Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/f8AohCM9nTSZBOJ-ZcF0O8wlCps.roa
File: f8AohCM9nTSZBOJ-ZcF0O8wlCps.roa (raw, json)
Hash identifier: xSaOibwwzJ4QVwPX+bh1JKJRquRQIcaEhk9b84whJb8=
Subject key identifier: 7F:C0:28:84:23:3D:9D:34:99:04:E2:7E:65:C1:74:3B:CC:25:0A:9B
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01856EC237AA92CCDE8D97834A9BF7898812
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/f8AohCM9nTSZBOJ-ZcF0O8wlCps.roa
Signing time: Sun 01 Jan 2023 19:15:00 +0000
ROA not before: Sun 01 Jan 2023 19:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207429
IP address blocks: 95.173.182.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.151.0/24 maxlen: 24
89.252.152.0/24 maxlen: 24
89.252.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Dec 2023 21:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:37:aa:92:cc:de:8d:97:83:4a:9b:f7:89:88:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 19:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc02884233d9d349904e27e65c1743bcc250a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:7b:fa:81:93:b1:a6:ed:56:1a:cf:39:ee:
54:93:6f:17:50:f1:29:6c:36:90:5e:e5:8f:f4:28:
bc:b2:28:70:e6:d9:1a:ca:bf:57:d5:ad:43:49:8e:
35:fe:87:81:48:69:75:08:ff:98:52:06:d8:75:40:
47:af:0a:7b:77:31:58:24:ca:6d:74:27:31:79:09:
31:45:ba:4a:f5:24:39:34:a1:0b:fd:a7:53:c3:d4:
8c:b7:16:db:89:10:b5:7f:d8:65:b2:cf:c6:1f:ce:
87:66:73:f1:24:f5:e7:1a:c9:03:b7:30:ea:21:34:
42:d9:24:6a:98:d3:a9:9f:4a:aa:10:69:81:b1:38:
47:74:be:cf:13:60:8a:35:cf:2f:c6:ee:4f:89:4f:
df:fc:e7:2f:96:b1:4d:3b:4b:5f:5d:c7:a6:2b:a0:
e5:9f:90:74:1b:da:4a:8b:f0:24:41:79:1f:1b:0d:
f2:cd:94:56:be:4b:61:68:15:f7:92:4b:a5:bb:f1:
6b:c3:4a:0f:2e:88:25:fc:f8:da:64:42:dd:55:d4:
e1:08:f5:40:01:cd:86:9b:c3:61:33:5f:e2:7e:40:
70:29:63:9a:a3:fe:59:71:9a:02:1d:5e:63:c0:85:
e6:b7:70:80:af:ae:11:18:e7:cb:92:c0:fb:2c:af:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C0:28:84:23:3D:9D:34:99:04:E2:7E:65:C1:74:3B:CC:25:0A:9B
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/f8AohCM9nTSZBOJ-ZcF0O8wlCps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.144.0/24
89.252.151.0-89.252.152.255
89.252.154.0/24
95.173.182.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f4:d7:95:4a:62:12:cb:e6:05:e3:8b:08:a8:45:6d:71:b9:
0f:bf:58:5e:bb:5e:e8:be:c3:46:2b:9c:50:d5:fe:d7:da:80:
c3:ae:01:dd:a4:76:73:70:57:5a:ac:b6:d6:14:31:d3:25:47:
d9:6f:01:d0:b7:68:b2:9c:f3:52:39:7f:6e:01:2b:2d:24:94:
c3:e9:c5:cf:c9:cd:64:2e:4a:f5:c9:c6:4f:16:58:49:71:97:
d1:03:cf:14:e0:67:ce:59:71:d6:8a:19:3e:31:fa:a5:50:04:
f2:dd:3b:b0:d6:48:25:e4:7b:b9:4e:0b:0b:37:d8:68:6c:24:
51:fb:2c:3a:2b:8d:2b:f1:5f:44:1b:c3:5c:46:c6:99:ec:01:
b8:64:65:cf:ae:2a:c1:3f:9b:52:ad:29:6c:ec:9a:c6:c3:5c:
2a:fc:21:f5:d3:2d:68:70:f2:b8:50:90:4b:07:3e:6b:4a:30:
20:ca:f0:b2:34:42:f5:6f:7e:78:26:ca:87:59:40:98:c1:09:
c0:85:9d:43:d4:37:cc:bf:87:e6:53:81:69:ec:1f:fc:06:ac:
e8:67:ed:59:01:de:fb:ee:0b:d7:12:73:ec:28:6e:a9:08:0f:
fa:b7:0f:54:6a:0e:c4:a3:ad:96:2a:1d:de:3d:be:93:8c:f6:
4f:3e:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:52 2024 by rpki-client on console-fra.rpki-client.org