Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/7l3gQk2iGBkoCmpBfosuCNlOLF0.roa
File: 7l3gQk2iGBkoCmpBfosuCNlOLF0.roa (raw, json)
Hash identifier: SdL6N+LBYpItVHjX5XUmfcms7nOTTLdLeUNX3hj+8hY=
Subject key identifier: EE:5D:E0:42:4D:A2:18:19:28:0A:6A:41:7E:8B:2E:08:D9:4E:2C:5D
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0192DC6BFC38C79EDF0EEC37AC91D9CD3CDB
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/7l3gQk2iGBkoCmpBfosuCNlOLF0.roa
Signing time: Wed 30 Oct 2024 07:55:17 +0000
ROA not before: Wed 30 Oct 2024 07:55:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213953
IP address blocks: 88.218.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 12:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:6b:fc:38:c7:9e:df:0e:ec:37:ac:91:d9:cd:3c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Oct 30 07:55:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee5de0424da21819280a6a417e8b2e08d94e2c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:06:96:bd:6e:23:63:0e:45:24:5b:cb:16:
b2:17:b2:34:61:d1:2f:61:db:16:72:80:cc:13:20:
c4:79:a4:19:22:e5:3c:ca:c1:6e:ab:f6:be:e5:0f:
1c:4c:c3:8f:4e:93:c7:b4:9c:f4:7b:ec:98:7f:7e:
8d:06:19:6b:24:17:89:34:eb:c2:c2:7c:24:38:c8:
fa:02:49:46:45:f0:e2:5b:ba:91:56:6e:6e:5f:43:
cb:71:38:a8:63:3c:75:96:88:22:fc:da:f9:0f:d4:
61:9d:89:44:d6:f2:39:b1:01:49:0c:f0:ec:48:d8:
c6:32:d3:44:e6:69:b6:ee:9b:63:4f:ee:f9:f3:9e:
82:b9:95:00:0a:d0:d8:62:bd:ac:3f:5e:e7:31:ec:
0e:24:16:65:ba:4e:e0:a8:20:0d:a4:b2:d3:23:ed:
d2:03:3e:b9:51:4b:62:d0:4f:0b:96:94:95:b9:93:
c0:f9:45:21:90:3d:76:5b:b6:eb:0f:97:e8:2e:51:
aa:f0:ff:23:93:d8:b1:a9:69:53:80:89:b8:4f:f3:
9b:b3:a9:a9:75:58:e9:63:3d:b2:41:53:35:44:a2:
ad:5e:3e:6f:ee:ac:5a:41:aa:ae:82:27:20:47:cf:
58:f7:87:3a:ab:ab:cc:ac:1e:cf:f9:5a:98:3d:20:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5D:E0:42:4D:A2:18:19:28:0A:6A:41:7E:8B:2E:08:D9:4E:2C:5D
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/7l3gQk2iGBkoCmpBfosuCNlOLF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:39:ca:d6:14:5b:0d:6e:ba:37:60:94:6e:ff:c8:71:52:9c:
e5:2d:ad:25:f7:50:4b:f7:34:ff:9d:89:fa:fb:c9:71:30:18:
82:09:22:74:31:61:dc:4b:7d:61:4a:78:05:5c:8b:e2:40:28:
87:74:94:9e:d3:0b:99:bb:69:79:31:10:e3:fd:0d:9f:93:e2:
ee:00:93:b7:9b:bf:e2:a6:f8:5a:2d:b2:04:df:8f:ad:1c:2c:
49:2d:dc:06:11:52:19:a0:31:b2:a8:46:25:28:e7:7c:12:8c:
f2:c5:e3:e4:c7:c9:d3:27:37:94:ba:dd:93:57:e6:af:a2:e8:
3f:79:29:27:81:fa:bc:a6:ce:a9:e8:80:00:87:3c:ac:48:c1:
49:e3:2c:2e:2c:20:7a:c6:f2:04:6d:12:17:4b:92:ae:46:b4:
e2:88:0d:c3:18:c8:b5:5b:f9:f7:36:67:2c:66:57:54:69:fd:
cf:30:ff:5f:4f:5d:2e:73:29:ca:c0:2b:a1:4d:20:87:30:4f:
50:73:5e:e6:0e:f9:81:0e:e8:1b:84:74:ac:32:10:c1:37:14:
13:80:14:a4:65:30:ce:bd:60:4a:be:d8:23:c7:5c:4d:76:3c:
cb:6c:9f:ca:86:cf:e2:8f:ec:ef:29:94:5a:13:5e:e9:f6:70:
8e:30:b1:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLca/w4x57fDuw3rJHZzTzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1
MjIwMzMwHhcNMjQxMDMwMDc1NTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTVkZTA0MjRkYTIxODE5MjgwYTZhNDE3ZThiMmUwOGQ5NGUyYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwsGlr1uI2MORSRbyxayF7I0YdEv
YdsWcoDMEyDEeaQZIuU8ysFuq/a+5Q8cTMOPTpPHtJz0e+yYf36NBhlrJBeJNOvC
wnwkOMj6AklGRfDiW7qRVm5uX0PLcTioYzx1logi/Nr5D9RhnYlE1vI5sQFJDPDs
SNjGMtNE5mm27ptjT+75856CuZUACtDYYr2sP17nMewOJBZluk7gqCANpLLTI+3S
Az65UUti0E8LlpSVuZPA+UUhkD12W7brD5foLlGq8P8jk9ixqWlTgIm4T/Obs6mp
dVjpYz2yQVM1RKKtXj5v7qxaQaqugicgR89Y94c6q6vMrB7P+VqYPSDmoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5d4EJNohgZKApqQX6LLgjZTixdMB8GA1UdIwQY
MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt
MThlODZmMGIxZDgxLzEvN2wzZ1FrMmlHQmtvQ21wQmZvc3VDTmxPTEYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx
LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNoQMA0G
CSqGSIb3DQEBCwUAA4IBAQC6OcrWFFsNbro3YJRu/8hxUpzlLa0l91BL9zT/nYn6
+8lxMBiCCSJ0MWHcS31hSngFXIviQCiHdJSe0wuZu2l5MRDj/Q2fk+LuAJO3m7/i
pvhaLbIE34+tHCxJLdwGEVIZoDGyqEYlKOd8EozyxePkx8nTJzeUut2TV+avoug/
eSkngfq8ps6p6IAAhzysSMFJ4ywuLCB6xvIEbRIXS5KuRrTiiA3DGMi1W/n3Nmcs
ZldUaf3PMP9fT10ucynKwCuhTSCHME9Qc17mDvmBDugbhHSsMhDBNxQTgBSkZTDO
vWBKvtgjx1xNdjzLbJ/Khs/ij+zvKZRaE17p9nCOMLGD
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:49:05 2025 by rpki-client