Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/sjMiPPeZuRLGpZallpkYg0KgWXc.roa
File: sjMiPPeZuRLGpZallpkYg0KgWXc.roa (raw, json)
Hash identifier: Q6IpKrXKXoxh/9VPIo2c9xukmJzWOxveP/WbeXAtafM=
Subject key identifier: B2:33:22:3C:F7:99:B9:12:C6:A5:96:A5:96:99:18:83:42:A0:59:77
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018CC56DED9E3F89AAFA8BB4FFF2EC2B2EA8
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/sjMiPPeZuRLGpZallpkYg0KgWXc.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 88.218.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 20:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ed:9e:3f:89:aa:fa:8b:b4:ff:f2:ec:2b:2e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b233223cf799b912c6a596a59699188342a05977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:7c:fa:cf:86:4a:55:be:22:f7:40:12:2d:
21:37:5f:12:01:c3:7f:5d:20:8c:87:24:66:b3:5d:
fd:26:ae:44:46:c1:11:fa:df:55:6a:6b:c6:78:41:
c0:71:0a:1b:87:79:07:6f:68:55:41:da:03:7d:a6:
1e:f8:91:84:c6:99:8c:8f:4f:ee:25:9d:3d:78:1b:
55:65:dd:c9:c9:f6:27:a4:76:30:15:87:61:eb:5b:
89:b7:a7:e4:5d:1f:24:48:1b:0a:e9:be:ea:7d:35:
e7:a9:6b:03:39:9d:bb:ae:6c:cf:a7:5a:9b:28:df:
a0:a8:98:d8:3e:8a:23:f1:d0:ad:2a:cf:6f:cc:83:
5a:11:b9:c6:2c:92:2d:25:cf:70:81:31:39:d3:e2:
3e:6f:21:c5:65:f9:15:9a:ef:6a:6a:4b:c3:ff:85:
8c:c0:00:a2:ac:d5:ab:9f:24:1a:68:dd:59:99:d2:
4c:d1:15:85:a5:dc:ab:60:44:aa:c1:91:dd:78:d0:
8f:36:23:8b:cd:2c:08:a5:0d:2d:b5:82:1d:f8:b5:
a7:eb:d0:93:ea:69:7f:3e:15:bb:08:12:19:a7:7f:
ee:a9:f3:08:f8:eb:ce:a4:d6:ff:4a:b5:d7:2c:3b:
5b:e5:15:df:d0:69:1a:54:1d:bc:2f:a5:a8:82:da:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:22:3C:F7:99:B9:12:C6:A5:96:A5:96:99:18:83:42:A0:59:77
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/sjMiPPeZuRLGpZallpkYg0KgWXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:22:ce:88:08:d5:e8:68:d5:f1:99:5b:59:4d:64:b8:b7:ac:
df:00:78:4a:11:b9:c7:43:ff:d2:ae:62:ca:a5:f0:e7:fb:47:
fd:4c:57:7a:24:0e:6f:eb:6f:da:70:ba:1e:0b:25:d7:60:58:
ea:61:33:ee:ce:70:60:0c:b6:48:1a:f2:86:93:a5:22:35:c0:
af:c5:fe:e7:ca:6b:65:e5:d2:36:92:f8:7b:12:3a:0d:d0:c4:
b7:2c:d7:77:f2:39:74:c8:25:ec:e2:50:0a:22:d4:3e:0e:2d:
28:83:d1:40:6a:ad:02:e7:b1:ec:a7:8b:f7:52:5e:42:b5:ed:
1e:b9:97:17:a6:ab:8b:2e:4a:2d:5a:24:21:19:3f:6a:95:ef:
77:ae:43:20:02:97:aa:45:ed:9f:77:7c:75:c7:18:f0:29:38:
a1:a6:a3:78:42:75:ba:98:2e:6f:bb:a8:15:f5:12:44:04:ce:
6a:71:4d:3c:95:ab:46:9b:b0:43:0b:3c:74:1d:0a:e4:a2:5a:
d1:01:ff:65:71:e0:85:71:71:ae:5f:2e:83:63:a9:d0:6c:a1:
82:22:e4:84:c2:f9:2d:bb:9b:cb:1a:7d:42:ba:2a:4a:39:70:
da:e7:41:82:f3:8a:62:28:52:5e:81:50:7e:6d:96:3b:94:84:
b2:8e:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 22:01:06 2024 by rpki-client on console-fra.rpki-client.org