Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LFyv8YCz6RmNPeeUboBuJ8MuGHc.roa
File: LFyv8YCz6RmNPeeUboBuJ8MuGHc.roa (raw, json)
Hash identifier: WgKyUVzSzHKoer0O1JbqXyrMGKUsPdm5olj57FzQnXY=
Subject key identifier: 2C:5C:AF:F1:80:B3:E9:19:8D:3D:E7:94:6E:80:6E:27:C3:2E:18:77
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF9774701C1428642518B94721824E6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LFyv8YCz6RmNPeeUboBuJ8MuGHc.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51374
IP address blocks: 88.203.189.0/24 maxlen: 24
88.203.187.0/24 maxlen: 24
88.203.190.0/24 maxlen: 24
88.203.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:77:47:01:c1:42:86:42:51:8b:94:72:18:24:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c5caff180b3e9198d3de7946e806e27c32e1877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c8:54:ec:dd:b7:de:8a:71:4e:a9:ba:64:d1:
10:00:77:4a:a2:54:2e:26:19:53:a5:da:88:c4:06:
f3:51:ea:8f:af:59:6b:ea:0a:bd:60:3f:a0:54:38:
f7:92:07:09:47:c2:b4:4f:0d:57:d8:c7:96:b2:7e:
4d:01:b3:04:0a:e4:e3:1d:50:99:0c:47:e3:78:4c:
7b:88:76:66:23:8a:bb:e1:3e:c8:e9:fe:67:25:60:
f6:6c:06:5e:e1:bc:04:59:05:d8:ca:b4:11:45:62:
66:73:44:e2:1f:24:aa:bc:04:c4:73:22:34:1a:89:
05:cc:6f:c8:81:c0:4d:8f:06:8a:0d:7b:c3:42:3f:
41:b7:d1:a0:5e:91:cc:48:db:9d:1d:23:62:68:96:
7c:57:b1:0c:e3:4c:7a:d0:04:9e:a5:e4:06:af:b1:
c0:f5:af:e7:74:02:c3:7a:89:d0:e7:f4:79:e2:c6:
2f:61:26:9f:06:bb:e5:ae:2d:22:e4:d4:a8:b8:75:
c4:9f:6a:bf:9b:06:db:79:52:bb:0e:e1:fc:be:77:
44:ba:78:f7:15:dd:c2:b5:36:bb:1f:93:1f:84:e0:
96:f7:c3:ec:ed:13:56:fa:7e:04:a4:e3:82:ce:60:
08:7b:e0:cb:da:57:48:88:3c:0d:59:13:a4:e5:b6:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:AF:F1:80:B3:E9:19:8D:3D:E7:94:6E:80:6E:27:C3:2E:18:77
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LFyv8YCz6RmNPeeUboBuJ8MuGHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.187.0-88.203.190.255
Signature Algorithm: sha256WithRSAEncryption
01:0a:39:fe:ef:94:90:3b:31:bc:ab:6a:0e:f6:f9:e3:36:3f:
cf:71:d5:ac:ff:ef:2f:60:36:31:25:99:f4:57:90:ef:7e:d4:
7d:a7:db:3e:f8:9e:85:3e:01:f3:64:2f:ba:16:4b:0a:55:1a:
8a:19:3e:88:ff:ab:f0:91:8f:ec:bc:6b:25:2f:8a:3e:af:78:
ab:63:d7:60:6a:80:b4:e2:58:77:ed:03:c3:58:16:4f:88:e2:
ce:f4:aa:47:d1:75:b1:35:f3:df:9d:60:06:10:c6:8f:e2:ce:
9f:46:ec:af:0d:dd:39:dd:0c:0f:39:2d:0f:0a:64:74:4b:6d:
40:4a:19:f2:a5:e6:44:11:f4:27:91:7d:e5:f8:0d:1e:e9:7d:
0d:ab:df:29:37:53:4f:43:9a:d4:a2:4c:6e:39:f9:36:98:6b:
f5:08:a4:e6:af:6e:02:cd:20:c9:5c:4f:97:94:98:06:d0:04:
9a:0d:96:4a:f9:82:25:36:f1:8f:9f:85:09:b7:17:f3:cd:b7:
9d:01:b8:c3:46:21:3c:80:8e:1b:8f:c2:43:34:26:97:83:d7:
b1:7f:29:eb:ef:5d:1f:31:c0:ae:93:bf:c7:ef:c2:1a:04:81:
c6:fe:ca:6c:9b:6a:b1:08:56:bc:31:30:19:de:dc:94:99:48:
62:27:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org