Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/dJCLoam7WYb6t9YRX6ATYeHYY-0.roa
File: dJCLoam7WYb6t9YRX6ATYeHYY-0.roa (raw, json)
Hash identifier: Ahsbpv2sXddzjMrwSdXwAmedwT31Q9oec/S3xdUJJLM=
Subject key identifier: 74:90:8B:A1:A9:BB:59:86:FA:B7:D6:11:5F:A0:13:61:E1:D8:63:ED
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018CC56DEC6D10DB22D408394CD5CF532797
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/dJCLoam7WYb6t9YRX6ATYeHYY-0.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 88.218.105.0/24 maxlen: 24
88.218.104.0/24 maxlen: 24
45.135.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 22:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ec:6d:10:db:22:d4:08:39:4c:d5:cf:53:27:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74908ba1a9bb5986fab7d6115fa01361e1d863ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:d8:d7:07:b6:4c:1b:86:72:56:10:3c:c1:
ae:01:fd:bc:65:68:fb:ca:9b:b4:23:20:c5:5a:a0:
05:76:54:31:34:c8:42:9b:5b:2c:2f:28:ae:19:b5:
90:8c:e5:e2:d2:42:2f:23:d8:54:67:0f:bf:d7:11:
57:55:ad:77:5b:b1:4f:d1:bf:cf:1a:9e:87:6a:1c:
95:fb:43:ab:71:d0:ef:7d:3b:c1:23:01:cc:7d:6c:
4a:f6:2c:de:f5:e0:39:bc:2b:30:9d:ca:82:f4:41:
00:1d:79:ec:42:24:ff:5a:f3:b7:1f:30:b8:98:9d:
be:e9:d2:f7:14:9d:87:f1:89:fb:79:0e:65:42:72:
6f:20:9a:4a:64:f2:1d:0a:2e:0d:b0:47:64:5d:64:
79:30:cb:0a:7a:04:4d:00:f5:14:40:fe:b6:2e:5e:
01:93:6f:94:2b:ac:2d:8a:11:51:41:0a:a0:8d:a9:
c7:39:91:67:95:c7:6a:69:1f:98:fe:a9:08:d3:77:
9c:fc:32:c9:97:7e:0c:a6:d0:c9:cf:c6:e6:05:a7:
41:a1:19:b5:6e:e2:b0:88:14:a9:4c:fe:de:73:01:
42:48:21:f4:c2:cb:4b:31:0e:1d:62:30:4b:4d:75:
0c:94:fe:9b:cc:86:8e:e2:07:cd:c6:e3:88:85:e9:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:90:8B:A1:A9:BB:59:86:FA:B7:D6:11:5F:A0:13:61:E1:D8:63:ED
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/dJCLoam7WYb6t9YRX6ATYeHYY-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.139.0/24
88.218.104.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:d4:e7:0a:3b:df:38:10:c0:2c:47:80:09:84:a9:cc:b4:32:
d7:59:d0:f3:d1:92:31:70:39:e5:87:ae:9d:5c:fb:34:18:70:
e0:f4:58:96:3e:a0:8c:22:82:82:a5:2f:1c:e1:c1:4f:34:f7:
80:6a:b2:96:88:2e:58:99:0f:c6:82:e7:ec:20:bf:89:01:34:
f4:88:0d:e1:bd:be:1c:ea:37:81:87:60:f3:5b:85:1e:ea:6e:
2d:35:2d:0f:f4:ec:e0:a6:23:56:c0:b0:36:33:b1:31:68:cf:
fd:47:e0:c4:f1:79:1a:0c:dd:24:61:5f:b2:7b:2d:92:6f:a0:
ff:6a:08:76:d7:37:c9:a7:73:50:54:0d:68:ca:70:cc:34:ff:
6b:ed:43:15:71:2a:8c:bb:c1:55:0c:ea:e3:99:a2:d3:38:e2:
c9:3b:5c:9b:f7:f5:8f:24:46:f2:8a:3e:c9:c8:c1:52:9c:6d:
03:88:c2:da:db:49:28:3d:26:0c:fa:78:6f:e5:91:1a:5b:6e:
8f:05:9c:8d:2f:04:cb:b3:e3:6a:e6:32:34:c1:64:63:7b:f2:
e1:e4:48:52:f6:22:07:e2:d5:0f:5e:cf:02:62:7c:ff:0d:d7:
e7:5f:dd:ed:13:36:32:93:b5:36:b4:43:d9:e0:d4:38:32:63:
c7:95:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 00:44:17 2024 by rpki-client on console-fra.rpki-client.org