Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Y4eQK_2syw8d_oLVr8gfqT3C5HQ.roa
File: Y4eQK_2syw8d_oLVr8gfqT3C5HQ.roa (raw, json)
Hash identifier: mT1FDHtiBDbmV4+tYxfs7wjXGMFklA9d9NFBAIdFtAI=
Subject key identifier: 63:87:90:2B:FD:AC:CB:0F:1D:FE:82:D5:AF:C8:1F:A9:3D:C2:E4:74
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01857183074B7AE388CC8A1484FD287FE85D
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Y4eQK_2syw8d_oLVr8gfqT3C5HQ.roa
Signing time: Mon 02 Jan 2023 08:04:50 +0000
ROA not before: Mon 02 Jan 2023 08:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39354
IP address blocks: 88.223.137.0/24 maxlen: 24
88.222.192.0/20 maxlen: 20
88.222.208.0/20 maxlen: 20
88.223.64.0/21 maxlen: 21
88.222.0.0/17 maxlen: 17
88.222.224.0/20 maxlen: 20
88.223.72.0/21 maxlen: 21
88.223.80.0/20 maxlen: 20
88.222.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:07:4b:7a:e3:88:cc:8a:14:84:fd:28:7f:e8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 2 08:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6387902bfdaccb0f1dfe82d5afc81fa93dc2e474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:24:3e:7b:3f:8b:a0:c3:59:1e:45:4b:7e:
d2:6f:2f:00:26:69:e6:5a:8e:82:ef:b2:6e:44:3c:
f5:01:69:0e:c9:12:7d:ca:aa:bd:23:b3:3d:94:5a:
f9:6b:1f:f4:2b:3b:7e:96:32:6f:cf:52:f3:28:2c:
12:19:65:61:0f:e2:fc:01:23:f4:f4:2e:60:bd:9f:
41:4d:e2:00:39:a1:1e:54:c2:4a:c8:85:64:48:2d:
3d:ab:2c:f6:0e:52:79:4c:58:4e:46:1a:1d:59:f4:
2b:66:8f:dd:ca:40:4a:0b:69:65:84:53:13:de:ca:
da:76:0b:90:85:86:cd:59:cf:f7:a5:ef:24:13:88:
7c:91:44:de:25:52:16:72:85:a3:68:07:64:9a:a8:
fd:60:bc:30:1e:17:43:ff:dd:1a:32:26:53:2c:1e:
4f:df:e2:b0:83:45:76:57:42:00:f6:f4:67:c1:da:
ad:63:a9:35:cb:6b:83:25:0b:77:02:16:5d:d8:91:
70:35:d7:67:c0:d5:dc:4f:08:64:d5:7a:2a:93:2a:
0c:da:62:08:67:55:7e:02:e2:71:9d:98:fc:15:15:
69:59:ae:5d:61:e4:2e:0a:a0:7a:e2:39:8b:12:74:
21:e6:db:81:03:30:0d:df:3f:80:81:40:7e:c5:0f:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:90:2B:FD:AC:CB:0F:1D:FE:82:D5:AF:C8:1F:A9:3D:C2:E4:74
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Y4eQK_2syw8d_oLVr8gfqT3C5HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.222.0.0-88.222.239.255
88.223.64.0/19
88.223.137.0/24
Signature Algorithm: sha256WithRSAEncryption
56:09:c9:4f:a0:20:60:2e:89:2c:54:b2:cf:db:a4:e1:97:cf:
c7:42:e3:72:74:77:72:57:35:8c:c2:87:43:3d:0c:6f:ca:c8:
61:7a:2f:0f:c9:51:8c:2c:1b:f3:04:00:5e:66:fc:88:57:a5:
0d:dc:fc:bd:bc:39:5c:d5:98:1e:45:9d:16:e9:b8:73:c6:5a:
fe:99:91:41:cb:95:ab:59:63:ae:bf:b2:7a:f6:23:7b:e8:69:
cd:52:bb:f4:a1:f6:f9:a1:8f:f1:82:61:bb:5f:fc:c6:be:69:
2c:64:e8:a2:58:ba:c0:53:a9:e4:5c:47:5f:1d:fb:23:8e:ab:
99:f2:1d:fc:b7:c7:4d:a9:c4:96:56:9f:0a:ef:6e:8c:5e:4d:
68:a0:b0:a6:75:ba:8b:da:22:b2:53:ca:11:1f:1d:79:2a:af:
27:d5:fd:85:c2:1c:8b:42:6f:f8:e1:fa:a0:6b:52:f7:19:4e:
26:19:92:ef:b1:ef:40:6e:15:cd:c3:dd:d3:fa:45:8a:8d:39:
40:06:8b:e4:7f:74:30:c9:25:72:99:4f:93:4f:71:b7:b8:c9:
52:5e:a4:14:60:91:7e:3b:29:38:a3:60:c5:19:74:5c:10:cd:
b1:fd:76:d0:13:53:76:90:7d:48:6e:1d:14:05:a3:90:f7:08:
43:dc:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org