Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/LJk9CC3g1D0CFfApDqO8XEIR7VA.roa
File: LJk9CC3g1D0CFfApDqO8XEIR7VA.roa (raw, json)
Hash identifier: Yp6hPQk1XKed7qc83Oq5KLSilTgDEykOVki44gCJOuA=
Subject key identifier: 2C:99:3D:08:2D:E0:D4:3D:02:15:F0:29:0E:A3:BC:5C:42:11:ED:50
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 0192300778A98EB0B012B7CA9AD07A86D172
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/LJk9CC3g1D0CFfApDqO8XEIR7VA.roa
Signing time: Thu 26 Sep 2024 20:30:48 +0000
ROA not before: Thu 26 Sep 2024 20:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29551
IP address blocks: 88.214.25.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
193.24.208.0/22 maxlen: 22
194.24.160.0/23 maxlen: 23
2001:67c:2c58::/48 maxlen: 48
2a00:1910::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 25 Nov 2024 14:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:30:07:78:a9:8e:b0:b0:12:b7:ca:9a:d0:7a:86:d1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Sep 26 20:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c993d082de0d43d0215f0290ea3bc5c4211ed50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:09:50:c6:74:5b:2c:09:78:4a:c9:4b:f5:
99:34:35:bf:b6:27:1d:b9:08:1e:f6:0a:5a:5b:49:
8e:88:88:81:91:a2:7b:a1:2b:a5:3e:7a:c3:3f:7e:
a9:a9:24:85:3f:a8:a8:f0:cc:49:6d:2f:62:1e:3b:
f0:e0:3a:d0:19:55:79:8c:a0:57:ea:da:b0:e7:6f:
6f:e4:88:26:97:bb:c5:3b:21:31:e2:b4:3e:ac:86:
01:bb:cc:f3:8c:69:cc:1d:96:48:fa:e6:7f:03:30:
05:73:ca:bc:0a:c0:9e:52:32:b1:a8:0e:b2:77:c0:
ca:de:6f:ad:2f:a7:7f:f5:6b:7e:dd:cd:32:98:61:
4b:f2:84:a8:04:68:d0:6c:d2:a1:3e:02:88:f7:2c:
0c:fd:a7:87:9a:36:4d:f6:c1:9d:d6:c1:01:e1:06:
22:ee:82:28:52:19:9a:5a:ef:3d:5c:f0:83:4f:b0:
e1:6f:ac:67:42:21:4e:04:1e:cc:a8:41:6b:80:8a:
63:37:4a:7d:d3:23:36:c9:62:4c:58:61:88:2d:1b:
8f:30:79:b0:ee:44:3b:59:60:3f:88:c4:bb:36:ad:
78:78:e8:95:a9:fc:75:fd:bb:6a:4a:65:7b:4b:87:
25:46:40:2b:1c:d0:9a:4b:80:13:c3:07:48:51:f0:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:99:3D:08:2D:E0:D4:3D:02:15:F0:29:0E:A3:BC:5C:42:11:ED:50
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/LJk9CC3g1D0CFfApDqO8XEIR7VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
91.228.101.0/24
193.24.208.0/22
194.24.160.0/23
IPv6:
2001:67c:2c58::/48
2a00:1910::/29
Signature Algorithm: sha256WithRSAEncryption
62:1d:c7:ea:48:ac:bc:80:ee:6d:a4:16:8a:b7:c9:e7:ac:37:
b4:44:18:2b:1c:34:8a:59:5b:a3:b6:3b:7f:cb:af:55:30:ae:
64:f6:0b:3f:15:8e:e2:2e:d1:fd:81:e3:42:c9:e2:fe:4c:49:
9b:b7:a1:22:18:c2:45:01:13:16:c8:3e:5e:37:54:79:5f:87:
56:fb:2b:e7:d9:27:42:fd:d0:a6:54:81:60:df:7d:c9:ab:2d:
58:52:8e:d3:71:56:bc:25:b9:a2:91:ac:6e:b8:ab:71:1e:63:
a0:de:7d:74:c7:23:75:95:b3:3b:1b:00:dd:27:7e:c7:71:21:
d5:e8:44:06:66:f3:26:23:24:84:ad:fb:67:3a:2a:7b:e3:01:
eb:42:93:d5:65:df:35:09:d7:d8:08:17:34:e4:fa:7e:11:a8:
24:12:53:18:50:9d:cd:03:29:fd:7c:ae:b9:c3:b3:49:6f:15:
62:a7:16:bf:b8:88:2c:cc:e6:c2:a5:7b:54:a8:59:40:c6:69:
7a:98:e6:f4:ee:28:24:f2:90:bb:b1:67:b7:ef:cb:ce:7c:46:
ea:f8:44:7b:b4:bc:70:b2:c7:b9:7c:dd:33:d3:9f:46:ca:97:
00:7a:e7:4d:6e:6c:87:13:8e:7f:ce:ec:35:16:2e:85:00:cb:
4c:3f:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:15:39 2024 by rpki-client on console-ams.rpki-client.org