Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/L2tcaKRpJznxNFbjeRi3MjlpXLk.roa
File: L2tcaKRpJznxNFbjeRi3MjlpXLk.roa (raw, json)
Hash identifier: ThFwqPATEqZVaGmr6b7dqsqpdI9+3/qE+qwPO6rBVHw=
Subject key identifier: 2F:6B:5C:68:A4:69:27:39:F1:34:56:E3:79:18:B7:32:39:69:5C:B9
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018705E1588556F0953FD5E594C2C6BC78BF
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/L2tcaKRpJznxNFbjeRi3MjlpXLk.roa
Signing time: Tue 21 Mar 2023 20:34:27 +0000
ROA not before: Tue 21 Mar 2023 20:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 178.20.28.0/22 maxlen: 24
88.218.47.0/24 maxlen: 24
88.218.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 22:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:e1:58:85:56:f0:95:3f:d5:e5:94:c2:c6:bc:78:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 21 20:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f6b5c68a4692739f13456e37918b73239695cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:bc:6c:ba:3a:29:fc:ec:1d:9f:a7:71:fb:
05:ec:4c:72:70:4b:58:30:68:b3:57:db:de:9d:d9:
0c:a2:33:39:a8:48:d1:88:04:eb:05:d1:66:f8:bb:
fb:79:ed:fd:ae:c0:8c:58:73:b7:1c:a7:e1:07:d1:
2b:44:c2:eb:21:88:3b:20:35:86:4e:4a:3d:a8:e8:
6f:67:e7:db:42:04:ad:a8:bf:1a:e2:8f:38:83:62:
f9:65:d6:d6:8e:b8:65:b8:dc:7a:54:f6:63:28:03:
a7:1b:d7:af:85:79:7d:b9:f1:e3:09:d8:6b:c4:83:
93:ac:0b:a7:f7:ff:2c:48:dc:68:82:73:c5:c6:90:
00:d7:fb:6d:e1:9e:36:3d:0b:72:0b:b5:d0:cb:07:
78:43:e3:f2:cf:d2:af:bb:a9:fe:71:21:c0:41:c8:
e6:db:a7:a5:05:bf:59:82:ac:f8:5a:1e:1a:e5:45:
5b:ba:78:c2:89:52:b9:ec:34:da:60:71:63:8d:22:
10:3e:aa:88:e3:a1:ab:83:c8:4d:3f:8f:1b:18:9b:
2c:56:d0:57:98:2f:f2:76:7d:fd:3a:29:51:2c:a9:
dd:7f:45:fc:45:42:77:e2:f4:63:ea:6b:f3:3d:7b:
dc:fd:97:fd:59:f6:ba:75:a7:55:c7:ba:3a:4a:71:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:5C:68:A4:69:27:39:F1:34:56:E3:79:18:B7:32:39:69:5C:B9
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/L2tcaKRpJznxNFbjeRi3MjlpXLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.45.0/24
88.218.47.0/24
178.20.28.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:34:63:ac:2a:36:9d:5c:24:87:a5:2a:e3:96:1f:03:c8:b9:
b9:95:a3:ac:9d:6c:94:cd:8b:3a:f2:75:a7:f7:c7:3f:56:fa:
2d:68:4d:3e:50:e9:7a:e9:c6:22:a1:a2:24:b9:48:3f:89:33:
01:0f:26:12:f7:c0:a5:f1:39:87:32:86:b4:6c:5f:49:58:22:
83:ac:e8:3e:6a:b3:2c:81:b6:16:b9:72:06:07:e3:f0:5e:56:
76:5d:9c:5d:2f:43:26:d4:4f:58:a6:77:14:5f:6c:83:cb:8f:
95:9f:8d:04:cb:71:dc:f8:44:73:84:71:32:cd:09:e1:a4:c6:
ae:00:b0:ec:4f:0d:df:a1:54:b0:34:8f:ef:ee:a5:10:4a:a4:
d0:22:01:e9:f7:22:30:20:dd:b4:8d:90:44:e5:43:e0:40:44:
75:1f:9e:84:68:ad:14:b5:c4:61:28:2b:47:2c:2b:dc:ed:20:
c7:ab:3a:be:5c:96:e3:53:6e:d6:fa:d2:e2:cf:68:3c:b7:e2:
87:96:5c:c4:e0:bd:7c:a4:31:2d:fc:c3:d2:50:49:1c:96:a2:
3d:9e:bd:fb:6f:70:ab:de:59:4b:b2:4f:45:ef:94:d2:bd:e8:
f8:6d:24:78:2a:2f:62:4c:57:64:09:c1:fd:16:07:23:88:92:
d4:bc:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org