Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/krkdoEqwkJavin3zoIWGEv7RqF4.roa
File: krkdoEqwkJavin3zoIWGEv7RqF4.roa (raw, json)
Hash identifier: qQUWz55sbWV0mfAibEWfU2ZyO5BcMs2sg92qdCnO5ms=
Subject key identifier: 92:B9:1D:A0:4A:B0:90:96:AF:8A:7D:F3:A0:85:86:12:FE:D1:A8:5E
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 019364C71A22250B7BAFC62CF899EF553157
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/krkdoEqwkJavin3zoIWGEv7RqF4.roa
Signing time: Mon 25 Nov 2024 19:23:10 +0000
ROA not before: Mon 25 Nov 2024 19:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29551
IP address blocks: 88.214.25.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
193.24.208.0/22 maxlen: 22
194.24.160.0/23 maxlen: 23
2001:67c:2c58::/48 maxlen: 48
2a00:1910::/32 maxlen: 32
2a00:1911::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:c7:1a:22:25:0b:7b:af:c6:2c:f8:99:ef:55:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Nov 25 19:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92b91da04ab09096af8a7df3a0858612fed1a85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:53:b2:d4:03:24:08:ed:f4:00:ce:0c:1f:
c6:e0:c3:09:f7:c6:ca:6d:6c:40:bf:8d:0c:cb:58:
49:37:66:9a:07:85:6e:bc:da:50:bd:b1:a2:1a:7c:
28:4a:7f:41:d0:fd:c1:2b:ea:95:c2:36:bd:95:6f:
d7:b1:4f:dd:9d:f6:c1:64:fc:65:f3:35:39:86:06:
c1:db:98:69:b5:bb:89:2c:bb:ed:e1:cc:b7:71:70:
c4:35:6e:52:18:13:43:f9:0c:f0:bc:81:59:90:b1:
99:60:4f:53:66:45:52:05:b8:1d:98:56:da:9c:33:
3e:c2:bb:b3:6f:aa:90:d0:d5:ce:33:44:30:9a:37:
58:e0:fb:06:e0:fd:5c:7e:ed:78:8d:e4:6c:ab:8b:
39:4c:52:b9:3b:b4:5a:92:4e:37:d2:b5:78:f1:2a:
6c:38:f4:f2:17:47:4f:b0:b3:31:f7:42:f6:79:d4:
ba:1a:93:15:37:ad:72:db:0f:c0:a5:84:11:e2:12:
c0:54:78:71:71:e4:8a:e0:6c:e5:35:1d:d1:59:db:
d2:99:33:c8:19:f2:69:25:57:1d:eb:fa:47:1c:85:
2f:a5:e6:d1:ff:3d:bf:42:9a:6a:ba:73:3f:3d:5c:
7b:ef:68:35:9e:6f:bb:f3:6e:b8:a0:9f:01:58:1b:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:1D:A0:4A:B0:90:96:AF:8A:7D:F3:A0:85:86:12:FE:D1:A8:5E
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/krkdoEqwkJavin3zoIWGEv7RqF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
91.228.101.0/24
193.24.208.0/22
194.24.160.0/23
IPv6:
2001:67c:2c58::/48
2a00:1910::/31
Signature Algorithm: sha256WithRSAEncryption
8d:90:9a:97:77:6b:2c:1a:09:2b:63:d1:d2:f5:6e:16:f8:e1:
ee:f7:8c:36:26:9f:c6:ee:21:98:fb:5d:37:d8:7e:8f:6c:d0:
c4:a8:5a:fe:d9:ac:14:13:3c:45:12:86:c6:c5:41:55:3c:e5:
00:a3:8d:16:e0:3d:92:d7:2f:db:48:25:82:d6:86:82:46:95:
c9:c0:26:ee:09:21:3e:1c:93:88:8a:79:98:8c:ad:b1:86:50:
5d:7b:a9:a0:08:ec:89:45:93:23:2c:60:68:60:f2:15:3f:d4:
6c:99:d3:05:db:25:22:a0:5f:eb:ce:63:1f:b3:b0:97:ff:25:
5a:35:90:e0:cc:17:b4:1d:25:bc:39:65:6d:fa:61:63:38:6d:
b0:97:46:e0:90:e6:ec:12:2b:fa:f1:a3:d3:6c:6c:ef:48:fa:
f9:ab:9c:a9:92:f5:4f:60:ce:86:c5:a9:f2:0e:21:65:0c:54:
64:57:0a:c5:f6:20:6d:8f:c0:aa:36:6a:d0:89:1d:ed:a5:8a:
5b:5d:db:1d:7c:e7:58:13:2c:d5:32:83:b5:06:b5:18:5b:a4:
37:2c:82:3f:8f:0c:96:2e:34:17:d9:cf:7d:49:94:4a:13:8f:
23:89:c4:61:65:18:cc:b0:10:29:d2:7d:9b:67:54:ea:82:e7:
b0:21:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:36 2025 by rpki-client