Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/LBHoAiHbD38HDCErpLH5TnVUluA.roa
File: LBHoAiHbD38HDCErpLH5TnVUluA.roa (raw, json)
Hash identifier: UnaYP2+vFQcO0nSMwf8RU40rSlFVlzWo8dB0ZeYuT7c=
Subject key identifier: 2C:11:E8:02:21:DB:0F:7F:07:0C:21:2B:A4:B1:F9:4E:75:54:96:E0
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018CC56DEEFF83E3D7D69205D74B6528D91C
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/LBHoAiHbD38HDCErpLH5TnVUluA.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35758
IP address blocks: 88.218.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ee:ff:83:e3:d7:d6:92:05:d7:4b:65:28:d9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c11e80221db0f7f070c212ba4b1f94e755496e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:39:e8:51:af:eb:79:89:13:92:26:3c:65:
49:a0:ad:02:5b:7b:5c:ac:4e:e8:6f:2e:19:e4:4c:
01:46:47:f9:02:1f:bf:a9:7a:d8:e1:a5:09:85:0d:
a3:8d:20:c2:d2:71:cb:b6:ec:9b:a4:6b:ab:99:be:
ae:74:3b:6b:52:0c:80:82:fc:c5:e0:40:12:8c:c3:
27:a9:95:09:f0:a6:54:0f:8a:df:09:77:ae:61:f5:
7f:70:12:d3:1c:e9:09:75:6a:4a:28:89:5d:39:7c:
75:74:39:fd:55:12:f4:37:5b:5a:8e:af:dc:fd:a9:
9a:f2:0e:2b:fc:26:e1:98:96:fc:13:1d:85:d8:c1:
40:e1:0c:11:b9:73:75:1c:87:2b:e7:56:1c:5f:3e:
a1:6d:23:fb:6d:f1:71:fc:86:02:5e:5d:4b:93:0c:
3e:15:f2:39:ab:5c:a0:51:c6:50:ff:97:2a:99:fd:
76:06:29:9b:89:ab:b1:75:0c:35:14:15:aa:06:65:
d1:ac:0a:a5:cd:c1:7d:b7:b1:e8:17:8a:bd:6a:d6:
18:51:2b:12:6e:97:0a:a0:7c:9e:63:7a:0b:a1:f0:
34:28:b7:e0:37:e5:e7:2b:15:32:a4:34:53:7d:b1:
33:96:ff:63:9b:2f:17:c4:de:f5:b4:6c:0f:de:e3:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:E8:02:21:DB:0F:7F:07:0C:21:2B:A4:B1:F9:4E:75:54:96:E0
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/LBHoAiHbD38HDCErpLH5TnVUluA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.106.0/23
Signature Algorithm: sha256WithRSAEncryption
34:78:13:21:7f:88:19:a2:f8:2d:11:61:dd:4d:f2:69:d3:b7:
6b:b6:5f:ea:ea:da:79:6d:f4:1c:d8:90:a2:13:87:9c:a7:57:
a2:ae:91:2a:8d:dc:65:2f:cc:a6:d4:27:dd:2e:38:04:9e:dd:
55:17:51:d0:14:9e:1b:04:75:d4:ce:79:d6:da:ab:51:52:78:
c3:4e:bb:8e:84:fe:d6:3b:d7:60:14:35:40:47:a4:d4:4a:d5:
ca:d3:21:3a:5c:9b:95:0d:e2:56:12:23:39:87:c8:ad:65:39:
2d:6c:bc:a5:40:c6:23:7f:97:f1:19:20:bd:51:63:56:d2:66:
5f:32:6a:75:c2:3c:34:04:d6:03:67:a9:cb:73:79:06:70:8a:
76:10:93:5e:34:30:a1:37:7b:24:2e:c4:8c:8b:34:20:dc:7e:
45:f1:b2:84:b5:54:68:03:0b:7a:f8:97:39:fc:03:c0:e2:83:
4a:d7:76:15:17:da:e6:59:f4:24:7f:e5:9e:52:71:90:98:ba:
6b:4a:da:8e:06:71:c3:fd:ea:70:9a:c8:49:f9:9f:48:a0:74:
50:cd:1a:43:60:e5:bf:1b:a5:8f:b7:c2:4c:82:3f:7f:38:90:
cb:e8:93:51:20:a0:4a:52:ab:62:35:6c:da:b7:c8:53:1a:9d:
1c:93:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:14 2025 by rpki-client