Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/CyK6Yv7sUzE_Lq7ybNrYqY5eubw.roa
File: CyK6Yv7sUzE_Lq7ybNrYqY5eubw.roa (raw, json)
Hash identifier: AgZgN0Z+nm8oADFCmN/RR4ciQfAHc4zYz6iD7dHfxfU=
Subject key identifier: 0B:22:BA:62:FE:EC:53:31:3F:2E:AE:F2:6C:DA:D8:A9:8E:5E:B9:BC
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018F9B51DCD2DA772EA62A9F7CF351204611
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/CyK6Yv7sUzE_Lq7ybNrYqY5eubw.roa
Signing time: Tue 21 May 2024 13:23:04 +0000
ROA not before: Tue 21 May 2024 13:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 89.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 12:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:51:dc:d2:da:77:2e:a6:2a:9f:7c:f3:51:20:46:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: May 21 13:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b22ba62feec53313f2eaef26cdad8a98e5eb9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:7f:74:b2:57:0f:cc:1e:35:cc:26:66:82:
02:42:e2:bf:06:a9:b7:aa:1e:6c:78:a7:88:12:49:
e7:fc:ea:7e:5b:cf:08:a6:28:0d:20:e4:04:89:95:
4e:2c:17:31:15:77:18:3e:3c:3d:25:11:51:2e:cf:
6b:4c:0d:ac:95:20:48:31:dc:92:39:f6:be:08:e5:
b5:3c:61:53:41:65:fb:28:9a:f6:8f:9b:27:af:16:
88:cb:a5:87:fe:97:f4:ec:41:47:46:6a:b5:83:28:
1d:92:62:73:ac:f0:60:7a:ea:a0:9e:23:0f:5d:ec:
b7:35:b0:80:aa:be:43:91:a3:97:e4:b3:31:72:df:
3e:16:06:db:62:27:83:e3:d3:5c:dd:05:c0:49:a4:
6b:ad:9b:14:7d:e7:a9:b2:1e:42:dd:a5:62:f1:c3:
a2:18:17:ec:44:b0:bc:ef:bc:03:81:03:1e:65:56:
0c:f6:18:a1:07:bb:28:05:18:a4:11:51:cd:a7:66:
ca:90:5d:7a:5c:74:7e:7d:8d:f2:cf:f5:f1:3b:d0:
05:7c:02:67:25:d7:80:3c:5c:9e:98:58:1e:d5:56:
3f:27:b3:c7:88:f0:f1:fa:bd:31:be:17:4e:7b:26:
9d:90:de:f2:a0:3d:a6:08:ec:80:6f:7a:64:96:0a:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:22:BA:62:FE:EC:53:31:3F:2E:AE:F2:6C:DA:D8:A9:8E:5E:B9:BC
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/CyK6Yv7sUzE_Lq7ybNrYqY5eubw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:fc:36:d3:f3:cb:c6:9c:72:dd:23:c9:d3:74:55:2c:39:af:
fd:cb:cb:1d:4b:f6:fe:0d:7d:a6:15:cc:ed:43:1f:e4:e4:a5:
fa:b0:a8:76:59:18:d6:10:46:02:b0:ec:52:3c:18:3b:99:48:
a4:e2:5c:f1:be:f5:b7:21:6f:80:96:ea:48:99:ce:c8:91:30:
d7:ed:99:c4:77:da:8b:0e:b7:db:f3:20:bb:0c:e8:e3:ad:24:
93:73:fc:dc:50:74:6b:cf:18:c7:62:ea:38:69:56:ce:60:9f:
bb:66:d5:f0:ff:75:8f:5e:d3:53:80:e2:50:3a:fd:ad:6d:3d:
cb:ac:c3:4a:db:fb:1d:1b:4f:f7:c1:71:a3:2d:37:d7:bb:e8:
0d:43:85:79:9d:73:eb:0e:bc:aa:cd:27:81:e4:15:14:c9:97:
48:f4:7e:05:8e:9a:bd:40:47:d6:68:1e:0d:0e:d6:e0:f3:4f:
3c:9a:1b:50:09:3b:63:a8:9c:3d:8d:67:9e:1d:d8:8b:bb:c8:
b0:b8:b9:b0:8b:ca:eb:23:d7:83:fc:e1:ec:ec:43:b8:a4:3c:
2c:cd:03:95:0e:5b:0c:a4:e2:1d:ef:6e:22:1f:37:73:0b:6b:
7c:33:a9:d7:bb:5a:44:8c:e5:9c:d0:5b:01:67:ad:18:4f:c8:
75:17:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:33:53 2024 by rpki-client on console-ams.rpki-client.org