Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/118SnazoeJZRY3r54pSrm0CZI7M.roa
File: 118SnazoeJZRY3r54pSrm0CZI7M.roa (raw, json)
Hash identifier: scVdJTHhxmDbc9AOOvTT4+IIxLkOn7QC5ehe68w+Fvg=
Subject key identifier: D7:5F:12:9D:AC:E8:78:96:51:63:7A:F9:E2:94:AB:9B:40:99:23:B3
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018D633F1A5A708B514BBA4FDE4A453C7E9A
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/118SnazoeJZRY3r54pSrm0CZI7M.roa
Signing time: Thu 01 Feb 2024 05:58:16 +0000
ROA not before: Thu 01 Feb 2024 05:58:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 89.46.128.0/22 maxlen: 24
89.46.232.0/21 maxlen: 24
93.115.9.0/24 maxlen: 24
94.176.97.0/24 maxlen: 24
185.18.224.0/23 maxlen: 24
188.215.40.0/22 maxlen: 24
188.241.220.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 12:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:3f:1a:5a:70:8b:51:4b:ba:4f:de:4a:45:3c:7e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 1 05:58:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d75f129dace8789651637af9e294ab9b409923b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:c4:a9:b6:92:70:e2:d1:30:9f:d3:d7:31:
55:13:9f:3a:f1:e4:66:00:5a:0a:5b:c2:08:b2:da:
79:f9:4e:ca:89:52:55:64:b5:f7:fa:48:87:86:43:
fa:38:1c:b0:26:a4:84:cb:b8:44:15:e2:ba:21:dc:
73:68:ac:32:b3:85:2f:fd:49:ea:44:3d:fc:b3:b4:
f6:b1:8e:a3:c7:ab:b6:38:e0:ee:d9:2a:3c:5b:7c:
25:3c:b6:73:20:9f:90:09:1a:d9:0b:e0:b4:14:d0:
b4:7f:22:df:79:4c:47:40:fa:1a:ee:ec:98:22:6e:
42:bf:50:f7:f2:02:fb:03:88:8e:5f:66:fb:1e:4d:
5e:35:3f:7f:b0:c5:1c:42:77:07:72:5d:38:14:f4:
5b:0b:33:2b:53:f0:06:bf:56:0d:e3:06:2a:62:a0:
4c:92:4b:c5:a0:9b:aa:f4:44:6c:2f:b8:e4:56:96:
47:cc:90:ca:70:29:9e:ca:5a:2b:68:86:37:4f:15:
17:4e:80:21:ce:9d:a5:2e:66:85:20:19:66:15:00:
a3:60:9a:40:13:a7:03:c0:51:00:79:62:71:e8:57:
2b:2f:a5:cd:13:54:f9:bf:34:54:cc:7b:ee:34:ef:
8a:c5:b1:97:7b:89:71:b0:72:df:2f:f8:98:93:83:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:12:9D:AC:E8:78:96:51:63:7A:F9:E2:94:AB:9B:40:99:23:B3
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/118SnazoeJZRY3r54pSrm0CZI7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.128.0/22
89.46.232.0/21
93.115.9.0/24
94.176.97.0/24
185.18.224.0/23
188.215.40.0/22
188.241.220.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:80:4e:36:d9:fa:f2:52:46:25:67:33:cf:9f:59:0d:a6:9e:
2f:bd:67:24:bd:bb:87:f8:76:45:03:dc:e5:04:5e:47:f8:22:
c2:d4:43:03:2d:1f:91:44:58:43:e6:63:c4:eb:59:2f:cf:76:
be:46:ca:89:2f:f5:ce:8e:e3:39:30:e5:fe:c6:f7:da:9c:df:
e6:90:aa:c5:55:42:2d:ed:21:86:5c:a2:13:74:c7:09:06:a5:
b2:f5:09:b4:53:ec:35:91:08:34:f3:ce:19:b9:5e:51:ff:90:
54:e6:70:cb:47:78:4c:64:dc:57:42:c0:d7:83:c6:44:35:74:
bf:65:be:af:b7:a9:47:ee:77:30:09:84:ac:f8:c6:f5:07:0c:
54:12:60:76:46:21:6a:e9:a1:a2:9d:16:61:2e:b2:57:15:fe:
0e:47:5d:7b:aa:b5:39:fd:d6:e5:4c:7c:19:7a:5b:af:2c:f1:
a9:b4:1a:54:b5:d3:58:68:02:2f:56:77:92:e3:6a:52:67:c2:
55:91:19:31:4a:d2:34:5a:c1:de:7c:63:a8:cf:22:58:8e:0a:
09:8c:29:8c:d8:29:fc:a3:a1:aa:61:da:1f:38:08:0a:2a:2e:
00:4e:ff:f2:55:1a:d7:6f:55:6c:e1:e3:5f:40:92:ca:91:c0:
16:39:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 18:05:50 2024 by rpki-client on console-fra.rpki-client.org