Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fX_Es8pinGWV6eqqfcFHyAMSlao.roa
File: fX_Es8pinGWV6eqqfcFHyAMSlao.roa (raw, json)
Hash identifier: sWKPKvWcZUzNipTOVEOSks4rcvDbVFK/zvFTvd0vMSY=
Subject key identifier: 7D:7F:C4:B3:CA:62:9C:65:95:E9:EA:AA:7D:C1:47:C8:03:12:95:AA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0192D1D51B093D13B5A63A675C04C38B0B91
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fX_Es8pinGWV6eqqfcFHyAMSlao.roa
Signing time: Mon 28 Oct 2024 06:34:17 +0000
ROA not before: Mon 28 Oct 2024 06:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.121.122.0/23 maxlen: 24
188.212.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 19:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:d5:1b:09:3d:13:b5:a6:3a:67:5c:04:c3:8b:0b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 28 06:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d7fc4b3ca629c6595e9eaaa7dc147c8031295aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:eb:4c:18:cf:39:c0:0c:7c:0c:0b:80:c7:
d9:64:cc:04:10:54:f2:3f:b4:3c:35:e2:31:0a:77:
cd:96:1d:4b:d9:1b:a7:70:22:30:92:16:95:ab:9a:
87:81:4e:95:c9:b1:4b:9c:42:d1:7b:fa:4f:36:b1:
36:3c:59:32:e8:7a:34:87:92:c6:12:ba:66:df:4d:
99:b4:1d:e6:cf:db:20:fb:dc:9a:b6:32:18:55:50:
86:15:91:18:68:82:6d:7f:b4:55:13:2b:cb:b9:5b:
5c:88:da:9c:f3:c2:04:51:e7:41:e8:d7:43:c9:ed:
a4:99:39:53:7a:98:63:d0:85:90:16:b0:1a:fb:39:
bf:4a:5e:15:28:66:0a:9d:a3:e0:c6:d3:1f:3f:e1:
69:04:29:23:39:85:6d:91:76:e1:61:18:20:47:69:
2e:3a:5d:85:de:cc:59:9d:64:f3:95:ee:c7:d9:30:
78:6f:56:eb:ce:0f:5a:eb:ca:84:37:fc:15:fe:8a:
33:46:2d:91:70:b7:15:cf:c0:33:42:0d:2b:b5:99:
7b:2b:1c:f3:d6:4e:6d:96:2f:02:e8:57:66:4e:93:
b8:5c:81:f1:91:e4:79:e0:fd:3c:cf:4f:71:3a:c0:
12:22:11:71:86:57:75:b9:39:42:c0:1c:10:11:1c:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7F:C4:B3:CA:62:9C:65:95:E9:EA:AA:7D:C1:47:C8:03:12:95:AA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fX_Es8pinGWV6eqqfcFHyAMSlao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.122.0/23
188.212.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:26:0f:e3:10:e5:23:c0:7d:b8:da:a3:5f:2f:40:44:6f:ed:
cc:bd:f9:a8:14:3e:86:df:25:32:f8:5c:40:ac:dc:34:4e:9b:
32:e6:5e:b1:c9:67:3f:01:61:21:56:b6:e7:ee:a1:0a:d4:c4:
e7:93:f4:43:e4:2a:d3:42:2f:52:09:e9:bd:7a:95:50:58:b9:
17:f5:c5:18:8e:fe:c8:95:fd:cf:40:2d:13:cb:3f:56:3b:6d:
eb:31:dd:1a:82:96:31:35:f0:98:ce:61:2f:a7:6a:b6:e9:ef:
7b:94:eb:58:8d:35:46:5d:7d:3e:d2:95:b5:3a:b7:56:80:f5:
bd:ab:63:a2:79:37:c7:5d:eb:65:a4:c5:88:26:e4:ea:2b:7b:
0e:99:9c:13:7c:9d:f8:bd:6e:da:9e:03:29:00:62:cd:1d:fa:
5f:fb:2b:bb:ae:35:c4:e3:b9:00:ca:21:2e:6b:bc:69:2f:52:
25:61:74:2b:59:7d:37:44:2b:fa:e3:82:bc:34:8d:4a:35:61:
2a:c4:bd:8d:e5:95:3d:35:77:1a:84:72:4a:b6:54:0b:f9:b8:
cd:30:df:d3:d6:1d:4e:20:30:5e:bb:56:69:40:b1:67:a5:4b:
b1:ef:67:ba:98:5a:76:98:35:e5:77:8a:c1:3a:f1:d0:37:50:
2c:5d:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 20:35:54 2024 by rpki-client on console-fra.rpki-client.org