Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/7FA_ia_wTWKxqUGLsS6-BDxMxl4.roa
File: 7FA_ia_wTWKxqUGLsS6-BDxMxl4.roa (raw, json)
Hash identifier: yldy6MWFr1LrquYk2BL74QwnqMcnI+eVCZ9BDJqQ2OI=
Subject key identifier: EC:50:3F:89:AF:F0:4D:62:B1:A9:41:8B:B1:2E:BE:04:3C:4C:C6:5E
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018F4E1C6D43A2D40A7B9915203D258C3ADA
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/7FA_ia_wTWKxqUGLsS6-BDxMxl4.roa
Signing time: Mon 06 May 2024 13:33:56 +0000
ROA not before: Mon 06 May 2024 13:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198160
IP address blocks: 89.36.32.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.134.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
2a14:6780::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 09 May 2024 09:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:1c:6d:43:a2:d4:0a:7b:99:15:20:3d:25:8c:3a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: May 6 13:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec503f89aff04d62b1a9418bb12ebe043c4cc65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:86:1e:dc:0d:e3:c6:b6:7e:98:a7:e9:d9:
8a:e2:3c:dc:ac:82:dc:0d:b6:91:a1:f0:3e:9e:81:
d9:a8:00:69:5a:21:22:f3:67:69:8f:7b:76:f1:a1:
0e:6b:fa:81:92:84:99:37:c7:8c:3a:60:34:6f:52:
79:bc:f0:8b:57:d9:fe:b5:a0:b3:f0:44:ee:b4:c7:
30:a8:af:20:46:22:a9:d7:09:4f:80:cc:cf:b5:3e:
c5:12:4c:35:ce:fe:21:41:5a:0f:18:28:6e:37:81:
d2:97:c6:98:97:15:83:df:19:97:4f:b4:68:2b:a0:
50:86:23:43:0d:4b:7b:31:fc:c6:b2:3e:38:d5:d2:
84:66:34:d4:14:9c:75:45:e3:90:08:84:7a:06:cc:
fd:df:b9:24:0c:1f:2c:5b:8c:4b:85:3b:aa:63:3e:
d3:68:64:90:21:23:29:25:b2:6f:2a:8e:60:11:7b:
5e:a9:4a:5f:45:97:21:bb:40:52:4b:80:00:63:82:
0e:a1:7e:68:c3:b9:33:8e:5b:dc:b7:de:c4:00:46:
17:16:ef:28:cd:71:b3:9e:4a:04:6b:ec:68:1c:cb:
d8:e1:9b:01:13:4a:f3:8f:14:5d:10:bc:21:12:7e:
80:67:60:a4:47:49:5a:80:9e:d9:8a:a2:64:9f:51:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:3F:89:AF:F0:4D:62:B1:A9:41:8B:B1:2E:BE:04:3C:4C:C6:5E
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/7FA_ia_wTWKxqUGLsS6-BDxMxl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/24
185.121.133.0-185.121.135.255
IPv6:
2a14:6780::/29
Signature Algorithm: sha256WithRSAEncryption
6a:62:d6:ca:5b:d7:32:b3:f5:fb:9b:8e:ec:3d:05:9c:6f:21:
ac:f5:26:d4:79:66:9f:c7:67:b4:9c:64:7b:60:79:0b:56:40:
2a:e4:3e:f7:d1:e1:a9:65:de:1f:84:4f:a1:ec:34:09:6d:04:
8c:fd:dc:42:a1:2e:5b:0d:42:2d:91:31:a8:cb:17:8b:ae:f9:
e1:8a:d6:e0:23:f4:ba:b6:47:8b:bc:b3:df:0e:aa:1b:3e:ed:
0a:43:0c:84:ae:35:7f:8c:ee:0a:2e:e8:cd:1b:31:0b:cf:f1:
26:f4:aa:16:3b:b5:da:f0:7a:22:f4:0e:19:f2:b6:44:1c:5e:
9c:9e:f1:90:e9:d0:7d:29:1f:d3:10:3a:6f:d7:b0:a4:ef:b9:
76:22:a8:18:30:2c:32:81:41:62:e0:26:41:86:b2:9a:81:22:
ed:18:e5:35:c5:4b:e0:74:9b:6c:85:af:46:7c:1a:ed:c8:5f:
67:29:3a:40:5c:e3:bf:e9:4b:ba:bc:b9:4b:3b:3f:a9:e9:cd:
17:da:1e:12:97:2b:04:1d:0c:81:3c:f9:50:df:a5:81:3d:53:
29:c6:40:c8:56:69:53:cc:0c:96:72:2b:f9:77:22:c8:cc:6b:
4d:2e:26:e6:4a:62:5a:e3:4a:5a:95:e3:f4:53:12:42:c8:84:
6c:38:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 12:21:34 2024 by rpki-client on console-fra.rpki-client.org