Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/xDBvqHYRFLoS4FHfwrXzTLd9aGM.roa
File: xDBvqHYRFLoS4FHfwrXzTLd9aGM.roa (raw, json)
Hash identifier: j6Xx1SQvSkYP9tN4uyvgOYoaG/AuC2UT7rQPTJaKQ00=
Subject key identifier: C4:30:6F:A8:76:11:14:BA:12:E0:51:DF:C2:B5:F3:4C:B7:7D:68:63
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01900106E6C593D8BAA1F1EED7C36CE520E0
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/xDBvqHYRFLoS4FHfwrXzTLd9aGM.roa
Signing time: Mon 10 Jun 2024 07:22:27 +0000
ROA not before: Mon 10 Jun 2024 07:22:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 88.135.96.0/20 maxlen: 24
94.26.64.0/23 maxlen: 24
94.26.110.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 08:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:06:e6:c5:93:d8:ba:a1:f1:ee:d7:c3:6c:e5:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jun 10 07:22:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4306fa8761114ba12e051dfc2b5f34cb77d6863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:7e:cc:a7:35:5b:79:98:40:51:65:6f:48:
58:47:40:3c:aa:5b:06:a0:c8:e6:ab:19:3b:bc:f7:
c7:2c:87:84:00:c2:8c:85:7a:6b:f4:8a:70:0a:c0:
8d:48:95:65:82:55:25:d8:2f:9c:af:4d:11:1c:48:
dd:a5:15:c0:f3:01:75:5a:d6:75:93:65:b9:74:7a:
fb:0b:37:ee:94:e7:00:b8:ed:30:37:0c:88:fb:62:
3b:97:54:0f:2d:20:e8:6d:22:87:2f:7a:65:5d:02:
40:4b:22:99:f9:15:88:da:83:8f:01:ef:42:aa:ec:
68:07:14:ef:d9:7a:bc:36:8c:5e:02:20:d4:4b:40:
5d:94:13:6a:45:0f:99:6e:1c:62:c7:d8:fd:e5:35:
b9:d4:37:da:32:7a:8d:fe:87:98:a8:b4:77:6d:f0:
c1:40:47:ba:03:42:52:5f:f0:92:e8:0c:29:d1:9d:
16:a6:96:7a:c4:19:16:78:f9:65:2c:13:dc:be:a5:
f1:d5:a7:46:4b:d5:e6:69:d4:aa:a6:63:f9:2c:1c:
73:20:7a:87:47:03:57:ba:3d:78:8c:4d:62:b8:c3:
dc:b5:4f:06:56:13:1c:b5:e6:7e:5d:79:fa:63:08:
49:ae:0c:b8:eb:fa:76:c3:5c:4a:69:57:84:95:d6:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:6F:A8:76:11:14:BA:12:E0:51:DF:C2:B5:F3:4C:B7:7D:68:63
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/xDBvqHYRFLoS4FHfwrXzTLd9aGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:5c:58:a7:61:29:1d:0e:45:b2:d3:8e:db:0e:05:dc:a7:8f:
3d:5a:e3:75:47:69:43:79:85:11:e3:4c:53:7e:b5:b7:29:9e:
bc:b8:8f:5e:9c:f1:30:7a:ee:ae:a5:6c:47:a7:be:18:a1:57:
e0:ff:04:71:0c:c8:ce:c0:b6:1f:15:88:1b:0d:88:a6:58:3a:
52:76:ba:ce:93:0c:e0:13:0b:25:db:fc:d0:f4:91:cd:2b:14:
19:b0:28:67:09:a0:d4:43:fb:90:cb:e0:4e:65:b9:bf:fe:c0:
a7:67:95:36:cf:9c:7c:0c:c3:90:54:5f:a9:a0:56:e0:16:0e:
8d:18:42:49:8c:23:17:40:db:f9:3d:07:5a:ac:26:69:93:f7:
3d:4f:ea:eb:16:9a:33:f3:62:8f:29:fd:4e:db:75:fd:fd:0f:
42:c5:6e:be:5d:c7:01:f5:e8:3f:ff:e1:43:6a:82:46:05:ea:
e7:cb:a7:ad:bd:54:17:f3:2e:65:6a:48:ff:00:2e:4a:77:40:
ab:e8:35:18:58:52:4d:db:07:3b:6e:95:20:60:87:95:87:34:
1f:61:1c:1b:5c:2d:5c:80:52:68:a6:71:dc:e8:3d:7d:9a:0d:
73:a5:6a:74:ac:7f:d4:b5:2b:f1:ca:7d:0b:46:c7:fb:cd:9c:
6e:e0:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:22 2025 by rpki-client