Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/_9EuO7Q9wi0_iwgv-vtLCcRAk40.roa
File: _9EuO7Q9wi0_iwgv-vtLCcRAk40.roa (raw, json)
Hash identifier: 7LxWufqxWX4EHv+OGn5XkEjQ1WmdCTgQGfEWl73EFs0=
Subject key identifier: FF:D1:2E:3B:B4:3D:C2:2D:3F:8B:08:2F:FA:FB:4B:09:C4:40:93:8D
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018F9B52C8340BF23C2776C69E8DCAB540D8
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/_9EuO7Q9wi0_iwgv-vtLCcRAk40.roa
Signing time: Tue 21 May 2024 13:24:04 +0000
ROA not before: Tue 21 May 2024 13:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198160
IP address blocks: 89.36.32.0/24 maxlen: 24
2a14:6780::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jul 2024 21:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:52:c8:34:0b:f2:3c:27:76:c6:9e:8d:ca:b5:40:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: May 21 13:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffd12e3bb43dc22d3f8b082ffafb4b09c440938d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:9f:7e:16:e2:0d:30:3a:07:aa:b2:2d:f4:
db:60:01:d7:18:79:1a:08:47:21:0a:fc:89:55:21:
bc:d7:c7:38:4b:c0:01:fb:e4:97:31:7d:7e:9c:6e:
20:26:f2:3c:db:9b:d0:dc:31:31:b9:2b:a1:67:cb:
ad:e2:82:1f:46:2c:18:e9:fb:8a:2a:4b:94:ea:90:
f8:d5:50:00:45:4e:e2:32:29:c6:f5:88:c9:40:11:
77:9a:5a:03:d9:01:c6:71:23:a2:12:4c:9d:84:28:
d3:36:5c:fb:53:be:60:0a:7a:7f:42:53:81:34:08:
2d:e7:ea:18:48:68:61:96:67:e4:dc:b0:0e:e2:f6:
da:4e:82:b9:14:52:e9:95:d1:55:35:2e:84:61:ea:
f2:85:38:74:cf:76:50:71:56:63:f9:7e:4a:f7:ea:
1a:f7:9c:59:3e:07:ca:b7:e8:13:1e:82:b9:68:b9:
ba:28:b0:ee:17:e9:99:84:5b:bc:64:cc:39:06:5a:
21:09:14:b7:a6:1c:5f:45:6a:46:09:3d:85:6f:5a:
30:d5:ae:c1:0a:2e:f6:9f:3f:02:4b:b0:ad:5d:bc:
f4:59:d0:dd:41:e0:0e:c7:63:4e:61:89:f2:d5:d6:
dc:f5:a9:ce:14:ba:7c:13:72:a7:d3:29:04:07:48:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:2E:3B:B4:3D:C2:2D:3F:8B:08:2F:FA:FB:4B:09:C4:40:93:8D
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/_9EuO7Q9wi0_iwgv-vtLCcRAk40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/24
IPv6:
2a14:6780::/29
Signature Algorithm: sha256WithRSAEncryption
74:58:96:bf:8b:2a:40:e7:da:e7:43:38:af:19:2e:36:b5:92:
1f:b0:4f:00:3b:96:17:51:6e:3c:38:bc:48:92:54:b2:7c:c5:
ec:1a:72:50:da:a0:f6:3a:79:b1:b3:b4:f3:b0:de:d5:c8:ab:
43:08:99:22:66:ea:2f:13:45:89:f0:54:9e:f7:25:db:74:72:
15:3d:e9:37:2e:2a:19:a0:29:ee:98:58:73:40:83:9a:74:f1:
4d:22:b1:a9:89:1a:25:15:96:5e:1a:da:b7:31:c6:2f:a7:4d:
d2:49:b6:2a:d5:42:8a:05:46:b1:e6:cc:78:a8:49:e6:9e:76:
72:0c:58:38:d1:10:84:41:a0:a9:74:5e:80:11:cd:ae:03:98:
af:20:7f:cc:a3:ba:b8:fa:ac:2c:75:32:9d:9f:54:8a:98:11:
12:bd:70:ae:d0:f0:81:50:8d:17:4f:cf:a5:f4:3d:29:05:88:
ed:8e:0d:3f:de:28:30:c7:2b:c4:45:e3:95:2e:b1:0c:71:94:
a1:ef:6c:2c:27:b3:46:44:5d:ab:0f:7f:6f:c4:c9:16:e5:58:
98:d1:fd:55:54:98:41:14:49:20:1a:9b:85:3c:b5:70:98:65:
92:91:c3:6a:c9:7f:5f:99:11:71:68:db:c7:28:61:6f:9e:f6:
07:99:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 23:41:05 2024 by rpki-client on console-fra.rpki-client.org