Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yGBHN6pEnuk6-iubUMsM-s2b8rU.roa
File: yGBHN6pEnuk6-iubUMsM-s2b8rU.roa (raw, json)
Hash identifier: tx9fA/GOzynbegvPS+3dEVnnX/CmEJRC5wavDlH2m4k=
Subject key identifier: C8:60:47:37:AA:44:9E:E9:3A:FA:2B:9B:50:CB:0C:FA:CD:9B:F2:B5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01886C04F8C805D3A49B3ED2591D7A131682
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yGBHN6pEnuk6-iubUMsM-s2b8rU.roa
Signing time: Tue 30 May 2023 09:37:24 +0000
ROA not before: Tue 30 May 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.40.70.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 18:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:04:f8:c8:05:d3:a4:9b:3e:d2:59:1d:7a:13:16:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 30 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8604737aa449ee93afa2b9b50cb0cfacd9bf2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:3f:a9:ec:91:ed:4d:69:b6:5c:b7:ef:1f:
ac:ba:0b:5e:e3:a3:55:63:71:f1:c0:7a:15:f6:3f:
bd:c6:cc:b7:91:8a:ec:6b:f1:cd:1d:5e:01:53:1b:
bb:12:71:3d:c9:83:ec:6c:0b:a5:ba:ff:e8:08:8b:
11:27:a5:4b:9d:cd:9d:52:20:4c:e4:9d:90:6f:95:
62:e4:e5:49:fa:5a:23:59:bb:3e:c8:b4:6c:9e:74:
0b:78:21:98:a0:3b:e8:c4:a6:13:f7:90:54:8e:75:
dc:21:f3:55:71:35:2a:5c:29:2f:b0:3d:81:96:7a:
14:1e:80:37:c3:51:62:f8:0b:e0:f4:18:82:23:24:
df:33:7d:ff:95:14:42:c5:81:c0:3a:3d:01:73:ce:
e9:ab:de:8c:a9:3b:6c:1a:4b:b3:a1:86:2f:f2:65:
a6:f9:b6:a3:85:4a:c5:d3:1e:af:e1:40:e0:df:26:
5f:09:86:19:2f:da:d8:26:75:10:7d:c5:1c:11:d8:
d5:18:2a:8e:e1:64:48:52:5d:4c:fd:40:e3:86:c8:
7c:aa:13:8c:50:6f:0d:1d:0f:c4:7d:36:c0:22:9b:
9c:85:c7:be:fb:f8:b1:ad:25:17:70:57:bf:af:31:
a0:49:de:92:71:11:a9:d5:84:c5:63:5a:10:d7:07:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:60:47:37:AA:44:9E:E9:3A:FA:2B:9B:50:CB:0C:FA:CD:9B:F2:B5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yGBHN6pEnuk6-iubUMsM-s2b8rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
89.40.70.0/24
188.213.0.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
48:72:99:cf:e7:90:55:48:bb:68:0c:e4:6d:0b:f7:dd:f5:7f:
8e:1f:be:e7:a4:9b:47:b1:96:56:a3:10:e0:f8:3e:5a:a6:13:
82:fb:d4:48:64:05:c0:84:bd:88:88:b2:d8:76:94:fa:04:7c:
14:1c:45:c9:f8:cb:8e:f7:05:c9:e4:ab:30:a3:91:c5:e6:d1:
b6:fd:3a:a3:65:64:39:4b:a3:32:99:cd:86:fc:b6:a8:9a:3e:
a1:16:f3:07:b0:b1:74:cd:f0:86:0a:9c:01:c8:3d:0c:f5:26:
4e:07:b8:0c:01:88:19:60:e3:8f:f1:f2:88:cf:a4:90:1a:3b:
ce:29:6e:89:d7:53:7a:82:f9:32:cc:ee:43:21:51:df:dc:46:
0b:1b:08:b6:10:3c:e8:37:8f:a9:27:f4:b3:eb:7b:85:24:0d:
d7:5a:17:10:a9:6f:f4:0a:13:8f:6d:a3:00:43:10:71:0e:95:
08:e0:95:8f:5f:6d:99:68:4a:bf:a9:a1:ab:b8:d7:4d:0c:0f:
ac:25:46:ff:6c:8e:7a:28:a7:3d:14:3a:e0:c6:9e:04:77:8d:
0b:7d:4b:7b:6e:4b:83:5b:f1:36:6e:3f:e5:78:78:75:88:a7:
c8:7d:76:f5:ba:98:d7:8f:6e:85:01:4b:f9:56:a7:c0:36:f6:
9d:3e:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:15 2024 by rpki-client on console-ams.rpki-client.org