Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/5qOTCO-mIwfaMw_rat1aaC-N5mU.roa
File: 5qOTCO-mIwfaMw_rat1aaC-N5mU.roa (raw, json)
Hash identifier: wkNnTkbUIlizr17DlFXD3dFKdITM+5dHi/KSJD1ARWg=
Subject key identifier: E6:A3:93:08:EF:A6:23:07:DA:33:0F:EB:6A:DD:5A:68:2F:8D:E6:65
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 019230068E707E14BAF6FB20988123B2D72D
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/5qOTCO-mIwfaMw_rat1aaC-N5mU.roa
Signing time: Thu 26 Sep 2024 20:29:48 +0000
ROA not before: Thu 26 Sep 2024 20:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35042
IP address blocks: 88.214.25.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
193.24.208.0/22 maxlen: 22
194.24.160.0/24 maxlen: 24
2a12:5e41::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 27 Sep 2024 17:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:30:06:8e:70:7e:14:ba:f6:fb:20:98:81:23:b2:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Sep 26 20:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6a39308efa62307da330feb6add5a682f8de665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:46:42:6d:eb:6b:01:0d:01:8c:b5:eb:bd:
a7:7a:70:a1:a2:db:3b:4d:0b:b6:a9:3f:68:51:e0:
1e:0d:cd:2e:c7:60:36:93:45:ac:be:26:5c:58:37:
ca:b4:98:6b:66:d5:8d:bc:de:6a:73:82:3b:d8:28:
16:61:45:4d:26:ce:c2:d8:41:a9:c5:1c:42:86:ef:
68:9d:91:ef:3a:76:98:d6:6c:de:af:95:58:7e:ea:
d4:eb:a2:db:67:d9:ec:28:9a:66:23:54:34:d8:16:
8a:37:a7:42:19:d7:46:e7:d3:a6:d7:a1:7c:62:9a:
69:89:56:16:01:3f:14:9b:19:0c:74:52:75:e2:da:
69:01:45:bd:b1:0d:6a:d0:fa:7b:47:56:20:58:95:
64:48:d0:86:af:29:fc:06:e3:5e:de:a4:09:97:52:
7b:32:06:bf:1b:80:f9:26:e1:62:6c:dd:94:c8:cd:
4a:d1:16:86:b7:9d:ae:bc:1f:c9:06:45:76:42:5f:
88:34:ac:8f:39:10:e2:79:8b:76:f3:35:ac:e5:7e:
fe:d4:24:2f:e4:96:5c:00:f6:01:14:ac:ca:b7:aa:
f8:4c:f6:99:da:02:f2:5e:7e:e3:62:0b:c4:ac:85:
0d:82:b7:45:c6:35:c1:2a:14:13:95:be:23:ba:61:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:93:08:EF:A6:23:07:DA:33:0F:EB:6A:DD:5A:68:2F:8D:E6:65
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/5qOTCO-mIwfaMw_rat1aaC-N5mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
91.228.101.0/24
193.24.208.0/22
194.24.160.0/24
IPv6:
2a12:5e41::/32
Signature Algorithm: sha256WithRSAEncryption
31:4c:51:dd:a9:8e:a5:be:0a:0d:90:f4:e5:9e:85:a1:40:91:
32:d9:e8:cb:4e:c7:c2:d4:11:cc:2d:e6:79:86:32:52:68:2d:
90:ee:ad:ea:93:44:d9:24:6f:9d:37:ac:f9:00:3f:37:1b:65:
08:16:5e:95:1a:f0:f7:2f:e6:35:cb:93:5c:7b:b4:61:59:20:
64:30:9c:8b:fc:9d:af:48:e5:86:78:8a:63:dd:9f:6f:f7:4a:
9e:90:25:f8:50:78:d9:ab:36:ea:4b:aa:5b:2c:95:60:64:95:
4b:0e:b4:15:9a:43:36:68:8f:b1:4d:ad:bd:40:fe:45:f1:35:
ad:4e:2e:cb:96:b8:2c:a8:9d:57:44:71:4f:e2:2b:24:bf:18:
a7:7c:fc:73:94:fb:88:62:29:fb:c9:8f:3b:b7:91:2f:37:70:
19:87:8d:5a:ac:34:be:72:50:50:19:94:1f:01:97:91:0a:10:
55:f0:44:cb:44:9a:72:1c:65:74:2e:a0:ba:b5:58:13:80:b9:
33:d6:48:33:fa:a0:d3:d4:f3:c1:d6:8c:85:b3:6d:0d:82:c9:
3d:0b:0c:df:a6:83:95:98:5c:c0:ac:51:2f:96:cf:1e:74:e0:
a1:ba:a0:d1:b4:7c:c0:e0:b2:66:ee:bf:51:4c:d8:21:9e:d0:
b4:3d:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:50:42 2024 by rpki-client on console-fra.rpki-client.org