Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/wBlZ1pZuiDCrQWgLozv4J59vThw.roa
File: wBlZ1pZuiDCrQWgLozv4J59vThw.roa (raw, json)
Hash identifier: U5hQfJgOGn8lVQ+0mslwYPN4PjpsaIfBPSpm+RF/G3w=
Subject key identifier: C0:19:59:D6:96:6E:88:30:AB:41:68:0B:A3:3B:F8:27:9F:6F:4E:1C
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01887A49BA456EDBE04C60A4CDC686687F1C
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/wBlZ1pZuiDCrQWgLozv4J59vThw.roa
Signing time: Fri 02 Jun 2023 04:07:12 +0000
ROA not before: Fri 02 Jun 2023 04:07:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.218.18.0/24 maxlen: 24
193.228.168.0/24 maxlen: 24
193.228.169.0/24 maxlen: 24
193.228.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 07:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:49:ba:45:6e:db:e0:4c:60:a4:cd:c6:86:68:7f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jun 2 04:07:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01959d6966e8830ab41680ba33bf8279f6f4e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:05:fc:c6:1a:f4:fa:1b:6b:31:33:7b:3a:
1b:ab:eb:ee:5f:6e:33:f4:f8:9c:62:30:fb:5d:e6:
41:18:c8:3c:b0:d1:b3:7c:f0:eb:43:97:0c:78:98:
1f:aa:95:8f:4a:b4:fb:f1:69:b2:31:ca:b6:ee:56:
b6:1f:84:02:1c:59:38:d9:d3:cb:93:83:a2:d7:7d:
93:43:a5:29:04:f5:93:9f:2f:1c:5e:7a:5a:a6:3c:
a5:5f:9c:84:95:4d:2a:3e:b0:ec:83:0a:89:a1:64:
64:a7:44:4a:74:ca:b6:2e:65:62:64:5a:34:92:a0:
19:56:f7:9b:1b:16:d1:93:c2:ca:ab:3d:ff:7d:cc:
57:0a:18:4a:1e:da:a3:ff:6b:de:16:60:80:a1:c7:
0b:a1:9b:eb:d2:5f:57:a1:15:4a:b3:c3:60:76:8f:
0c:45:79:41:55:10:47:ed:0e:03:a9:c6:b9:f2:26:
1b:8b:ee:ca:5f:88:61:0f:5c:57:3c:50:5f:a8:c5:
6b:d4:ea:4d:70:73:f1:8e:f3:65:03:75:b8:53:d4:
f3:b3:83:e1:87:2b:22:97:26:b7:18:ec:50:cb:d0:
58:a0:f0:81:d8:fa:9b:54:9d:a4:9f:cb:0d:3a:b2:
b9:c0:c3:ad:0b:59:f7:17:4e:9d:a8:80:2c:8d:41:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:19:59:D6:96:6E:88:30:AB:41:68:0B:A3:3B:F8:27:9F:6F:4E:1C
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/wBlZ1pZuiDCrQWgLozv4J59vThw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/24
193.228.90.0/24
193.228.168.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:d5:a1:86:f4:a0:3e:8c:c5:97:e2:9b:ae:41:0d:1c:35:08:
cd:10:84:cc:38:c7:aa:6b:38:ff:63:a4:f4:cd:53:53:ea:fd:
c2:87:47:78:55:4d:68:07:11:1c:e5:e0:58:92:a6:f7:a8:46:
f8:3c:5d:64:2c:bf:e4:7d:70:40:1b:cb:1a:12:14:0e:39:c8:
3e:de:fb:02:00:b1:4b:60:df:32:88:a4:af:53:77:94:e3:49:
3c:64:55:88:4f:20:65:d0:5b:75:ad:bc:e1:8a:c9:cd:08:c8:
b6:69:c3:77:9c:a9:ae:0a:cf:40:0f:88:b6:dc:8b:b3:45:c9:
cb:56:f7:2e:eb:40:5b:00:71:f2:db:69:ff:cc:95:67:c9:27:
35:67:91:20:30:ca:6e:60:b1:7d:24:6d:81:74:9e:59:b2:59:
85:9c:6d:c2:41:5a:3f:a2:3a:f1:bd:f2:24:53:99:27:ee:b0:
5f:f3:2a:da:56:76:3d:0a:0a:da:04:f5:94:fe:f1:cf:9a:55:
6a:6d:b7:32:9e:5e:9e:38:6c:c0:9b:6e:43:3d:05:6c:9a:00:
1d:2a:63:c9:63:22:c8:f9:af:64:c5:57:07:e1:07:1b:2c:b1:
2b:4d:e2:60:3b:de:56:ed:78:f6:a7:73:9f:0a:d2:21:28:f6:
08:ae:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:02 2024 by rpki-client on console-ams.rpki-client.org