Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/8MU8XhQsi0-y1Ux57Vifuor5UUU.roa
File: 8MU8XhQsi0-y1Ux57Vifuor5UUU.roa (raw, json)
Hash identifier: trgF6yoAl2aGhnmRohvpD4mQ2M1FWuVWfirzouQ0ej0=
Subject key identifier: F0:C5:3C:5E:14:2C:8B:4F:B2:D5:4C:79:ED:58:9F:BA:8A:F9:51:45
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018D640202D2ECBE5BBBF61834886A4411CE
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/8MU8XhQsi0-y1Ux57Vifuor5UUU.roa
Signing time: Thu 01 Feb 2024 09:31:09 +0000
ROA not before: Thu 01 Feb 2024 09:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 188.66.26.0/24 maxlen: 24
193.108.59.0/24 maxlen: 24
193.108.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 08:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:02:02:d2:ec:be:5b:bb:f6:18:34:88:6a:44:11:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Feb 1 09:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0c53c5e142c8b4fb2d54c79ed589fba8af95145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:cc:2e:07:c5:1e:13:25:3d:ff:d2:a0:31:
3e:2a:d4:96:c5:a3:e3:7c:1f:4d:f2:8f:f7:c7:4a:
64:cf:2b:6b:5f:1b:f0:ad:fc:c4:7a:ad:40:de:19:
c2:39:6e:f9:8f:ea:3d:06:d1:6c:c7:bb:48:53:fe:
ad:97:a3:a6:10:30:eb:a9:1d:d7:47:45:db:03:a3:
ee:22:f5:b0:83:24:56:0a:ec:e5:41:bd:f3:1e:35:
36:0b:7e:07:84:fc:b1:c8:a3:64:bd:3c:7a:66:3b:
6c:8d:62:4b:1d:28:dd:4f:b4:cb:25:65:4b:6e:9e:
ea:2e:08:f5:5f:0f:e9:a4:db:11:3e:10:b4:db:13:
22:9f:06:bc:08:4a:5f:c0:f0:c3:7b:9c:65:76:f5:
20:f6:99:47:81:4f:32:ef:bc:56:0e:45:d5:a4:b5:
a1:a0:62:25:00:32:14:26:83:d2:44:10:e4:35:b1:
82:d1:7f:fb:68:d6:da:39:06:64:9d:b5:b6:01:41:
5f:95:4d:c9:9e:a8:10:d3:36:14:6f:ce:86:a1:46:
7d:bb:c3:60:0e:79:49:c0:67:3f:f0:93:1c:60:0f:
55:97:8e:65:bf:50:c2:51:05:0e:23:54:eb:1f:8b:
11:45:8d:1d:34:1f:cf:5e:8a:d6:ef:d5:01:03:55:
68:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C5:3C:5E:14:2C:8B:4F:B2:D5:4C:79:ED:58:9F:BA:8A:F9:51:45
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/8MU8XhQsi0-y1Ux57Vifuor5UUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.26.0/24
193.108.59.0/24
193.108.105.0/24
Signature Algorithm: sha256WithRSAEncryption
61:37:b7:9f:5e:53:ca:77:9d:7b:2b:3b:6d:20:89:61:c7:6b:
1f:53:60:86:53:9b:8d:fb:dd:c4:e3:65:ec:c1:55:1c:7f:fa:
7b:4f:0f:8e:78:d2:0e:44:ef:9d:ee:a8:ef:94:e8:80:e3:45:
19:8f:dc:ea:db:e9:d4:4d:43:a5:33:68:8b:cd:51:96:f8:ca:
39:2c:73:5a:76:1d:3f:ee:28:07:08:d9:31:a4:01:2e:73:5c:
da:26:4e:62:af:dd:7a:3e:0c:9c:f3:e1:95:06:f7:a3:94:95:
34:51:eb:b6:7e:ef:82:c0:fc:f2:9d:1e:90:3f:8c:3e:18:c1:
7d:3a:ea:47:91:ac:cf:06:83:b9:dd:76:98:a8:66:9f:fb:52:
b7:94:76:3c:df:70:a0:77:39:15:62:43:64:d9:50:e2:11:9b:
46:f9:8f:b9:58:c4:f2:38:be:d0:4d:1a:fe:a2:70:fa:ff:12:
71:34:8b:4b:ec:a5:a7:44:66:7f:14:f2:63:0b:ec:46:ae:8e:
af:07:92:00:17:ad:4f:a9:b7:ad:b4:a1:ac:c2:87:48:ee:ed:
4e:eb:37:19:be:96:cf:95:98:fb:5f:d0:ce:01:bb:30:6a:40:
cc:40:dd:e9:9b:07:28:dd:50:95:c7:c4:bf:88:58:21:0d:08:
bd:a4:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 12:00:01 2024 by rpki-client on console-fra.rpki-client.org