Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/orgyjcFqXfYGRieXtdG5xY6MpNo.roa
File: orgyjcFqXfYGRieXtdG5xY6MpNo.roa (raw, json)
Hash identifier: lswWFEUr889RZLrsPtf99nTHG5O4ebHV1EjQeA7jrMw=
Subject key identifier: A2:B8:32:8D:C1:6A:5D:F6:06:46:27:97:B5:D1:B9:C5:8E:8C:A4:DA
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0190993F813C8AD019C953364A1F48A0A207
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/orgyjcFqXfYGRieXtdG5xY6MpNo.roa
Signing time: Tue 09 Jul 2024 20:46:34 +0000
ROA not before: Tue 09 Jul 2024 20:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215245
IP address blocks: 185.121.133.0/24 maxlen: 24
2a14:6780::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Jul 2024 21:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:99:3f:81:3c:8a:d0:19:c9:53:36:4a:1f:48:a0:a2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jul 9 20:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2b8328dc16a5df606462797b5d1b9c58e8ca4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:86:4b:15:ad:df:ed:b7:46:f2:b4:d2:9c:
ac:6e:43:1e:87:08:82:49:1b:86:41:23:a7:fb:b1:
ad:b1:49:28:85:1c:b7:75:4e:ca:32:8b:69:90:3a:
5c:3b:61:29:b3:28:69:29:b0:49:9b:35:b0:15:30:
77:74:f3:96:e6:c3:9c:83:44:b3:77:18:a8:bc:1e:
59:a7:f9:bc:70:f0:51:84:8d:e8:72:10:29:d1:4f:
2d:b9:4b:44:50:a0:e3:db:2a:a4:44:b2:3f:04:fb:
2e:d3:ce:19:43:91:88:9b:94:75:0f:b1:fc:05:b1:
b0:64:66:85:2e:3e:9b:48:a0:2c:5b:01:2a:06:1d:
b5:29:b3:8c:0f:60:a4:0d:7e:a2:5f:ab:18:f6:a4:
1c:5f:93:a2:90:ce:c5:3c:4b:a9:53:d1:01:c5:f3:
0d:93:eb:b7:70:16:f8:f6:22:ac:f4:47:28:f3:1e:
44:a0:16:e2:16:d3:b1:cd:ae:23:70:99:b2:f0:bd:
12:82:ca:0f:28:46:54:d2:2a:47:85:fb:fd:f2:25:
e9:c3:04:4d:fe:26:2f:8f:6c:57:c6:4f:c4:a3:a9:
f0:48:3f:9c:10:f0:5b:20:5b:80:b4:2e:a9:1a:5a:
ec:57:7c:87:7a:f8:db:2a:7e:41:4d:63:df:a5:50:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:32:8D:C1:6A:5D:F6:06:46:27:97:B5:D1:B9:C5:8E:8C:A4:DA
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/orgyjcFqXfYGRieXtdG5xY6MpNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.133.0/24
IPv6:
2a14:6780::/32
Signature Algorithm: sha256WithRSAEncryption
9a:4c:b5:3a:4b:f5:ce:7d:23:0f:08:a6:6a:cb:42:cb:d9:7a:
01:0c:68:d2:92:2a:78:ac:47:af:59:e6:74:e0:31:07:6a:44:
0c:74:26:88:bd:73:94:f8:14:0c:69:39:57:71:06:b9:8e:5a:
33:75:45:da:aa:b3:f6:ed:60:80:61:0f:c1:cc:8f:76:a2:78:
8b:d2:7c:68:db:8a:21:29:e2:a0:84:f7:a5:58:cf:90:11:12:
b5:4a:40:8f:b3:51:af:9f:b1:13:85:84:39:0c:78:90:dd:6d:
db:65:dd:f0:0e:05:e8:82:49:f1:9b:11:64:ea:fe:a9:d3:4d:
8a:b5:11:fd:d7:5d:c1:38:9c:37:69:bf:e9:ef:23:0d:be:21:
a3:bf:97:47:24:17:aa:4c:b0:c4:10:fc:a1:03:c4:d9:6f:1d:
16:34:43:2c:2b:c4:a3:0b:d8:9e:1a:83:66:1f:23:f4:5f:b4:
d9:51:39:7d:94:98:4d:70:93:52:cd:00:f7:45:91:64:57:6b:
b3:c0:f4:eb:72:62:90:f8:64:5c:5f:05:3c:2c:eb:d0:ee:76:
42:f6:07:4e:34:34:80:29:10:7f:97:f5:e9:4a:ed:e1:0e:02:
2e:1d:8f:78:96:5d:f3:b8:02:72:22:67:bc:0e:b1:01:77:48:
31:59:9f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 23:06:32 2024 by rpki-client on console-ams.rpki-client.org