Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/ooIRPakEf61HqxpkhoZlZMRj0Hg.roa
File: ooIRPakEf61HqxpkhoZlZMRj0Hg.roa (raw, json)
Hash identifier: aMatRFl2gMZdabiwhU2iDaRDSzq6lFfLDR9TkEjG4+E=
Subject key identifier: A2:82:11:3D:A9:04:7F:AD:47:AB:1A:64:86:86:65:64:C4:63:D0:78
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 018DAD3F47583E56BC5A000EB51358FCFDBC
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/ooIRPakEf61HqxpkhoZlZMRj0Hg.roa
Signing time: Thu 15 Feb 2024 14:50:21 +0000
ROA not before: Thu 15 Feb 2024 14:50:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 88.218.227.0/24 maxlen: 24
91.210.224.0/24 maxlen: 24
185.245.96.0/24 maxlen: 24
185.248.140.0/24 maxlen: 24
193.135.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 14:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:3f:47:58:3e:56:bc:5a:00:0e:b5:13:58:fc:fd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Feb 15 14:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a282113da9047fad47ab1a6486866564c463d078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:a8:84:9d:78:59:1e:c2:44:3f:b2:91:5c:
d3:97:1e:34:94:60:1c:1c:c5:d1:9c:22:51:16:20:
af:07:7a:e2:73:a2:10:16:07:6e:7d:56:10:1b:fd:
9e:f5:a5:77:90:9c:98:06:fc:98:c0:8a:6d:9e:ab:
39:05:3e:34:21:06:e5:5a:04:8d:7c:a8:76:cf:e2:
c7:08:ed:8b:39:04:23:68:73:1a:69:c6:6c:e7:0c:
87:24:44:ed:cd:5d:18:77:fd:25:e6:0e:77:d9:de:
52:6f:7f:4a:58:b5:96:cb:f8:48:79:dd:ad:87:04:
a8:88:d9:25:49:40:ce:56:fe:e6:46:a8:56:59:b3:
ac:63:fe:80:62:66:47:13:12:a4:1d:b0:b6:43:68:
c1:cc:c2:fa:65:6e:f0:20:12:d2:fe:d4:57:8e:ec:
83:1c:0d:b8:17:7b:8a:5e:57:f9:19:dd:6d:a3:5d:
73:5d:31:4f:d7:04:c1:3a:83:c8:3d:1b:71:9d:67:
e9:64:8c:ee:a6:0d:58:c4:da:6f:28:de:72:52:d8:
e4:67:36:2b:5f:2f:3c:25:ce:cc:a6:fc:b4:8f:9a:
f7:a3:40:1f:53:39:2e:1d:e1:51:86:9c:36:b2:46:
16:73:bd:72:6f:cc:b3:8f:24:24:d7:53:22:ca:99:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:11:3D:A9:04:7F:AD:47:AB:1A:64:86:86:65:64:C4:63:D0:78
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/ooIRPakEf61HqxpkhoZlZMRj0Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.227.0/24
91.210.224.0/24
185.245.96.0/24
185.248.140.0/24
193.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:39:37:b9:8f:9d:43:22:1f:6c:31:8e:42:83:8c:b8:48:f9:
5c:dd:f5:90:f2:78:40:37:ba:91:39:09:f2:e0:cc:2c:89:0a:
62:81:33:1c:9f:4d:79:1b:53:5b:8a:be:05:8b:f9:c8:c5:10:
cc:62:1b:aa:dc:c6:78:85:7b:82:33:2a:e0:1f:8f:66:75:ec:
bc:bf:ab:97:75:6a:50:5c:e2:92:78:1b:d7:c5:e5:86:fd:f8:
71:01:d1:58:3a:8c:8f:65:f0:55:70:21:6f:25:e8:ff:dd:be:
45:67:e4:2b:88:5b:d6:15:c2:f5:48:d5:b9:50:87:b4:7f:15:
0a:7a:ff:6c:09:1e:b0:a3:66:cc:40:b9:a2:5f:52:0b:ff:69:
38:da:bc:cc:db:2f:00:6c:10:38:aa:b7:da:45:2d:a1:d4:e7:
b0:b6:0d:ce:81:74:3c:24:cb:1a:b0:98:2a:0a:a5:3d:e1:df:
69:50:7c:16:91:22:e0:6d:de:c7:f3:9e:22:be:81:60:69:f2:
cc:cd:66:c6:78:3d:96:8c:88:0e:01:20:d2:ca:18:87:01:e4:
ec:93:80:be:5a:45:b0:37:df:0a:ad:bd:7d:2b:81:ae:cc:c9:
ec:91:5e:31:01:80:a6:51:c9:d5:b9:17:78:c6:79:48:b3:a0:
5d:19:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:22 2024 by rpki-client on console-fra.rpki-client.org