Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/KPS0S9mrIjg_RK5-zi8wgERiWUk.roa
File: KPS0S9mrIjg_RK5-zi8wgERiWUk.roa (raw, json)
Hash identifier: czkzv81v0Q1LPl90QW/tKKn1dghbKRTeb1a+Hl347XU=
Subject key identifier: 28:F4:B4:4B:D9:AB:22:38:3F:44:AE:7E:CE:2F:30:80:44:62:59:49
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 018CC6B810B4FC3F15BC0955E5A8A76647BF
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/KPS0S9mrIjg_RK5-zi8wgERiWUk.roa
Signing time: Mon 01 Jan 2024 20:30:00 +0000
ROA not before: Mon 01 Jan 2024 20:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39354
IP address blocks: 88.223.137.0/24 maxlen: 24
88.222.192.0/20 maxlen: 20
88.222.208.0/20 maxlen: 20
88.223.64.0/21 maxlen: 21
88.222.0.0/17 maxlen: 17
88.222.224.0/20 maxlen: 20
88.223.72.0/21 maxlen: 21
88.223.80.0/20 maxlen: 20
88.222.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 26 Mar 2024 12:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:10:b4:fc:3f:15:bc:09:55:e5:a8:a7:66:47:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 1 20:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28f4b44bd9ab22383f44ae7ece2f308044625949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:92:10:db:1f:20:46:82:c7:d7:b8:49:c8:
94:63:f5:0c:c2:eb:79:e0:77:24:7d:46:50:10:f6:
f4:b5:ec:49:ec:36:a7:44:0b:58:05:5f:21:a9:fe:
6c:c9:c3:9f:b6:ee:c1:45:e0:3d:bf:d3:72:f1:b7:
76:a3:2d:6a:7c:30:77:60:bc:2d:3e:92:9c:72:ca:
a7:65:8d:da:47:2c:75:ea:7a:22:c8:98:b8:eb:7b:
de:c6:7d:d8:7c:ea:4a:05:09:61:9c:39:e3:d3:f5:
51:cf:49:3e:cb:c1:88:b9:c3:ab:e7:11:64:7e:47:
70:e9:09:78:63:b4:d3:ed:80:20:10:f8:23:67:34:
a2:fe:6c:76:4a:e6:5f:ad:51:2b:68:ee:b5:7c:0b:
24:fe:e1:54:9c:f4:95:4b:e3:8b:39:65:a2:f6:4a:
ee:d7:70:92:5a:24:e8:15:2c:3a:e6:9f:66:9c:61:
a0:ad:20:94:d4:16:ad:2a:70:0c:41:4c:b3:f2:64:
27:f5:2c:f6:97:67:af:ed:e8:b0:9d:6a:90:66:fc:
6a:9e:2b:7b:84:15:fe:eb:6e:19:5b:40:cb:12:86:
4f:3b:74:ef:af:7f:66:76:23:f2:7b:03:9b:d8:46:
b1:4f:b2:7b:a5:5d:bf:c1:b1:ad:c9:99:b3:90:4d:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:B4:4B:D9:AB:22:38:3F:44:AE:7E:CE:2F:30:80:44:62:59:49
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/KPS0S9mrIjg_RK5-zi8wgERiWUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.222.0.0-88.222.239.255
88.223.64.0/19
88.223.137.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7e:1b:e0:8b:3e:ad:fc:f8:da:9e:4b:86:c6:7f:e6:f8:02:
41:04:78:78:1e:61:6c:18:38:28:fa:90:63:a3:05:a2:40:4e:
3d:2c:52:8d:32:31:ee:37:a9:3a:35:c9:88:27:db:04:68:e0:
05:ca:7b:dc:00:4d:3f:d9:f8:40:ff:7f:49:aa:32:e8:9f:a6:
20:48:71:5c:5d:18:0f:40:af:7e:e5:87:9d:c5:7f:21:c2:0d:
d5:c0:ac:bc:7a:8b:84:f9:28:be:e8:04:e3:53:8d:09:6a:64:
22:f5:29:be:b2:89:98:7a:00:da:e4:37:00:47:48:b9:31:dd:
cc:2c:c9:7b:bd:0c:d4:75:9a:cd:95:91:4c:41:e5:c5:d8:12:
9b:f6:e6:67:a6:4a:65:92:ca:2f:9b:3d:66:ad:8f:f4:1d:d9:
5f:91:a9:3a:f4:cd:6c:fb:db:63:00:20:60:d6:cc:c7:60:5c:
93:3c:a5:e8:6b:e0:13:0c:11:dc:03:34:81:3b:91:47:92:7e:
cd:35:94:4c:27:e8:b5:e5:f2:5a:15:d0:32:14:81:13:e5:b1:
83:b6:8d:55:b2:73:d1:4c:f6:fa:e7:f4:d6:13:e6:19:ea:8b:
fd:eb:2b:ec:e2:2d:0f:4e:53:f4:21:43:53:fb:77:d4:67:97:
74:de:1e:8d
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAYzGuBC0/D8VvAlV5ainZke/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjQwMTAxMjAzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGY0YjQ0YmQ5YWIyMjM4M2Y0NGFlN2VjZTJmMzA4MDQ0NjI1OTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJGSENsfIEaCx9e4SciUY/UMwut5
4HckfUZQEPb0texJ7DanRAtYBV8hqf5sycOftu7BReA9v9Ny8bd2oy1qfDB3YLwt
PpKccsqnZY3aRyx16noiyJi463vexn3YfOpKBQlhnDnj0/VRz0k+y8GIucOr5xFk
fkdw6Ql4Y7TT7YAgEPgjZzSi/mx2SuZfrVEraO61fAsk/uFUnPSVS+OLOWWi9kru
13CSWiToFSw65p9mnGGgrSCU1BatKnAMQUyz8mQn9Sz2l2ev7eiwnWqQZvxqnit7
hBX+624ZW0DLEoZPO3Tvr39mdiPyewOb2EaxT7J7pV2/wbGtyZmzkE3c6wIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFCj0tEvZqyI4P0Sufs4vMIBEYllJMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvS1BTMFM5bXJJamdfUks1LXppOHdnRVJpV1VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZMAsDAwFY3gME
BFje4AMEBVjfQAMEAFjfiTANBgkqhkiG9w0BAQsFAAOCAQEAgH4b4Is+rfz42p5L
hsZ/5vgCQQR4eB5hbBg4KPqQY6MFokBOPSxSjTIx7jepOjXJiCfbBGjgBcp73ABN
P9n4QP9/Saoy6J+mIEhxXF0YD0CvfuWHncV/IcIN1cCsvHqLhPkovugE41ONCWpk
IvUpvrKJmHoA2uQ3AEdIuTHdzCzJe70M1HWazZWRTEHlxdgSm/bmZ6ZKZZLKL5s9
Zq2P9B3ZX5GpOvTNbPvbYwAgYNbMx2Bckzyl6GvgEwwR3AM0gTuRR5J+zTWUTCfo
teXyWhXQMhSBE+Wxg7aNVbJz0Uz2+uf01hPmGeqL/esr7OItD05T9CFDU/t31GeX
dN4ejQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org