Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/L-bgN2aTA_J-hJlHr46VZmzOoJ4.roa
File: L-bgN2aTA_J-hJlHr46VZmzOoJ4.roa (raw, json)
Hash identifier: NLdhQ+92KzguBkjKtiN+iNJiKDMF8PKEq4PBSfRADIs=
Subject key identifier: 2F:E6:E0:37:66:93:03:F2:7E:84:99:47:AF:8E:95:66:6C:CE:A0:9E
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018E15CA93909E5194095032EA14098B186B
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/L-bgN2aTA_J-hJlHr46VZmzOoJ4.roa
Signing time: Wed 06 Mar 2024 22:03:01 +0000
ROA not before: Wed 06 Mar 2024 22:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 264617
IP address blocks: 88.218.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:15:ca:93:90:9e:51:94:09:50:32:ea:14:09:8b:18:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Mar 6 22:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe6e037669303f27e849947af8e95666ccea09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:a0:21:52:b6:69:14:87:58:41:2f:ea:c9:
dc:9b:d9:05:3a:48:bd:1c:2f:dc:35:f2:6d:b3:bf:
a2:b9:13:c8:10:2f:8d:66:a4:13:b9:3b:ff:e6:c7:
e3:60:2d:1a:2c:3e:c3:6a:05:1f:60:5e:a4:bc:85:
94:33:d4:6b:99:d6:93:e2:34:aa:0c:31:6a:63:e5:
0c:da:b8:ce:dc:44:8e:7d:84:d0:53:2e:41:7d:1b:
67:d9:5c:ba:9d:5c:f3:fe:92:aa:0a:e8:f0:60:61:
31:ef:c8:9d:01:2f:cb:e6:1b:58:a5:b5:ad:a1:10:
e0:82:a7:0c:e8:bb:d4:d9:90:90:25:a1:0a:cc:07:
0f:bf:12:92:78:cb:30:ee:b6:f1:97:7f:d7:1a:cd:
17:67:87:b4:d6:0d:d1:58:e5:00:52:62:29:cc:65:
e7:89:36:ce:80:d4:79:f6:46:ff:b3:34:4a:da:61:
71:19:73:ae:1b:ff:d5:d9:74:b1:8b:95:97:8d:38:
6f:d7:e2:0d:4f:a3:e4:94:6a:d9:a2:da:54:6e:fa:
e3:86:5a:5b:ba:2f:e5:56:a0:c5:9a:df:b3:73:f8:
8c:19:5f:cd:55:7a:a7:ff:20:e4:42:32:df:ca:8e:
5a:7b:84:46:00:70:6d:47:8e:79:ff:91:28:d4:1f:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:E0:37:66:93:03:F2:7E:84:99:47:AF:8E:95:66:6C:CE:A0:9E
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/L-bgN2aTA_J-hJlHr46VZmzOoJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.105.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f0:9b:c7:1b:00:3b:cc:64:79:a8:c1:11:34:75:3a:7d:6d:
ec:ee:ad:15:a9:20:8d:4a:80:cb:68:eb:2c:07:6b:75:0d:82:
67:fe:49:05:32:3c:80:49:e9:5d:d6:04:70:ee:23:18:ca:e1:
23:79:7c:e6:c0:85:5c:58:6a:11:98:94:25:85:86:ca:3e:8f:
9c:f4:08:81:74:fb:e2:6b:2f:01:23:da:6e:2f:a5:83:4e:4a:
d3:f0:bb:ae:74:df:a1:fb:6a:ed:63:53:c3:e3:06:80:7b:d8:
5e:9d:25:44:ee:ad:b1:82:3f:bf:da:d0:c3:26:cf:d7:4c:93:
38:90:33:bf:1f:8d:2b:73:a8:d8:13:20:97:1b:41:1e:bc:7c:
eb:ab:be:a1:2f:5c:fb:35:cc:01:34:d8:cd:a7:16:1b:34:f5:
d8:d6:f7:3e:d7:b1:8b:f4:02:dc:05:39:20:c4:66:45:a9:4c:
fc:d3:85:43:49:20:b8:f0:21:d6:5c:e6:5c:c3:26:65:50:62:
6e:0a:e1:8b:d1:92:e4:f8:37:46:e3:6e:ea:b5:eb:23:90:13:
16:3b:53:fb:78:9b:d9:14:e6:d5:13:7a:5e:8d:c9:23:b0:32:
47:25:a2:90:54:a1:b1:9c:8f:a0:0c:56:ef:55:5b:a8:e0:33:
7a:9b:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:57 2025 by rpki-client