Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uUyIcnIkuzdYfSFDu8rmRNpm54Y.roa
File: uUyIcnIkuzdYfSFDu8rmRNpm54Y.roa (raw, json)
Hash identifier: un9GHYyuN/tRfsl8pqDckvqJNb4DUwV2OkFu3uu9Ynk=
Subject key identifier: B9:4C:88:72:72:24:BB:37:58:7D:21:43:BB:CA:E6:44:DA:66:E7:86
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01872728785B1FCB162FBFFDE9BB3BDD5409
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uUyIcnIkuzdYfSFDu8rmRNpm54Y.roa
Signing time: Tue 28 Mar 2023 07:39:36 +0000
ROA not before: Tue 28 Mar 2023 07:39:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 188.212.121.0/24 maxlen: 24
92.114.93.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:28:78:5b:1f:cb:16:2f:bf:fd:e9:bb:3b:dd:54:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 28 07:39:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b94c88727224bb37587d2143bbcae644da66e786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:de:11:e0:a0:12:1c:b4:f6:85:21:fb:84:
2d:19:f6:8e:37:6d:e8:c7:c7:7a:d9:1d:aa:5c:2a:
ec:b0:54:ec:f5:1d:c8:26:2e:cd:6a:8f:ec:46:12:
30:2d:b3:37:62:3b:61:7b:1e:ee:2c:62:0b:ba:fd:
41:aa:3e:0d:4c:74:1d:86:bf:15:57:7b:92:5e:69:
f8:b8:7a:b8:9c:7a:e3:c6:b0:0d:80:75:7f:f9:ae:
f0:3a:8b:c2:78:f4:8e:bf:05:34:28:61:e5:bb:72:
f9:27:85:f0:ec:de:8b:50:e7:3d:9a:7e:99:08:af:
64:65:07:90:77:cd:2d:29:d6:09:45:b8:8d:53:06:
88:2f:aa:11:3a:37:0d:ac:2c:c8:65:46:72:04:80:
77:0c:6c:c6:ce:b1:b2:b3:f4:95:d7:92:c6:cb:cd:
5e:88:da:82:61:92:99:e4:98:9f:8a:c0:4b:35:69:
57:23:af:bf:46:92:86:2a:c4:f9:c1:6d:da:c5:58:
26:32:76:a6:4f:6e:f3:8a:17:ae:d7:85:a4:78:23:
01:9a:4c:14:ff:6c:49:cd:53:a5:d7:24:8d:b9:cf:
64:88:6c:94:d9:5f:da:a6:dd:fa:77:32:a1:ca:43:
e7:21:9f:b9:9c:d2:4b:b6:3f:60:81:fe:3c:03:3f:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4C:88:72:72:24:BB:37:58:7D:21:43:BB:CA:E6:44:DA:66:E7:86
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uUyIcnIkuzdYfSFDu8rmRNpm54Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.36.0/24
92.114.93.0/24
128.0.41.0/24
176.223.66.0/24
188.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3e:38:9d:df:f3:45:7e:b5:58:e2:56:4a:eb:d1:d5:36:11:
57:67:c1:a2:29:b9:1b:e8:95:04:9b:ec:14:c7:92:85:bf:85:
dc:2a:f5:4e:b2:6e:53:ba:6a:86:0d:c2:78:3d:11:57:64:28:
60:e7:63:08:d4:2a:41:06:dc:34:e2:16:fa:4d:22:a2:b7:d4:
7d:0f:67:a8:23:83:96:62:29:91:b3:9d:8a:80:82:db:74:70:
6f:5a:55:5e:7e:78:f1:60:8a:93:4f:3d:83:3b:90:d5:91:df:
a3:c5:ac:e4:21:d9:15:b9:47:41:7e:50:16:1a:88:ed:e9:e0:
e3:74:42:d6:df:21:e9:2c:e3:dc:31:d7:a3:68:5d:09:d2:23:
8b:6b:55:7b:1c:4f:7a:8d:57:b5:41:d9:80:6c:ab:01:3e:74:
de:11:b4:9e:6b:88:b4:8c:aa:cc:f9:94:3e:85:ad:dc:57:6f:
f0:9e:c5:92:45:40:be:79:f2:60:54:35:0b:c1:2f:1c:42:fc:
11:10:b6:4d:99:3e:96:e8:0d:74:62:9f:f3:fb:b1:4e:a3:51:
8c:51:da:04:d6:34:be:0b:ee:74:f1:f7:de:ab:a0:95:69:29:
9e:a6:a7:fa:20:63:f9:ff:ea:17:81:ea:ce:6a:8f:9f:08:bb:
c0:af:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org