Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Lafg54x3H7bMfw9VF8tEetcy9vU.roa
File: Lafg54x3H7bMfw9VF8tEetcy9vU.roa (raw, json)
Hash identifier: pja9aIbR3chOeGHffCpxY6HIdaf4Ytiea61MggtGDVs=
Subject key identifier: 2D:A7:E0:E7:8C:77:1F:B6:CC:7F:0F:55:17:CB:44:7A:D7:32:F6:F5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018DEE26ACE9D0CCA8368AA56CBC27A4BBF1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Lafg54x3H7bMfw9VF8tEetcy9vU.roa
Signing time: Wed 28 Feb 2024 05:18:48 +0000
ROA not before: Wed 28 Feb 2024 05:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47516
IP address blocks: 89.35.73.0/24 maxlen: 24
91.132.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 07:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:26:ac:e9:d0:cc:a8:36:8a:a5:6c:bc:27:a4:bb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 28 05:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2da7e0e78c771fb6cc7f0f5517cb447ad732f6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:70:83:0f:b1:8c:9c:4c:89:6a:76:0a:fb:
c2:b9:88:94:9f:68:67:a9:b2:f7:95:e5:16:fd:e1:
c0:42:36:e9:55:e5:d7:d7:2a:86:26:30:b3:d9:a9:
44:b7:e8:7c:5e:0f:b1:fa:8b:b7:6b:74:18:a2:30:
53:55:45:e2:e6:d2:fe:58:28:03:a5:25:0c:2f:73:
44:e4:94:37:ec:2b:c4:ec:a6:a4:5c:9e:2e:46:9f:
7e:cb:07:e3:c9:8d:3d:a3:24:8b:7f:6b:57:fe:f7:
f8:46:b0:e8:95:d4:68:ed:c2:0a:53:b2:c7:85:60:
79:ea:4c:f8:e7:9b:7a:3b:10:1f:11:cd:47:2a:1c:
d1:79:c5:da:7a:09:06:4d:66:64:15:b4:5a:ae:2c:
f4:ca:25:6a:89:25:a2:b9:b5:9c:83:0b:e5:81:d5:
06:92:45:e7:fa:19:03:1b:9c:87:b8:52:c3:4a:99:
68:13:30:c3:c1:22:bb:3c:b9:5e:ca:b6:16:3a:11:
de:0e:a5:f7:e1:06:79:7d:7a:a2:9a:19:54:88:58:
d6:cc:d3:51:cd:d8:6c:4b:fb:c3:4c:f0:d1:8b:e3:
13:16:06:75:a6:b2:b5:28:91:d4:45:c5:5f:08:ad:
79:8f:a4:f9:88:5f:72:9b:0b:af:5a:59:72:7d:58:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:E0:E7:8C:77:1F:B6:CC:7F:0F:55:17:CB:44:7A:D7:32:F6:F5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Lafg54x3H7bMfw9VF8tEetcy9vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.73.0/24
91.132.49.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:36:6d:e5:f1:07:ab:be:b5:6e:25:d4:23:55:7e:4f:8a:48:
82:02:26:2a:06:97:99:fe:63:09:bb:c9:0d:9a:52:77:c0:8a:
e9:a7:7e:49:ad:29:a7:ea:f1:20:fe:cd:d4:1a:68:7e:7f:fe:
4e:67:39:0f:be:87:ca:42:79:de:a6:45:6e:19:67:b9:33:0e:
ef:cb:ac:a3:ea:bf:df:69:45:36:1a:1f:a3:9b:2f:c9:9c:2a:
0c:53:80:6b:77:49:4a:71:ee:a2:d1:92:15:bf:e7:dd:1a:27:
f4:15:d5:b6:01:22:d5:03:2a:46:37:12:98:70:7c:65:63:16:
a6:dc:e7:68:21:49:4d:05:22:f5:f5:72:4d:a1:e7:35:0f:2c:
ad:29:d8:bb:e7:59:d4:97:f4:6e:30:83:c3:f2:69:17:01:c9:
c2:a4:58:49:34:eb:6f:68:54:40:c7:e6:56:9a:63:74:08:ce:
f8:26:b9:9c:27:e5:73:a4:76:4c:c9:81:29:0d:2b:ce:a7:98:
24:3d:b4:c1:35:e1:44:fa:d0:a9:35:f3:58:fe:e9:d6:74:37:
a8:e3:9c:dc:4e:88:24:00:21:60:0c:58:a6:3e:7e:66:30:6d:
50:bf:3f:db:56:9a:ed:bb:e2:ae:ce:f7:96:72:fe:9f:33:64:
92:62:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org