Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/sJqK94gcVbZdSZ7q3Rmj4uiRI84.roa
File: sJqK94gcVbZdSZ7q3Rmj4uiRI84.roa (raw, json)
Hash identifier: a7PWkdegbNQlKFkXtp86b12btwCgxvwMaPAagvAIuj8=
Subject key identifier: B0:9A:8A:F7:88:1C:55:B6:5D:49:9E:EA:DD:19:A3:E2:E8:91:23:CE
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01923007796D66ACE7CD8F99991D6A01AF71
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/sJqK94gcVbZdSZ7q3Rmj4uiRI84.roa
Signing time: Thu 26 Sep 2024 20:30:49 +0000
ROA not before: Thu 26 Sep 2024 20:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199912
IP address blocks: 88.214.24.0/24 maxlen: 24
193.24.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:30:07:79:6d:66:ac:e7:cd:8f:99:99:1d:6a:01:af:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Sep 26 20:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b09a8af7881c55b65d499eeadd19a3e2e89123ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8b:16:ec:c5:e2:69:38:5a:62:57:38:76:4c:
7a:3f:6f:eb:79:a5:1e:26:d1:b0:9c:c3:8c:28:e6:
7c:28:ed:6d:9c:f2:01:23:d4:fa:7a:b3:b5:3a:ad:
8f:6d:33:3d:af:80:d4:28:76:a3:12:28:b8:54:bd:
18:4d:6f:6b:ec:af:2d:9a:cf:26:6c:9a:57:8d:c9:
15:23:62:88:52:cb:61:5f:80:be:f3:b3:ad:2e:1e:
43:5d:93:05:bb:98:0d:95:79:32:2c:6a:38:81:2b:
38:ca:1c:db:a1:38:13:70:a8:d4:7c:26:47:ea:23:
d0:d7:26:7e:bb:09:82:64:e4:4c:80:47:10:7c:34:
c4:fe:bb:c4:d9:8e:b1:24:64:b1:37:7c:da:5c:79:
05:8e:89:2c:2b:9f:e3:a3:d6:54:50:d4:b1:ec:f3:
2d:55:85:85:37:fc:30:ac:0a:aa:64:b8:6d:d8:b7:
45:3e:94:8d:44:5b:15:9d:ba:82:d2:5c:fb:a2:e0:
82:0e:91:e1:3b:a8:7e:93:17:d6:e2:43:78:be:32:
ba:a5:78:90:37:bc:b3:09:80:f3:f2:55:ee:d7:44:
67:59:bc:30:0a:a0:e4:66:6c:ce:18:f8:23:c1:eb:
d8:35:d7:0d:ba:dc:4f:8e:1a:f4:05:e5:db:92:a3:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9A:8A:F7:88:1C:55:B6:5D:49:9E:EA:DD:19:A3:E2:E8:91:23:CE
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/sJqK94gcVbZdSZ7q3Rmj4uiRI84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.24.0/24
193.24.211.0/24
Signature Algorithm: sha256WithRSAEncryption
13:02:89:4f:41:1f:dd:11:85:4a:f5:1f:c5:92:c7:fa:8a:23:
87:32:ba:bf:19:0f:4a:a0:8b:96:4c:9e:0a:ed:94:42:a9:d1:
de:20:05:76:48:ee:d4:30:e5:ea:9b:17:a3:14:d2:af:83:42:
93:92:fc:2e:1b:21:a0:3a:b2:5e:15:0f:c8:78:e8:88:0e:8c:
72:da:f3:05:44:9c:dd:b2:c4:7d:1e:3c:57:97:83:b6:02:42:
f2:c5:fa:dd:53:9d:f2:ec:13:ab:4e:a7:da:06:9a:51:87:ab:
6a:20:e3:a8:1d:d1:a7:58:74:88:ec:c2:ec:20:3c:8f:ce:4d:
06:03:f1:9c:ab:1f:0c:58:51:fc:10:7a:b8:08:ca:23:c6:6e:
f4:c3:4d:27:86:86:16:9e:a1:16:a1:94:ff:c1:c5:9a:75:2b:
9c:fe:5c:f4:96:ea:9c:4f:fc:08:01:d5:a0:73:87:e6:40:92:
32:14:a4:f9:e3:3b:24:36:5f:21:b1:8a:36:a0:ed:69:4b:54:
ca:63:20:82:11:95:d3:91:ab:7c:59:41:a9:93:32:f3:dd:1f:
95:6b:af:14:e8:35:b7:b5:5c:e7:08:cb:3b:86:5b:d8:c1:ba:
09:42:b4:6f:bc:75:98:dd:d5:39:33:10:c4:89:3a:da:c9:f4:
bb:88:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 18:25:07 2024 by rpki-client on console-ams.rpki-client.org