Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2W4BmLsM8YWQqtJbnAhlZ9IJfbE.roa
File: 2W4BmLsM8YWQqtJbnAhlZ9IJfbE.roa (raw, json)
Hash identifier: 8ZtjtOHTQUPJ3HyDELZ6AYf72c2/bZCROG0Ygdja3tI=
Subject key identifier: D9:6E:01:98:BB:0C:F1:85:90:AA:D2:5B:9C:08:65:67:D2:09:7D:B1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B1EC1239D92CF75A0181DDE9BDA5B8EF6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2W4BmLsM8YWQqtJbnAhlZ9IJfbE.roa
Signing time: Wed 11 Oct 2023 12:40:55 +0000
ROA not before: Wed 11 Oct 2023 12:40:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 188.215.31.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Oct 2023 05:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:c1:23:9d:92:cf:75:a0:18:1d:de:9b:da:5b:8e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 11 12:40:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d96e0198bb0cf18590aad25b9c086567d2097db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:a9:05:49:97:f1:b9:9f:a6:51:24:92:bf:
19:02:4d:56:74:f1:49:1a:11:f6:7a:2a:06:5b:07:
2e:2e:c6:44:cc:6a:6d:f0:21:e9:f3:4b:9b:f1:f9:
19:52:46:24:32:37:3f:28:9f:9d:55:f9:f0:0c:cc:
6b:00:47:ea:8b:17:42:c5:50:e4:65:a9:77:8e:dc:
46:06:ff:bb:a2:8b:d1:12:7d:e8:17:13:28:c7:59:
ed:aa:21:f8:98:a9:38:aa:c2:f3:49:0a:e1:cb:bc:
7c:fe:32:df:75:3c:c5:e5:b5:81:be:6e:44:6d:f9:
3d:12:4f:3a:d9:bc:20:98:a2:f7:5a:63:79:a7:d5:
0b:4d:2b:1b:65:f0:38:5f:26:54:fb:40:88:b3:9b:
49:44:ba:71:32:ae:86:fa:03:4a:4f:15:eb:a7:42:
9b:0f:3b:4f:32:b9:e9:40:72:05:69:4a:97:d9:df:
9b:fd:73:ed:12:80:27:d9:19:8b:99:f4:1d:35:57:
cd:00:6d:b6:6b:60:9c:cd:cd:05:52:76:74:70:de:
99:4a:6d:f1:91:60:ea:1a:10:15:8b:8b:a6:de:83:
6c:b0:7c:fd:5e:c4:4a:eb:19:71:27:be:98:6c:95:
e8:8d:0d:2d:05:69:61:b7:d3:46:cd:ad:26:b2:9c:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:01:98:BB:0C:F1:85:90:AA:D2:5B:9C:08:65:67:D2:09:7D:B1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2W4BmLsM8YWQqtJbnAhlZ9IJfbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3b:36:80:76:49:d4:5c:aa:82:e1:f5:d8:d4:60:e8:6a:fd:
6d:4b:be:f1:de:f0:bc:5e:90:c5:b9:6c:0c:1f:51:b6:04:66:
a8:81:bb:6d:2f:38:42:fc:9a:7c:9d:bc:ea:e1:1d:f9:1f:1e:
5f:00:c9:15:91:23:c9:ac:8d:99:cb:a1:8d:5b:ca:8d:a2:3e:
04:dd:8e:61:2a:e3:fa:96:62:00:c3:6d:11:52:4b:c3:78:06:
bc:9f:ed:9d:64:b4:58:47:97:dd:53:89:1d:44:0b:c7:62:34:
c7:9a:f4:4c:d6:05:81:95:e5:c2:05:81:53:23:93:6a:42:da:
2a:c2:22:bf:35:a8:0f:7d:df:35:a9:5c:91:d1:94:c8:23:c2:
a4:90:2f:f2:9b:7b:ea:12:89:97:ec:f7:13:33:14:68:0d:51:
0d:9a:89:c2:5d:11:1a:82:14:4f:56:1d:1a:f6:55:7e:03:24:
5b:61:56:78:fa:57:a4:2c:73:43:30:8e:b7:e9:78:9d:d4:f3:
15:29:30:7b:c3:1a:d8:73:f0:72:04:cd:71:96:56:cf:f2:d7:
a2:d5:17:d3:a6:e5:a0:c8:18:64:e4:a0:99:c1:72:7f:e2:1b:
94:ca:40:99:a5:7e:44:6a:e2:aa:91:9c:72:70:95:7f:17:dd:
7e:36:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org