Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EyLdIg8Wf2VE_G8mfh2RY9Ib2zQ.roa
File: EyLdIg8Wf2VE_G8mfh2RY9Ib2zQ.roa (raw, json)
Hash identifier: tftyWiiPCH+jXzbPm5Rb/EwDq8Bj6+6RDtyIVQtE4Og=
Subject key identifier: 13:22:DD:22:0F:16:7F:65:44:FC:6F:26:7E:1D:91:63:D2:1B:DB:34
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FDE7F7C1DAADB6A20FDE65767A906B69D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EyLdIg8Wf2VE_G8mfh2RY9Ib2zQ.roa
Signing time: Mon 03 Jun 2024 14:27:27 +0000
ROA not before: Mon 03 Jun 2024 14:27:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 89.35.119.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 18 Nov 2024 06:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:7f:7c:1d:aa:db:6a:20:fd:e6:57:67:a9:06:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 3 14:27:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1322dd220f167f6544fc6f267e1d9163d21bdb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:e5:68:a4:4b:1e:79:93:ba:b8:bd:3d:f0:
2f:7f:c5:e0:92:e2:c2:6f:67:3e:0d:d4:f2:eb:91:
a5:a7:56:11:29:a5:05:91:2d:c4:db:ca:76:96:2d:
93:d9:29:16:24:51:22:50:54:5b:23:e7:12:07:f8:
65:b2:8b:bb:c7:c4:cc:9d:23:35:ee:64:80:60:58:
3d:8e:0b:80:3c:2e:4e:23:53:d2:1e:31:0b:14:dc:
e5:83:99:d0:46:5f:95:89:5c:0c:af:8b:19:d8:ba:
0c:7e:1b:4b:62:c6:1b:20:76:9e:07:2a:e2:73:23:
72:de:4c:6d:2a:76:96:68:02:3e:5f:94:86:bb:6f:
62:b6:80:28:53:72:e4:d5:c6:2b:75:9c:5f:ee:b5:
22:25:0c:19:0c:4d:85:8c:42:3f:7f:5b:1a:c0:5d:
ff:4f:26:eb:c0:10:42:b3:70:c4:78:56:c7:df:3f:
8d:c0:6e:53:13:81:ba:0a:cf:e6:79:5f:88:a5:c0:
c3:1d:4e:58:70:7d:97:ae:13:0c:d4:eb:62:ba:67:
75:78:19:22:b6:aa:8c:d8:82:f5:46:c1:07:65:ba:
b7:bd:0b:78:71:3e:79:39:24:9c:5b:a2:f1:a2:f0:
df:44:b9:84:33:b4:45:dd:4e:37:7d:02:41:35:48:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:22:DD:22:0F:16:7F:65:44:FC:6F:26:7E:1D:91:63:D2:1B:DB:34
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EyLdIg8Wf2VE_G8mfh2RY9Ib2zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.119.0/24
89.35.130.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:0d:18:6e:48:59:76:1a:24:90:2b:4c:45:d6:f1:5d:a7:e7:
87:0c:df:c9:95:5f:2d:48:be:de:c1:0e:36:f7:3d:81:f8:fd:
47:cf:09:92:da:2f:c2:b4:be:2f:08:d7:07:db:5d:39:0b:73:
23:1a:66:fc:2a:e8:2f:af:79:e2:bd:fb:58:28:7d:cb:d8:01:
e6:53:a2:e5:25:a1:23:3c:6b:cb:6b:bb:6c:7c:b3:05:b9:33:
ec:81:d5:86:19:91:af:3a:19:f2:a8:04:7c:3e:cc:3b:05:e8:
b6:8b:6f:88:db:88:fe:5a:a5:70:87:93:8f:ba:04:9a:86:8c:
ea:9b:49:fa:46:7b:ee:ca:f2:ae:ac:de:dd:d4:d9:b7:c5:df:
34:be:bb:ae:0b:b2:05:76:20:0d:39:9c:3a:5b:5d:bd:75:4e:
7d:0b:a6:52:53:d5:25:e2:13:e4:13:63:08:aa:8f:ca:08:f5:
28:65:5a:cb:98:59:22:17:e5:4f:de:8c:cf:c9:9c:36:b1:e9:
4f:28:ab:7e:1c:e8:df:ba:a3:dd:22:9c:aa:de:24:87:72:86:
e1:7e:0a:84:0f:bb:b6:17:ed:1f:f4:8e:5a:4e:2c:b5:6e:6b:
80:2b:50:40:04:99:d9:e8:f2:04:03:63:ed:7d:f1:dc:fb:36:
c0:df:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 08:29:21 2024 by rpki-client on console-fra.rpki-client.org