Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8Lk_1tSxd3hIaPcWLj2Vs9UHjCg.roa
File: 8Lk_1tSxd3hIaPcWLj2Vs9UHjCg.roa (raw, json)
Hash identifier: a+3LqpgtQVDkg43iK9rkz1W0MifqZAdyShJNsJt+4h0=
Subject key identifier: F0:B9:3F:D6:D4:B1:77:78:48:68:F7:16:2E:3D:95:B3:D5:07:8C:28
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018896ED45662CB0A99DA4CE892F5B713EB6
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8Lk_1tSxd3hIaPcWLj2Vs9UHjCg.roa
Signing time: Wed 07 Jun 2023 17:35:12 +0000
ROA not before: Wed 07 Jun 2023 17:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 193.31.126.0/24 maxlen: 24
88.218.45.0/24 maxlen: 24
88.218.47.0/24 maxlen: 24
193.151.189.0/24 maxlen: 24
193.151.191.0/24 maxlen: 24
193.151.190.0/24 maxlen: 24
178.20.28.0/22 maxlen: 24
45.159.22.0/24 maxlen: 24
45.159.21.0/24 maxlen: 24
194.99.24.0/24 maxlen: 24
77.83.24.0/22 maxlen: 24
194.99.26.0/24 maxlen: 24
83.97.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 15:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:ed:45:66:2c:b0:a9:9d:a4:ce:89:2f:5b:71:3e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jun 7 17:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0b93fd6d4b177784868f7162e3d95b3d5078c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:9b:5f:0a:56:d1:a7:55:1b:73:74:3d:fc:
cd:33:02:bd:d5:f1:d6:e8:12:7a:ea:67:4b:6c:fd:
19:e0:cc:60:75:ae:0a:86:f1:8b:ac:89:06:b5:30:
d1:c1:10:3b:c7:46:b9:c4:8f:fc:c1:0c:a9:89:63:
69:85:48:2b:d6:08:8c:19:9d:d1:5f:67:66:9d:85:
ec:9a:74:5e:47:3c:4c:68:ec:38:10:a5:29:e4:f4:
0c:c4:2a:56:45:b1:6b:e6:33:c0:1b:e0:74:71:85:
c1:05:0b:13:99:99:db:2f:23:99:a1:31:cc:2b:c2:
f4:33:ae:aa:53:14:ff:b4:47:a6:d5:4f:43:ee:ea:
fc:54:97:86:83:24:07:fb:8c:0e:38:b0:1d:e1:9b:
ec:1d:c6:3d:7f:26:86:17:a1:fa:28:d7:1a:82:d5:
4d:86:ad:49:53:40:7d:22:29:58:b0:3a:91:bb:9c:
bc:67:6a:ed:37:df:1b:14:19:7e:8a:c8:e2:ca:64:
a9:da:4e:0c:e0:7b:f2:db:42:fc:e7:31:22:20:2f:
ed:65:90:ed:9b:3f:65:4b:35:71:63:34:3d:20:a4:
a6:a9:28:e4:3d:c4:55:3e:db:57:fd:dc:07:e0:38:
4b:22:17:9f:b8:5c:ac:87:9f:0c:cc:ef:e0:dc:90:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B9:3F:D6:D4:B1:77:78:48:68:F7:16:2E:3D:95:B3:D5:07:8C:28
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8Lk_1tSxd3hIaPcWLj2Vs9UHjCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.21.0-45.159.22.255
77.83.24.0/22
83.97.116.0/22
88.218.45.0/24
88.218.47.0/24
178.20.28.0/22
193.31.126.0/24
193.151.189.0-193.151.191.255
194.99.24.0/24
194.99.26.0/24
Signature Algorithm: sha256WithRSAEncryption
02:75:3f:9a:a3:4e:12:2d:18:42:b7:41:e9:f0:8c:00:5d:d0:
9a:4a:62:db:7f:b5:ca:e1:f1:6a:52:77:53:40:8a:01:62:9a:
1b:30:b4:8f:b3:78:35:51:70:74:5b:ab:63:30:3f:70:21:62:
b0:62:7a:de:6f:c0:a7:27:7b:0a:ff:4e:5b:fe:91:69:2a:c2:
a2:c6:71:d5:af:59:e3:be:77:ac:2c:e4:b0:ff:52:66:33:e8:
37:5c:1d:91:9f:6e:31:77:57:39:3d:bc:e5:a3:6f:c3:2e:d7:
b6:dd:98:f3:3a:42:be:ea:e6:2e:99:28:67:9c:d6:fd:0d:2b:
ed:cc:08:25:6a:ed:4a:68:64:dd:0a:c9:c3:ce:ab:99:4d:aa:
f9:5d:ad:86:53:29:cb:4f:1b:da:88:74:49:c4:dc:62:d0:19:
f8:b9:5d:58:03:52:f2:2e:4f:fe:a3:02:30:4b:97:63:5a:bf:
f7:5d:3f:35:a2:60:fe:f7:9a:81:6b:d3:a7:fe:03:95:8f:ec:
18:d9:bb:dc:1d:d8:6e:67:aa:fa:fe:0c:0d:85:69:b6:e9:02:
d3:18:9f:c1:7a:4f:1f:57:94:1e:cf:60:f1:ba:03:7d:df:c6:
8e:75:ad:c7:96:71:fd:db:5f:6d:3a:63:0e:b3:16:92:9c:d2:
0d:30:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org