Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/u2bfQts53ub65RA1ohNDUcixmeA.roa
File: u2bfQts53ub65RA1ohNDUcixmeA.roa (raw, json)
Hash identifier: G0EIBIM1z1J4bbEm/JGeMFbuWJFQLBfHEiS+lx4r9Zw=
Subject key identifier: BB:66:DF:42:DB:39:DE:E6:FA:E5:10:35:A2:13:43:51:C8:B1:99:E0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01891CA1D905A38B11CAE042F407A056121A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/u2bfQts53ub65RA1ohNDUcixmeA.roa
Signing time: Mon 03 Jul 2023 16:41:56 +0000
ROA not before: Mon 03 Jul 2023 16:41:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 89.37.194.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 08:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:a1:d9:05:a3:8b:11:ca:e0:42:f4:07:a0:56:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 3 16:41:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb66df42db39dee6fae51035a2134351c8b199e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a8:b0:fb:79:2e:cb:6f:94:0b:3d:68:e9:93:
32:97:19:c5:7c:89:f1:f2:51:99:8e:b6:43:7d:30:
66:74:78:5a:cc:d4:f0:c3:55:a8:91:32:bb:cb:e1:
df:46:69:f5:57:7e:d7:59:9d:77:6b:cc:cd:c2:a2:
3e:58:1f:50:49:29:5e:77:6a:4e:5a:f9:0d:6f:1a:
83:c3:18:38:8d:6f:84:25:80:96:8f:8a:6a:5c:4e:
4a:19:56:27:19:1b:89:9e:76:38:24:6f:ef:18:dd:
0b:eb:20:88:d4:a7:72:c4:8f:45:cd:90:3b:2d:8f:
fd:6c:c3:df:d9:48:a2:f8:9c:8f:a8:45:29:ec:36:
13:e8:e6:1d:00:c8:8d:c4:a9:10:98:a5:1e:4e:e0:
3a:70:25:55:22:be:12:d0:5c:a8:79:3d:26:84:23:
df:e7:6f:4a:88:7c:a5:8a:5d:9d:42:95:04:db:54:
dd:60:b7:92:17:36:c2:26:71:bb:88:0a:67:39:97:
11:d8:f3:5d:b2:db:09:8f:9b:f1:97:62:7e:c3:23:
04:d2:21:c5:ed:bd:62:7b:a7:2c:30:0f:97:d9:05:
b0:fd:4c:86:5d:9b:0e:f6:98:17:57:7b:d1:73:d8:
04:88:3b:4a:58:0a:04:76:c6:fb:96:87:00:5e:46:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:66:DF:42:DB:39:DE:E6:FA:E5:10:35:A2:13:43:51:C8:B1:99:E0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/u2bfQts53ub65RA1ohNDUcixmeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.219.0/24
89.37.194.0/24
94.198.171.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3e:d9:e0:19:65:b3:31:6c:04:54:e9:06:f4:07:fd:a2:95:
64:5d:f4:c4:03:76:b9:93:14:11:2c:fe:9d:a2:dd:55:41:47:
66:ad:ed:f8:a5:e2:ff:9c:21:7a:24:c1:2d:66:66:63:69:4d:
cb:9d:f8:74:4f:9a:4d:e4:a6:28:46:58:b9:f7:2f:76:54:5e:
9e:9a:92:d3:1f:9a:93:25:e6:a8:84:d3:de:e3:80:21:1e:7c:
02:89:9e:36:02:c0:bb:35:08:ef:0b:2c:51:48:4a:0a:df:1e:
14:63:67:6d:a4:ee:cc:6c:0e:1a:d7:3b:9e:9c:b3:f2:9c:c5:
f9:c5:91:f6:32:04:66:04:62:50:d2:77:66:98:af:06:b7:cd:
c2:c1:de:4b:cf:93:a6:3f:c4:97:d0:72:3b:cb:74:9e:5a:ed:
24:97:21:97:ae:96:35:46:dc:fb:c4:7e:fb:4f:d1:a2:3c:6e:
d0:18:99:6f:fc:ca:94:31:ff:0f:63:1a:d0:98:2a:a9:c9:58:
fd:3a:9e:91:f4:09:cd:5c:8e:96:ec:8d:4f:a4:87:20:77:28:
34:f0:5c:d2:3c:eb:d0:df:f5:8a:4a:28:ca:42:59:98:c0:8e:
43:de:22:87:12:38:3e:17:24:a5:69:df:c8:4f:43:ec:13:65:
ec:bc:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org