Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/x-OP3yNQMjhKmiPOLbLLvwaQH0U.roa
File: x-OP3yNQMjhKmiPOLbLLvwaQH0U.roa (raw, json)
Hash identifier: DFBtMGNzEkRCKTjKsTRZXl211EuDUH1FShhPt2E/cBE=
Subject key identifier: C7:E3:8F:DF:23:50:32:38:4A:9A:23:CE:2D:B2:CB:BF:06:90:1F:45
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01877F847FC2AE1C842B2FAC61089D43D1C7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/x-OP3yNQMjhKmiPOLbLLvwaQH0U.roa
Signing time: Fri 14 Apr 2023 11:26:42 +0000
ROA not before: Fri 14 Apr 2023 11:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 89.35.73.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 May 2023 09:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:84:7f:c2:ae:1c:84:2b:2f:ac:61:08:9d:43:d1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 14 11:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7e38fdf235032384a9a23ce2db2cbbf06901f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:44:de:ba:10:e5:44:0d:c6:82:f1:51:6a:
86:f0:34:bb:9b:f2:e4:4e:f8:ca:ac:1b:d3:03:6c:
5f:e8:60:0c:8d:7e:4c:2a:55:49:f0:86:84:ff:a9:
d6:b5:32:12:77:60:05:61:98:07:f5:3f:09:5d:ea:
b4:ab:2b:30:48:e6:ce:c3:a0:8f:75:ca:33:f0:d7:
80:07:bc:2e:2c:ff:88:3a:e0:6b:25:3c:5c:7f:ba:
42:f2:cc:e6:08:4f:62:25:43:92:e2:ae:03:aa:80:
c3:a0:0d:26:78:05:25:1b:a0:69:af:58:31:82:a8:
e5:8b:23:bc:f5:37:d0:4b:27:3d:00:80:24:1a:06:
1d:e7:f2:fd:a5:ca:fa:9d:87:78:8c:5a:53:d0:18:
9e:d9:a6:0d:f8:38:6b:e5:93:c3:14:04:10:5c:3d:
d3:4f:10:fa:15:9f:65:ae:19:7a:ec:4f:95:b9:63:
02:27:86:fc:3a:3f:f9:45:1c:9e:9a:c6:a9:83:15:
31:88:c8:23:ed:7c:2d:2e:59:42:c7:f8:d3:e3:18:
5d:69:fe:01:70:62:c2:26:a2:e8:99:31:ea:4d:d1:
d4:25:a5:f0:7a:56:36:7e:e2:02:cf:6f:c5:d7:84:
05:21:5c:49:be:01:a5:80:03:2c:dc:ae:e5:ae:bd:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:8F:DF:23:50:32:38:4A:9A:23:CE:2D:B2:CB:BF:06:90:1F:45
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/x-OP3yNQMjhKmiPOLbLLvwaQH0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.73.0/24
93.90.75.0/24
Signature Algorithm: sha256WithRSAEncryption
95:48:58:8e:e0:ec:9e:4d:61:a8:87:4a:4f:33:78:b9:ae:49:
42:24:94:29:b8:d2:57:e0:85:5f:10:04:a6:8b:22:2f:46:30:
b9:36:b5:b1:ed:a2:df:b7:ef:45:8c:ff:a7:df:a2:16:5e:ec:
f0:a1:f4:f6:e6:ba:d7:85:57:62:3a:69:19:41:ad:37:41:11:
ee:73:eb:7f:e8:06:7a:f9:fd:50:ec:81:37:d3:dc:ad:26:19:
1b:02:41:b2:7d:3f:a5:ad:8b:8f:ef:e2:7f:af:b6:dd:69:86:
02:5a:bb:3a:22:d1:d6:b8:85:7f:30:41:87:f2:f6:03:37:28:
b8:7d:b5:31:53:38:e5:22:53:0f:f2:78:63:14:14:48:05:12:
53:49:aa:09:f8:7b:c3:74:80:97:3f:ad:85:7a:43:32:a9:2f:
4b:b1:5a:53:f9:88:4d:0b:55:f6:d1:e0:d3:2b:54:5a:ab:12:
ad:f7:c2:09:3d:55:c7:34:8c:15:24:7c:83:0e:6a:fc:b4:e1:
b4:5b:4d:23:1f:0f:ef:00:21:56:d7:eb:eb:73:57:38:e5:61:
a2:d9:c2:e1:ae:e1:04:e6:f2:26:72:1c:10:b2:b6:00:0a:d2:
aa:8c:fa:6c:f0:24:52:1b:db:6d:3f:c2:db:05:5d:33:5d:dc:
ee:65:9e:b8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYd/hH/CrhyEKy+sYQidQ9HHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNDE0MTEyNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2UzOGZkZjIzNTAzMjM4NGE5YTIzY2UyZGIyY2JiZjA2OTAxZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5E3roQ5UQNxoLxUWqG8DS7m/Lk
TvjKrBvTA2xf6GAMjX5MKlVJ8IaE/6nWtTISd2AFYZgH9T8JXeq0qyswSObOw6CP
dcoz8NeAB7wuLP+IOuBrJTxcf7pC8szmCE9iJUOS4q4DqoDDoA0meAUlG6Bpr1gx
gqjliyO89TfQSyc9AIAkGgYd5/L9pcr6nYd4jFpT0Bie2aYN+Dhr5ZPDFAQQXD3T
TxD6FZ9lrhl67E+VuWMCJ4b8Oj/5RRyemsapgxUxiMgj7XwtLllCx/jT4xhdaf4B
cGLCJqLomTHqTdHUJaXwelY2fuICz2/F14QFIVxJvgGlgAMs3K7lrr0VIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMfjj98jUDI4Spojzi2yy78GkB9FMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEveC1PUDN5TlFNamhLbWlQT0xiTEx2d2FRSDBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSNJAwQA
XVpLMA0GCSqGSIb3DQEBCwUAA4IBAQCVSFiO4OyeTWGoh0pPM3i5rklCJJQpuNJX
4IVfEASmiyIvRjC5NrWx7aLft+9FjP+n36IWXuzwofT25rrXhVdiOmkZQa03QRHu
c+t/6AZ6+f1Q7IE309ytJhkbAkGyfT+lrYuP7+J/r7bdaYYCWrs6ItHWuIV/MEGH
8vYDNyi4fbUxUzjlIlMP8nhjFBRIBRJTSaoJ+HvDdICXP62FekMyqS9LsVpT+YhN
C1X20eDTK1RaqxKt98IJPVXHNIwVJHyDDmr8tOG0W00jHw/vACFW1+vrc1c45WGi
2cLhruEE5vImchwQsrYACtKqjPps8CRSG9ttP8LbBV0zXdzuZZ64
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org