Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/88D5yuk7HDxGti6OL4IdRliYdyY.roa
File: 88D5yuk7HDxGti6OL4IdRliYdyY.roa (raw, json)
Hash identifier: g4JKhIRGlL9Wy5trgKLzzoz08WQnrN8AVIyMD1qbKJo=
Subject key identifier: F3:C0:F9:CA:E9:3B:1C:3C:46:B6:2E:8E:2F:82:1D:46:58:98:77:26
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018CC94DFD76F4BEF85D2EDFD795A9D84B85
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/88D5yuk7HDxGti6OL4IdRliYdyY.roa
Signing time: Tue 02 Jan 2024 08:33:00 +0000
ROA not before: Tue 02 Jan 2024 08:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31554
IP address blocks: 89.44.214.0/23 maxlen: 23
89.39.110.0/24 maxlen: 24
89.35.160.0/23 maxlen: 23
89.33.248.0/23 maxlen: 23
89.37.156.0/23 maxlen: 23
89.33.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 14:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:fd:76:f4:be:f8:5d:2e:df:d7:95:a9:d8:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 2 08:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3c0f9cae93b1c3c46b62e8e2f821d4658987726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b6:3f:1c:8e:dd:c5:df:87:46:ae:1b:cb:78:
1b:d6:8b:77:8c:d6:a4:04:b0:12:6c:2c:96:e9:27:
dc:31:89:67:72:96:68:ef:b8:9b:59:5a:26:83:72:
f6:f8:e8:5a:af:42:79:78:f2:62:5b:b1:6b:c4:a7:
a8:23:41:c5:a4:42:00:6f:0f:ac:2b:39:0b:33:ac:
16:11:68:93:f6:6f:d5:2f:f4:28:9d:e3:20:34:72:
54:da:ef:31:7c:61:4b:da:c0:39:dd:34:c7:80:7a:
b2:32:7e:8f:54:55:9a:f6:a5:53:e3:62:58:35:99:
4c:50:3d:1e:03:d7:3c:cf:d5:c9:cb:b0:a8:e9:ee:
94:e3:7f:c6:9b:6d:cd:49:35:73:f8:31:37:92:37:
5f:7e:3c:7b:01:63:c8:da:85:20:15:91:7c:bf:66:
32:58:3d:1c:11:81:ce:db:48:83:4f:0d:ae:0a:41:
22:8e:3f:28:c8:aa:b1:2e:9c:b8:f8:bc:b1:c2:df:
14:7b:67:68:bd:03:7d:2b:25:5c:b7:96:4c:4f:b1:
61:18:17:fa:cb:34:06:59:89:12:cb:ad:55:87:53:
78:a3:1d:ad:07:b1:e9:54:f7:87:77:2f:74:aa:1b:
22:83:0a:b5:82:f3:78:bc:e7:c3:47:4a:3d:d7:c6:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:F9:CA:E9:3B:1C:3C:46:B6:2E:8E:2F:82:1D:46:58:98:77:26
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/88D5yuk7HDxGti6OL4IdRliYdyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.5.0/24
89.33.248.0/23
89.35.160.0/23
89.37.156.0/23
89.39.110.0/24
89.44.214.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:2e:ac:9e:9e:de:91:9e:13:3c:d3:56:2a:a7:11:81:30:83:
70:66:2e:c3:b8:8a:2c:26:9c:e7:fd:dc:f5:3a:5f:cc:fa:93:
b5:9a:96:05:ec:8c:84:f4:23:b2:4b:0e:7c:6c:df:75:90:e3:
17:93:9d:1f:66:d4:37:7f:5d:f5:34:fb:c0:2f:8a:ea:71:d3:
0d:01:c7:96:9c:8f:6f:aa:e3:43:06:8c:43:cd:c8:ea:91:34:
4c:58:f6:1d:cb:4d:33:5c:12:70:ac:f0:50:de:6d:ea:d9:2a:
c1:0e:7c:bd:36:ae:b9:68:65:52:ce:bb:30:d9:88:cb:d8:a5:
1f:46:e6:82:db:3e:0a:56:2c:3a:c3:87:aa:57:18:e0:0f:77:
57:f2:f4:f6:cc:70:3a:a6:cb:36:87:61:9f:35:ae:39:30:00:
62:4f:8c:e8:a0:46:22:b3:38:88:f7:eb:17:39:ee:47:72:1f:
94:d2:72:ed:b6:89:d5:f3:8b:74:80:4d:a9:7f:f1:be:9c:e0:
fa:2b:f6:40:cb:65:c2:f1:fc:52:23:72:3d:3f:c1:f2:b7:bb:
1a:b0:81:fd:f8:c7:f2:fc:34:da:67:43:5d:39:b8:6d:40:a2:
58:9b:b5:cc:54:28:2a:d3:69:4b:2c:74:96:3c:fc:e2:24:24:
85:f7:03:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:29 2024 by rpki-client on console-fra.rpki-client.org