Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/W7rte1gdX62IR2C9n9mpQ_-BzsA.roa
File: W7rte1gdX62IR2C9n9mpQ_-BzsA.roa (raw, json)
Hash identifier: BcEY00+VExd8zna6K3f14u0koMu0h+l3Qwh/yUdogT4=
Subject key identifier: 5B:BA:ED:7B:58:1D:5F:AD:88:47:60:BD:9F:D9:A9:43:FF:81:CE:C0
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 018CC9D5E259EE2997A96F985B913EEBFAFC
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/W7rte1gdX62IR2C9n9mpQ_-BzsA.roa
Signing time: Tue 02 Jan 2024 11:01:26 +0000
ROA not before: Tue 02 Jan 2024 11:01:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400810
IP address blocks: 185.121.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 12:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:d5:e2:59:ee:29:97:a9:6f:98:5b:91:3e:eb:fa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Jan 2 11:01:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bbaed7b581d5fad884760bd9fd9a943ff81cec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:10:5d:c1:94:0a:33:f1:05:af:f4:d1:5c:
62:c6:5e:ef:e4:07:07:f3:e6:d9:be:1f:10:b3:e0:
aa:08:ae:16:bf:55:69:61:2a:5f:5a:bc:47:5a:c1:
4b:b2:08:94:78:5d:26:56:d9:1b:57:15:ce:ec:6c:
e6:e3:ec:45:a0:94:3f:62:6d:83:7f:79:b8:2d:f3:
77:0a:56:00:ad:2b:de:ab:bf:ee:52:d7:e5:ba:29:
f5:d9:01:00:e1:77:32:58:5a:8e:df:db:00:c2:39:
c6:d3:2b:7d:37:e5:e2:4b:7d:02:4d:55:59:10:63:
0b:d0:12:bb:97:06:7b:46:09:e7:66:91:77:fc:ba:
4a:4d:76:d5:1b:5e:b4:47:df:02:4d:2d:83:8d:ce:
8c:e5:60:da:3e:4a:d1:c5:5a:99:ff:8c:2b:dc:c3:
ef:1a:38:70:a1:05:db:be:59:0a:69:2f:ff:76:4f:
2c:b4:3b:09:54:87:aa:0a:a2:08:1d:44:5c:44:78:
84:00:de:22:1f:fc:ee:b9:77:c3:d5:25:ba:1c:96:
9e:69:7e:cf:3f:0c:fc:15:d2:99:2c:91:99:3b:79:
30:7c:67:54:b3:9a:7e:87:86:db:1a:d1:df:0d:bc:
d5:a5:1c:55:ac:d5:1e:04:82:aa:a3:02:45:d8:6d:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BA:ED:7B:58:1D:5F:AD:88:47:60:BD:9F:D9:A9:43:FF:81:CE:C0
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/W7rte1gdX62IR2C9n9mpQ_-BzsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.225.0/24
Signature Algorithm: sha256WithRSAEncryption
55:69:75:33:15:e9:1d:83:be:bc:36:57:8b:6f:b0:21:f5:44:
39:2c:02:8e:d2:84:f3:68:88:e1:78:bc:4f:14:77:23:d6:a1:
d6:4e:62:a4:f9:2c:6a:31:94:08:1a:4b:df:ca:17:96:75:b5:
63:84:34:96:ad:a5:97:51:5b:21:d4:c0:2a:54:19:c5:3a:8c:
35:b9:96:a0:19:dc:9b:60:ea:18:cb:38:fd:57:4c:c0:91:f8:
d5:07:79:40:05:82:94:95:60:0e:eb:01:32:b0:b7:d0:8c:3c:
81:bb:95:5a:15:2e:1b:9a:f6:12:24:96:a5:47:84:a6:d6:40:
f2:3e:98:ca:fd:51:99:2e:8c:c1:92:a6:85:06:89:65:60:17:
d9:65:f4:93:11:7c:24:4f:3f:cb:49:81:3b:c9:da:88:29:f5:
fa:28:e1:e6:0d:fa:a4:c6:45:84:cd:42:63:e1:30:22:c4:20:
3f:ec:d6:3a:33:5d:8c:dc:fe:24:de:0b:39:f5:f2:47:8b:9c:
ce:7e:64:fa:e7:e8:79:5f:52:c8:c5:7d:ea:22:cd:52:58:6b:
ec:69:59:30:85:f5:78:da:a1:ff:a0:45:68:78:54:39:11:f7:
38:5b:7a:b1:d6:13:16:68:43:f8:84:52:5a:ea:0f:8d:9b:a4:
68:28:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:54 2024 by rpki-client on console-fra.rpki-client.org