Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w3O6JoyFMEatBroOQYD2eYyXeZ4.roa
File: w3O6JoyFMEatBroOQYD2eYyXeZ4.roa (raw, json)
Hash identifier: qbN4e3Ii06ZIKElAyAYIphkTXRBSPupjhCZi7wQhCjQ=
Subject key identifier: C3:73:BA:26:8C:85:30:46:AD:06:BA:0E:41:80:F6:79:8C:97:79:9E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0187989DA83C5855B6A945EE82D9249B67CB
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w3O6JoyFMEatBroOQYD2eYyXeZ4.roa
Signing time: Wed 19 Apr 2023 08:24:41 +0000
ROA not before: Wed 19 Apr 2023 08:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62390
IP address blocks: 89.47.232.0/24 maxlen: 24
188.240.210.0/24 maxlen: 24
89.37.116.0/24 maxlen: 24
89.37.117.0/24 maxlen: 24
89.45.12.0/24 maxlen: 24
89.45.12.0/23 maxlen: 23
89.45.13.0/24 maxlen: 24
188.240.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 04:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:9d:a8:3c:58:55:b6:a9:45:ee:82:d9:24:9b:67:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 19 08:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c373ba268c853046ad06ba0e4180f6798c97799e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:cc:04:55:27:de:b1:16:bb:c2:4f:e8:72:
7a:ef:4a:67:11:00:ff:b8:17:ea:d7:a0:1e:a4:0e:
38:4d:53:25:a2:d3:15:c0:78:ef:c6:ea:31:25:c0:
79:a0:9d:6d:b4:c9:de:bf:45:87:61:aa:72:e5:48:
d5:d8:6f:ab:3d:a5:22:ed:2c:7c:9c:8b:a0:5d:d8:
0f:f5:3a:72:bd:7e:c6:4e:1a:d7:01:9c:a9:be:5b:
1f:f8:eb:b1:19:6a:8b:22:fa:ef:7c:24:20:a1:52:
b2:e7:e3:95:ca:18:0d:00:79:27:1f:4b:94:85:3f:
44:86:f0:cf:5c:30:06:86:24:99:28:d8:7d:a9:7c:
80:47:47:5f:04:48:64:b9:52:aa:93:7c:21:f8:20:
11:87:a3:83:4e:e6:27:47:c7:95:f3:3b:00:d2:bf:
ac:8e:45:e5:6a:9c:6a:a6:ff:2a:a8:17:82:ce:dd:
ea:84:4a:57:05:e4:22:e7:ec:15:1e:90:7c:5e:b7:
ed:d4:ac:fc:9c:70:59:54:2a:fe:f4:c2:f3:8a:5c:
b0:ed:2f:b5:4a:40:e6:8b:32:9a:93:b2:34:4d:71:
19:8f:91:d1:56:ad:5b:b7:f9:19:14:22:ed:33:d1:
79:b3:06:ad:55:89:7b:f8:44:cc:7d:26:69:97:a8:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:73:BA:26:8C:85:30:46:AD:06:BA:0E:41:80:F6:79:8C:97:79:9E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w3O6JoyFMEatBroOQYD2eYyXeZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.116.0/23
89.45.12.0/23
89.47.232.0/24
188.240.210.0/24
188.240.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:be:8a:d0:6d:4a:47:f7:5b:b0:3b:f4:00:8e:84:17:a4:17:
ee:f7:de:78:83:20:86:df:05:da:e0:54:af:27:d1:11:44:3c:
b8:16:4f:1c:e4:11:42:5c:02:9c:5b:78:2a:45:02:59:b6:d2:
27:73:63:a8:24:a8:99:7b:ee:02:3c:d0:f0:f6:fc:2e:c3:8e:
ba:0d:d5:fa:67:b1:07:7f:38:fe:ba:af:27:6b:35:55:c9:b7:
cc:59:75:51:3f:04:3c:2f:c0:06:45:91:bd:22:1a:b6:ce:6e:
3b:ae:a1:7b:54:36:46:44:20:83:21:3e:85:23:36:c6:e6:a4:
12:4e:8d:ff:f4:56:d9:1b:fa:1f:0b:b8:b5:a1:dc:e3:ba:52:
e2:69:a0:0f:b8:3e:a5:01:6d:37:9e:e8:70:d9:ee:c9:49:5c:
d9:32:7f:92:20:cc:fe:dd:01:bb:2d:3a:48:ce:2b:1f:e6:f5:
5e:62:16:9d:21:80:45:b6:1b:c7:25:ba:dd:82:dd:40:ba:34:
c8:f6:87:95:5c:be:3e:9a:88:ee:64:f1:b2:a2:28:d2:50:54:
50:f0:a2:88:94:05:ba:51:4e:a9:c7:2c:6c:ff:67:8b:14:eb:
71:01:9c:34:8c:2c:31:73:c8:66:60:7d:47:7f:25:e9:00:63:
98:36:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org