Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/D4mpuuOiVBIl42bB734HEHylFQ8.roa
File: D4mpuuOiVBIl42bB734HEHylFQ8.roa (raw, json)
Hash identifier: 3iyCwCXrJ8d+jAOqpmQm8a6Qc2lLlAQKxIJhjNzvcDo=
Subject key identifier: 0F:89:A9:BA:E3:A2:54:12:25:E3:66:C1:EF:7E:07:10:7C:A5:15:0F
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018AF031EBB6C4AE2A416182304FF9D82A68
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/D4mpuuOiVBIl42bB734HEHylFQ8.roa
Signing time: Mon 02 Oct 2023 11:41:58 +0000
ROA not before: Mon 02 Oct 2023 11:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 88.218.105.0/24 maxlen: 24
88.218.104.0/24 maxlen: 24
45.135.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:31:eb:b6:c4:ae:2a:41:61:82:30:4f:f9:d8:2a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Oct 2 11:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f89a9bae3a2541225e366c1ef7e07107ca5150f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:13:b5:4e:6c:9b:97:bd:5a:81:36:06:be:cf:
a3:34:02:f7:58:b6:0f:07:26:54:84:3e:7c:de:36:
e9:bd:5a:d6:59:09:db:d2:5d:61:7b:aa:e4:99:a7:
41:05:dc:9a:d0:dc:f5:a1:2a:01:a5:5f:40:d6:4b:
2b:cf:5e:d5:b0:74:4d:75:70:50:b3:93:9d:f1:fb:
17:a1:13:12:87:5f:0e:b3:db:bc:40:5c:79:db:0c:
19:9e:01:be:ed:36:a5:ce:25:bf:93:ba:f5:20:fc:
b0:cc:a6:ab:ec:12:8d:76:85:41:7f:17:c8:cb:49:
05:6e:53:44:b8:9c:e2:74:f1:71:bd:40:22:d9:d6:
78:94:c4:06:77:44:4f:7c:ed:ce:f8:6b:28:56:67:
06:c7:72:2a:97:f1:71:a3:7a:86:b7:98:fe:a2:38:
4b:29:66:83:31:92:22:ed:6c:30:f1:c4:42:1a:50:
a9:68:66:fc:98:d0:ff:89:a1:71:6e:7f:c7:11:c5:
cd:09:1e:69:72:12:9f:3a:17:fc:14:3a:df:aa:de:
2b:e2:63:aa:b8:9c:f2:9d:a6:63:8b:32:d8:99:f9:
c9:5e:54:4b:5f:17:c2:d8:e8:6c:43:e8:19:87:12:
99:3d:96:77:02:e1:a3:c6:d2:a0:88:ec:63:95:ac:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:A9:BA:E3:A2:54:12:25:E3:66:C1:EF:7E:07:10:7C:A5:15:0F
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/D4mpuuOiVBIl42bB734HEHylFQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.139.0/24
88.218.104.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:92:8e:0d:4b:31:f5:a2:68:7a:6c:59:cd:a9:0a:d2:3c:78:
92:92:0d:9e:37:45:f6:31:39:23:11:ef:29:0c:b4:64:b8:28:
26:c1:b0:0f:58:bd:8d:82:73:13:33:f6:f0:02:17:9b:e3:ce:
41:c1:b9:af:de:18:bf:64:6f:a9:5e:b3:77:72:3e:ef:ad:a7:
ef:c7:81:7b:b3:67:c2:d2:d7:b3:bf:e5:75:d3:47:5f:55:81:
3f:1f:ea:d0:9e:de:da:29:e9:8a:88:c5:90:2a:86:25:74:fd:
24:fd:f2:2f:58:0e:22:e6:85:94:75:af:7e:11:f5:df:60:73:
62:5d:2a:da:0c:48:bf:24:f7:5c:e3:1f:01:66:8b:6e:bf:b0:
09:f0:c9:6d:4a:e9:91:0d:4a:6c:41:bc:08:28:ee:aa:5f:86:
1f:b2:f7:a9:1d:2d:29:91:66:77:4a:36:3e:11:f6:db:5d:0c:
d7:64:34:0a:5b:e0:40:3f:15:ed:d4:42:dc:e2:62:35:ba:0a:
ff:a8:72:03:87:dc:f4:c3:3c:92:59:4d:15:e7:fc:3d:9c:d4:
73:a1:95:85:c4:53:b3:a1:78:d7:f8:03:19:b9:c6:2b:8f:e4:
b8:fb:92:29:6a:02:3a:8c:c7:92:73:dd:20:b7:f2:f3:cc:06:
ee:bb:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:43 2024 by rpki-client on console-ams.rpki-client.org