPb0U.roa
File: t-oztgfd99115lci8IP_a3HPb0U.roa (raw, json)
Hash identifier: 2xSf4Jzoq6aiVdODU0k707FgSfzeliHpx77IPEIJry8=
Subject key identifier: B7:EA:33:B6:07:DD:F7:DD:75:E6:57:22:F0:83:FF:6B:71:CF:6F:45
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A096B5BE67BEB6B3CA5AAF0A95F032D49
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t-oztgfd99115lci8IP_a3HPb0U.roa
Signing time: Fri 18 Aug 2023 16:12:25 +0000
ROA not before: Fri 18 Aug 2023 16:12:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 89.37.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:6b:5b:e6:7b:eb:6b:3c:a5:aa:f0:a9:5f:03:2d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 18 16:12:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ea33b607ddf7dd75e65722f083ff6b71cf6f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:61:40:dc:33:4c:25:81:43:5e:86:ed:aa:
51:43:2a:0e:57:48:80:56:4c:48:65:8b:32:05:76:
da:35:67:1c:7a:d3:96:ab:eb:ea:f7:bb:0a:d5:e5:
7b:82:b1:ac:6b:86:a6:c1:86:c5:b3:67:1d:ba:d3:
50:fa:31:2d:05:25:e8:c6:e5:8b:ec:4f:4c:df:0c:
ec:11:51:62:53:da:70:53:d1:bc:33:45:f9:de:a3:
c8:6a:cd:15:70:c7:6b:b0:5a:f8:a5:d6:e2:de:c3:
57:6a:54:d2:35:ea:fb:74:b7:25:f2:5c:de:3f:d5:
92:0c:1b:19:41:e2:cc:e8:4b:71:a9:84:c5:d5:f1:
13:36:98:21:86:84:5f:31:2f:76:6e:66:d0:ac:10:
1f:ab:4e:8e:44:64:5e:c6:ca:da:68:aa:c3:b3:4c:
1a:af:1b:16:f0:a4:d1:ee:d5:74:bf:2f:ff:d3:89:
c2:76:e0:68:a3:eb:31:7b:6f:c1:00:2d:15:3e:4b:
8c:e8:5e:df:5e:7a:ea:a8:60:27:ca:ec:6b:7a:94:
b3:46:70:56:78:e3:82:fc:b9:b3:7b:b8:ca:9a:3d:
3d:52:49:01:72:c0:60:64:31:54:8e:99:4e:7a:b8:
f9:b2:9d:7c:ee:ed:12:de:b4:34:f4:dd:85:b2:30:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EA:33:B6:07:DD:F7:DD:75:E6:57:22:F0:83:FF:6B:71:CF:6F:45
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t-oztgfd99115lci8IP_a3HPb0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.194.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c9:d9:23:73:d4:a1:03:5b:aa:ad:0f:03:35:cd:c9:63:04:
8d:68:7d:c1:1a:9f:8e:e2:04:54:76:71:17:57:c0:e7:cb:50:
4a:a6:e0:80:dd:0d:54:b9:4a:cf:98:31:a0:6c:77:91:78:08:
27:ee:ea:4e:79:54:01:eb:95:c2:9a:06:60:f3:fa:00:ac:33:
e0:b0:28:88:4e:53:38:48:68:e8:a2:ab:f2:bd:35:47:98:71:
1b:9d:a3:0c:ef:b0:2a:ea:ef:48:af:9b:c1:3d:0a:fe:48:a0:
ed:96:e4:60:9a:cc:da:dd:65:76:d2:27:8e:f4:d7:08:47:e3:
b1:f4:11:28:18:d4:24:55:b5:9e:a0:bb:3d:67:66:44:84:92:
45:bf:23:4d:32:b3:e6:a8:ac:12:bb:99:1c:5d:22:e2:6f:8c:
96:57:b3:bd:d7:93:ee:02:69:96:7e:c4:de:00:c9:fb:0b:09:
7f:b4:bc:01:18:1d:59:77:47:14:b3:00:8a:ec:e6:b9:55:0f:
a9:bd:6b:a0:4f:a2:ff:86:35:dc:44:66:5c:ff:3d:9f:ab:49:
ef:d8:46:d5:a3:a0:32:76:f6:c0:81:a8:8c:50:ad:68:8c:5b:
5c:61:20:70:83:55:73:8b:6a:18:ca:d8:07:c4:c0:0f:a4:32:
8a:bb:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org