Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/v-sfV1ef4rpGffNa88U7lXSNJ0s.roa
File: v-sfV1ef4rpGffNa88U7lXSNJ0s.roa (raw, json)
Hash identifier: SOru2mcPcC9ieyyVh1C92N7La07r5tMl/MGbhGUg2Pc=
Subject key identifier: BF:EB:1F:57:57:9F:E2:BA:46:7D:F3:5A:F3:C5:3B:95:74:8D:27:4B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189DA74400BDB302D1634D4A96CA795053F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/v-sfV1ef4rpGffNa88U7lXSNJ0s.roa
Signing time: Wed 09 Aug 2023 13:19:58 +0000
ROA not before: Wed 09 Aug 2023 13:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 89.34.219.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 11:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:74:40:0b:db:30:2d:16:34:d4:a9:6c:a7:95:05:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 9 13:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfeb1f57579fe2ba467df35af3c53b95748d274b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:49:7b:5c:9c:6a:d6:cb:88:38:03:5a:01:
b3:dd:7b:3c:9f:ba:30:22:b9:80:c4:66:d5:bb:1f:
62:d5:8f:22:f4:b9:86:6a:07:17:4c:b6:d5:c7:22:
0c:d2:81:45:0a:8e:6b:c6:38:7d:3e:1a:d0:53:17:
2c:07:c0:e3:29:4d:a2:75:78:f6:15:c8:0e:a0:67:
50:ed:d0:d5:e0:85:cf:26:df:e6:67:60:6c:99:95:
c2:0f:b7:34:9a:c5:d1:b0:ea:c6:59:d1:0c:3f:b0:
fc:0f:2a:1f:32:f3:54:b2:6d:8c:08:b5:dc:24:3c:
ff:f6:89:c0:62:2e:f0:60:db:50:6f:d2:19:ba:cb:
65:be:b5:0a:7d:48:49:db:50:a9:86:52:ca:18:b2:
06:e7:06:82:34:5b:61:4f:00:35:90:18:bc:f0:47:
1f:ef:ce:d5:38:cc:34:1b:fc:89:d5:ec:8f:37:b2:
02:cf:26:e2:ab:cc:cd:44:0b:dd:76:1c:98:41:a7:
d0:23:10:d9:ec:d0:de:88:a9:13:1d:5f:ba:3e:1c:
6a:fd:59:97:a2:5b:85:bb:e4:82:98:65:11:8a:ff:
df:a8:cf:79:f7:e3:5a:64:9a:ff:7f:1b:a3:b3:80:
e7:62:7c:01:bd:ae:c8:e2:7e:29:e5:87:9e:6b:c7:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EB:1F:57:57:9F:E2:BA:46:7D:F3:5A:F3:C5:3B:95:74:8D:27:4B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/v-sfV1ef4rpGffNa88U7lXSNJ0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.219.0/24
89.47.36.0/24
89.47.55.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1a:8e:61:f8:e4:0c:23:82:54:89:d0:a2:36:d8:69:1c:3b:
4f:27:fa:0d:40:5b:82:06:6d:6a:e8:ed:a5:7d:41:cf:22:cf:
db:aa:96:b1:56:4c:7a:e9:fe:be:ee:45:f6:a4:a0:8d:72:19:
13:f8:a8:3c:ab:76:d1:25:cf:08:7d:0e:54:b4:70:a5:7e:71:
0d:c3:42:2e:b1:9b:e5:cf:6d:91:27:bb:78:c0:e8:9e:48:aa:
ef:5c:64:e1:89:cd:24:2f:46:1d:a4:e2:18:3d:f2:ab:3e:7f:
22:60:24:79:0c:bb:70:ad:5b:07:4a:f7:e3:9a:b4:ca:4f:46:
b7:9b:76:67:1b:45:5a:34:65:88:8c:66:34:1b:15:9e:05:43:
3c:41:63:53:12:bf:83:a5:9c:6e:37:33:97:26:5f:50:37:aa:
2b:23:59:3c:9d:d5:74:2f:55:0b:72:f1:d7:46:0a:f7:e7:24:
1e:6e:a3:e0:88:75:ab:30:1d:87:98:f1:49:84:7f:f9:e7:74:
ef:9a:5c:3e:10:05:b0:bc:0b:eb:62:97:4a:66:12:3e:45:41:
3a:c3:fa:0e:3a:ea:4f:7a:bd:32:df:be:ae:76:4b:4f:52:2b:
ee:4c:28:5e:04:3e:c2:44:43:a7:71:4c:ee:ff:21:f0:58:56:
bd:db:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org