Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/tMY4TeV_xctFrIVjI2-wQZBhAFk.roa
File: tMY4TeV_xctFrIVjI2-wQZBhAFk.roa (raw, json)
Hash identifier: LuPwbw7/rm1ab5BIgYeM8BzwTvY/TJ8nnkrJ2XEvQqY=
Subject key identifier: B4:C6:38:4D:E5:7F:C5:CB:45:AC:85:63:23:6F:B0:41:90:61:00:59
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018855CA0C589A0BF7F7941FD187783C48C6
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/tMY4TeV_xctFrIVjI2-wQZBhAFk.roa
Signing time: Fri 26 May 2023 02:01:24 +0000
ROA not before: Fri 26 May 2023 02:01:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 185.39.204.0/24 maxlen: 24
89.23.103.0/24 maxlen: 24
185.39.207.0/24 maxlen: 24
89.23.107.0/24 maxlen: 24
89.23.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 10:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:55:ca:0c:58:9a:0b:f7:f7:94:1f:d1:87:78:3c:48:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 26 02:01:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c6384de57fc5cb45ac8563236fb04190610059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:60:3c:a7:d2:83:67:34:06:4c:61:8c:71:
13:4f:d3:b6:9d:df:d7:4e:5a:77:18:8b:0e:99:bc:
67:bb:68:f5:cf:68:cb:42:21:5a:b1:7d:73:e6:d8:
86:15:30:7a:54:69:7e:02:f0:c1:11:00:f0:57:ae:
fa:23:3f:39:de:d5:09:2a:40:e2:b1:6a:2c:f0:92:
2b:b2:5f:22:59:5b:e2:07:74:00:b6:1f:be:31:7b:
17:e3:37:00:c9:66:16:23:e1:60:66:0d:ba:09:10:
fe:a9:4b:1d:8f:08:4f:39:72:20:2a:18:db:80:2e:
05:2f:fc:60:b7:ea:f9:87:2d:08:d7:44:cd:d7:2d:
bd:4d:45:92:b1:c8:87:a9:cc:40:07:66:9b:00:87:
76:22:97:a7:a8:58:ef:8e:6f:26:1b:c6:ac:a0:90:
54:d7:4d:c7:e8:8b:89:0c:37:89:d8:3b:e7:3b:cb:
93:16:88:dd:77:cc:20:32:b6:e8:e5:ed:bb:14:a2:
78:78:88:d2:7e:63:a6:67:69:ae:0e:79:d7:a8:10:
42:51:79:e0:93:ff:07:5d:74:ce:0c:08:8a:0a:f9:
3a:92:0f:80:c0:fc:89:dd:89:a1:f6:08:0f:f4:f8:
d4:f9:03:10:4a:a0:d1:b5:21:2e:2c:b7:66:5b:02:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:38:4D:E5:7F:C5:CB:45:AC:85:63:23:6F:B0:41:90:61:00:59
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/tMY4TeV_xctFrIVjI2-wQZBhAFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.103.0/24
89.23.107.0-89.23.108.255
185.39.204.0/24
185.39.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f0:f7:e8:eb:71:12:0a:d5:7d:b3:02:2e:b3:ca:eb:99:a6:
7d:09:9f:3c:f3:a5:52:f5:63:d3:7b:bc:ea:67:97:b4:18:49:
d2:1e:e9:46:d3:7a:2f:61:95:49:e2:8c:65:5f:23:89:36:30:
a3:59:e9:93:11:04:a9:7e:34:2d:58:9b:24:32:c3:12:65:75:
ef:9a:06:af:e1:5f:25:7c:bf:27:cc:fd:c9:bf:80:b7:73:67:
c2:61:d6:8e:ff:04:ef:81:77:f3:5f:06:39:b8:c1:22:89:e3:
ca:11:8b:2e:ef:55:f4:6e:07:bb:fb:44:b7:8d:7f:2a:b8:d1:
0f:6e:54:14:82:9a:26:0c:cc:20:6e:36:84:41:7b:b4:c6:be:
1f:fa:49:84:77:3b:91:37:cd:a5:48:09:42:8f:a0:b3:15:44:
64:91:93:89:ee:25:5f:ff:eb:92:d4:4d:40:c3:9b:92:e7:fc:
d9:2c:19:50:bd:16:b2:05:5c:c9:c4:c0:96:47:1f:b6:fd:fd:
d3:bc:58:be:5b:6a:5a:87:3b:26:eb:e3:b6:20:6a:bb:12:5c:
66:48:1d:c5:17:71:17:68:51:fd:25:6d:fb:18:bb:98:31:5f:
0d:f4:11:7e:e9:5d:10:63:cb:1c:e1:60:10:d2:61:d8:12:37:
bb:62:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org