Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/v99crSHjtaCzRXnh_hicHwiLROc.roa
File: v99crSHjtaCzRXnh_hicHwiLROc.roa (raw, json)
Hash identifier: LVFI6TxPH2523gyYfK4BO8raYQSeD9tZwC8sworr1Iw=
Subject key identifier: BF:DF:5C:AD:21:E3:B5:A0:B3:45:79:E1:FE:18:9C:1F:08:8B:44:E7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D0DC48B29F4261E81772275BA25B5C301
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/v99crSHjtaCzRXnh_hicHwiLROc.roa
Signing time: Mon 15 Jan 2024 15:36:40 +0000
ROA not before: Mon 15 Jan 2024 15:36:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46573
IP address blocks: 86.107.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 13:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:c4:8b:29:f4:26:1e:81:77:22:75:ba:25:b5:c3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 15 15:36:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfdf5cad21e3b5a0b34579e1fe189c1f088b44e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:18:13:f6:93:f5:ab:4b:5a:ed:80:0e:a9:81:
e3:2e:b1:05:67:2a:e7:01:5f:98:06:53:32:ef:57:
22:bc:5e:9b:26:4a:f2:0a:d9:f5:f4:7c:b6:6e:bc:
cd:28:18:ad:4f:22:ff:59:79:93:5a:c6:47:ff:87:
cc:e3:c0:70:25:61:8e:4e:41:8a:c3:7d:fb:ba:78:
db:13:be:50:90:f1:e7:b4:f7:b4:87:98:8f:cf:57:
1c:42:fc:ef:ef:a7:02:2c:bb:e3:2d:c2:df:38:9c:
31:f4:6a:1b:8f:4f:aa:f1:52:72:e7:ca:53:4d:4d:
ea:5f:bd:58:f6:dc:d2:3a:06:0a:a9:56:30:98:44:
6b:34:91:8d:0b:4c:f4:d8:99:1f:29:b3:05:43:67:
0d:19:0b:15:3a:d0:58:9a:f0:65:5b:b3:c8:8f:d7:
15:aa:75:63:84:2e:d1:ed:b7:11:c2:a4:c2:a8:b7:
d6:72:ac:b1:d5:52:4e:da:1b:cf:9d:71:82:23:1a:
64:23:44:e5:91:ed:b7:8a:45:f3:d2:51:c8:76:aa:
a7:fb:3c:8d:c4:70:65:7e:a7:89:7f:52:b6:ac:70:
57:88:8f:a7:78:6e:bd:43:74:83:33:4e:0e:6e:c2:
0c:4b:c4:5a:28:af:49:f4:6e:81:86:21:94:dd:f9:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:5C:AD:21:E3:B5:A0:B3:45:79:E1:FE:18:9C:1F:08:8B:44:E7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/v99crSHjtaCzRXnh_hicHwiLROc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bd:4f:f1:27:fe:ce:ba:e2:b5:30:61:bd:d9:72:6b:95:9c:
98:17:e0:b1:86:ac:a5:d6:27:c9:f1:82:80:58:bc:34:45:99:
ed:f3:9d:09:70:a5:0d:4b:df:5f:62:f2:ed:50:a3:5e:e2:f1:
f9:bf:f1:fc:87:4e:ec:bb:54:b2:9b:6f:95:71:74:73:54:85:
0f:68:2b:b2:f6:fc:ce:2a:be:ec:e8:32:66:c2:99:5b:dc:73:
15:16:c4:3e:42:20:03:3b:12:3b:64:b4:d5:46:40:e0:a0:be:
64:58:88:f6:af:2f:e3:67:bd:9a:76:8a:dd:d9:5a:64:e9:2d:
0b:8a:70:6c:5b:78:43:42:13:88:7a:7b:6c:65:1b:a7:d6:e5:
f8:4e:09:6a:69:1d:1f:51:74:e9:50:ed:68:4a:8b:bd:3b:e9:
bc:f7:3b:61:17:d0:7c:3c:f0:9a:32:9b:7e:94:76:23:56:42:
00:36:f6:c7:f7:0b:07:c8:a3:80:de:0e:82:67:00:2e:3f:3e:
34:bd:f5:48:77:28:83:ad:b2:19:f3:6f:91:38:e5:4e:e5:63:
4c:da:b8:e0:e2:0a:d5:80:ea:00:66:3d:7d:d8:2d:1b:ce:1a:
2c:d3:24:67:f4:46:0f:b6:fc:68:2f:49:2b:94:c4:4a:2c:d6:
51:7d:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org