Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9KPNhnKmZWohfgWmj2ckeQTvIwQ.roa
File: 9KPNhnKmZWohfgWmj2ckeQTvIwQ.roa (raw, json)
Hash identifier: OzzkfrUDbimd7Eflc3ssc/48D0K2h9yOCDHQaSOtLUo=
Subject key identifier: F4:A3:CD:86:72:A6:65:6A:21:7E:05:A6:8F:67:24:79:04:EF:23:04
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01923E28B7894CAF11CC5876AE86907CEFDE
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9KPNhnKmZWohfgWmj2ckeQTvIwQ.roa
Signing time: Sun 29 Sep 2024 14:21:48 +0000
ROA not before: Sun 29 Sep 2024 14:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199912
IP address blocks: 88.214.24.0/24 maxlen: 24
185.55.240.0/24 maxlen: 24
193.24.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 22:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3e:28:b7:89:4c:af:11:cc:58:76:ae:86:90:7c:ef:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Sep 29 14:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4a3cd8672a6656a217e05a68f67247904ef2304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:bf:e2:79:f5:ea:31:10:43:96:ea:b9:be:
f5:43:01:8a:48:67:c6:31:dd:9e:eb:9a:64:ff:8a:
35:46:e7:46:05:ec:f1:84:a8:99:0b:8c:5d:ff:eb:
7d:16:ce:bd:09:72:a4:be:e3:0f:e9:89:31:12:6c:
11:14:0c:5b:5a:8c:73:8f:6b:94:dc:45:7c:67:cc:
a6:0f:82:81:c5:7d:33:23:00:63:9a:98:32:44:3b:
d2:39:c2:09:39:e6:1c:1d:99:de:a6:bf:0f:0a:a7:
00:19:6f:09:60:cd:90:c5:78:2e:c5:d5:24:d8:5c:
77:c3:e9:d2:5c:87:1e:f1:4f:7f:35:38:13:a5:88:
b7:76:dd:e6:66:a0:2f:2a:64:a1:39:5b:c6:f6:21:
ef:26:c8:34:d9:0b:aa:3e:cd:33:c6:b5:e0:a9:a2:
cc:24:b0:9c:ac:73:16:05:3b:87:94:5d:a8:c0:dd:
89:4b:1c:d7:13:54:58:01:7b:0f:c7:11:53:9d:f7:
95:e1:c4:01:2f:0e:89:17:f0:ee:5d:e3:87:3c:cd:
91:34:0e:82:ab:51:89:ac:d2:b1:c8:3c:bf:09:23:
f8:00:d8:4a:56:1c:6a:2a:a8:a5:ca:64:e0:1c:f4:
fc:1a:59:b2:90:2c:8f:90:84:f4:27:b5:1e:f5:5a:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A3:CD:86:72:A6:65:6A:21:7E:05:A6:8F:67:24:79:04:EF:23:04
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9KPNhnKmZWohfgWmj2ckeQTvIwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.24.0/24
185.55.240.0/24
193.24.211.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b3:a8:e5:2e:5a:7b:eb:aa:05:d3:0e:bc:f6:4f:72:6d:59:
ba:19:b0:77:06:e4:b3:74:7d:1c:19:1d:3b:a1:50:ac:3f:ec:
96:7b:e3:89:ad:d4:15:65:cc:a3:55:e6:89:eb:94:9d:ef:54:
b6:f4:f4:7a:38:9b:c2:7e:7b:8a:18:68:3e:26:ca:b9:f7:57:
ae:22:5c:18:87:6d:d2:5f:19:d5:26:cf:15:b8:c1:a7:f3:b5:
76:f1:f5:64:7f:48:8f:da:fd:cc:50:95:ab:f5:73:ed:38:cf:
08:b7:19:de:03:f0:35:25:73:36:8f:e1:6b:68:83:fd:97:23:
f9:1b:3b:2d:58:27:f8:e7:ea:4f:b0:05:b3:4d:7f:7b:32:67:
12:8a:dc:06:f6:3f:48:47:fb:2f:9f:5d:ff:ab:4b:87:6c:2b:
4e:37:b7:08:dc:ce:9a:c8:c1:ab:cf:e1:55:b6:c4:af:06:f7:
e9:05:50:dc:51:37:cb:79:43:87:1c:94:2c:bd:10:11:b8:5a:
01:4a:81:9b:20:5e:5c:18:6e:42:aa:e1:5e:12:c7:6b:6d:37:
fd:b9:91:77:48:88:68:02:8a:93:a3:fb:ef:05:b3:3e:cb:a3:
c6:fb:50:10:1a:0c:e3:21:b6:05:1f:b0:5d:4a:1f:5e:52:9c:
35:30:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 00:17:56 2024 by rpki-client on console-ams.rpki-client.org