Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tQRq_IxkSmw_keFsZ4Nvfql0mM4.roa
File: tQRq_IxkSmw_keFsZ4Nvfql0mM4.roa (raw, json)
Hash identifier: 7jZ/sEgBsPHu0pPMG2SyFDKkg47FT4+AoUu23R1r1BU=
Subject key identifier: B5:04:6A:FC:8C:64:4A:6C:3F:91:E1:6C:67:83:6F:7E:A9:74:98:CE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01933D7D1D905FCBEFA5E003C3D381F82550
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tQRq_IxkSmw_keFsZ4Nvfql0mM4.roa
Signing time: Mon 18 Nov 2024 04:17:09 +0000
ROA not before: Mon 18 Nov 2024 04:17:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212042
IP address blocks: 89.34.219.0/24 maxlen: 24
89.35.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 04:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3d:7d:1d:90:5f:cb:ef:a5:e0:03:c3:d3:81:f8:25:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 18 04:17:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5046afc8c644a6c3f91e16c67836f7ea97498ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:31:28:bf:5f:6a:6f:c0:dd:f9:6c:e4:3a:8c:
27:67:70:84:e0:7f:40:c2:a8:07:31:ee:9b:f7:b6:
1f:3a:a0:2a:01:d7:74:13:96:0a:4b:e5:d0:c2:79:
c9:ec:4b:99:8e:2b:6c:10:44:8f:e2:ed:53:69:9a:
fd:1d:20:69:24:9d:24:58:ca:f2:2d:d3:a8:f6:1f:
61:be:66:f3:76:e3:d7:32:74:01:f8:90:23:3e:e2:
b7:45:99:9c:56:3a:e1:14:86:83:ea:5e:b5:89:58:
f2:d2:1c:2f:5b:74:09:04:c2:ed:48:4a:1e:b0:e0:
6d:13:50:22:d6:31:96:4a:cd:43:6c:03:26:a1:9a:
af:e0:bf:98:01:c2:1b:92:26:3c:db:d1:3e:66:2c:
e8:ee:56:02:b0:74:7b:ef:f5:57:d3:d3:fc:73:12:
a6:d0:a1:8f:79:f1:d5:07:28:c0:6a:bd:d5:9d:70:
54:9e:e6:7e:c5:4f:f1:f7:02:01:86:e8:45:39:e9:
ca:97:2f:64:42:91:df:09:4d:7f:27:7e:88:91:a6:
67:2c:54:5d:23:8e:cb:75:94:7a:28:6b:97:64:99:
66:4e:78:85:09:ad:ae:a6:b0:42:c7:a3:c3:7a:22:
21:62:5a:f1:a9:c7:c8:2b:c9:69:47:e9:33:67:44:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:04:6A:FC:8C:64:4A:6C:3F:91:E1:6C:67:83:6F:7E:A9:74:98:CE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tQRq_IxkSmw_keFsZ4Nvfql0mM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.219.0/24
89.35.130.0/24
Signature Algorithm: sha256WithRSAEncryption
56:72:49:77:aa:ef:31:59:3f:94:dd:92:de:5a:12:c7:e8:b5:
c3:09:89:78:cd:ec:d5:a7:6a:8b:47:ae:f4:ce:3c:b5:fb:f6:
80:81:c9:87:53:ea:17:73:51:19:04:88:7a:7e:71:5c:e6:7a:
fa:70:4c:bf:fd:ce:6a:9e:36:db:f4:e4:f8:6c:db:72:4d:68:
34:b5:85:fe:44:f5:c5:52:e1:57:67:5d:2e:02:28:63:96:5b:
d7:39:50:5a:b7:39:6d:ba:c2:2d:20:63:3b:d9:11:0d:0a:72:
61:33:02:76:62:0b:bb:55:77:f6:8e:e9:2b:ce:cf:92:6d:3f:
5a:5a:15:c4:da:7d:48:49:02:dc:23:20:f9:a3:f8:fa:d3:4f:
65:7d:fc:8b:99:ee:7e:5f:d1:1c:97:5e:1d:9f:66:22:0e:36:
f1:af:f3:de:da:5a:d8:b2:4d:37:e3:7d:b8:c6:6c:dc:c7:bf:
9c:2e:a2:d9:18:b8:a3:e7:50:aa:75:9c:e2:ae:44:02:10:a8:
15:c3:b1:5c:71:cb:4d:63:a2:e5:f7:e1:1f:6a:85:7d:47:de:
31:5a:80:d8:64:a6:c7:fa:59:15:13:42:fa:98:93:88:72:b6:
83:89:26:5c:cf:ad:62:a2:20:19:8e:6a:b6:b5:7f:92:32:3f:
d3:59:69:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 07:12:12 2024 by rpki-client on console-ams.rpki-client.org