Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/88oiu6VhmC1Pu9SLg6b6abQh_oE.roa
File: 88oiu6VhmC1Pu9SLg6b6abQh_oE.roa (raw, json)
Hash identifier: p+x6pc6NNolDcyrVY2oOAtcHI6TnCUcgT478No9+GqQ=
Subject key identifier: F3:CA:22:BB:A5:61:98:2D:4F:BB:D4:8B:83:A6:FA:69:B4:21:FE:81
Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial: 0185737191CCF4F5F320AFD0FC1FD1DEBC36
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/88oiu6VhmC1Pu9SLg6b6abQh_oE.roa
Signing time: Mon 02 Jan 2023 17:05:00 +0000
ROA not before: Mon 02 Jan 2023 17:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 217.28.163.0/24 maxlen: 24
193.32.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:91:cc:f4:f5:f3:20:af:d0:fc:1f:d1:de:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Validity
Not Before: Jan 2 17:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3ca22bba561982d4fbbd48b83a6fa69b421fe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:54:be:84:89:44:82:37:9e:48:e4:56:b1:
ce:07:36:4e:9a:a5:e9:ab:49:97:c3:58:85:38:cc:
24:78:0f:cc:bd:d9:3b:86:f6:01:08:09:c5:e6:08:
a4:de:70:e9:1e:3f:bc:70:3e:cd:26:26:16:9b:78:
6a:dc:82:42:9b:90:f6:7e:8f:58:f8:09:1f:34:cf:
b1:cc:68:5e:b7:52:d8:a6:19:07:90:34:bc:f6:a2:
df:8a:55:1e:78:14:dc:78:9b:de:82:8a:b0:2c:f3:
96:ee:7b:16:ac:66:2d:a2:18:48:b1:da:0c:de:16:
4a:70:95:64:02:c0:1c:dc:2e:9a:76:75:4f:96:02:
5a:98:f5:fb:46:9a:33:4e:da:67:6d:7a:00:85:47:
cf:8b:98:d1:bf:66:c4:22:3e:1a:16:75:8f:e1:e9:
9d:da:96:0f:6e:d4:cc:d2:19:c9:17:89:62:bf:42:
02:67:45:09:53:ef:77:a2:6c:3e:f3:86:4a:3f:10:
1b:18:fa:77:4e:7e:72:a0:f0:2d:fc:48:d6:75:7e:
d8:64:f7:bd:13:2f:91:0e:dc:58:ba:27:42:9f:e9:
b8:63:57:78:bf:48:c1:93:66:45:a6:c9:0a:c7:76:
ce:25:e4:04:37:42:e1:73:a4:5f:5f:3c:14:f1:60:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:22:BB:A5:61:98:2D:4F:BB:D4:8B:83:A6:FA:69:B4:21:FE:81
X509v3 Authority Key Identifier:
keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/88oiu6VhmC1Pu9SLg6b6abQh_oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.244.0/24
217.28.163.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4b:5f:bd:51:95:15:89:98:6d:2b:61:46:98:c1:b3:1c:ed:
de:7d:75:50:1f:5e:9d:65:75:53:93:9a:62:b3:29:64:be:ba:
14:65:ac:f5:03:4a:1d:a7:d4:c5:27:b5:04:52:89:5c:6b:2d:
e6:26:62:74:ab:f3:80:b2:9c:6f:ad:c5:51:71:95:e1:e5:66:
cd:32:b9:20:7c:3d:2b:e8:dd:d5:52:9a:4a:63:09:d8:f0:43:
7c:36:29:b8:23:28:c3:1a:77:ff:ca:93:39:f8:f8:1d:a7:94:
df:72:99:90:c9:e7:b8:03:61:9f:2a:c6:b0:a0:2f:81:06:7d:
07:36:82:a9:98:a9:02:f4:b5:64:88:48:e4:09:20:77:e1:8c:
7c:95:e2:66:2b:fd:74:6a:50:7e:5b:9d:83:71:a0:b7:0f:a0:
76:10:e3:74:60:87:c4:6e:cc:e2:8d:23:e8:d6:2f:d2:b3:d4:
23:57:3a:38:cd:4d:a6:27:1e:44:62:33:ed:a8:97:5e:03:55:
38:46:f5:d1:e5:de:9f:0d:3c:94:e1:16:2d:b0:64:87:df:b8:
ef:31:ba:13:18:de:ac:6a:22:e8:20:69:31:c4:a3:c5:30:b6:
06:30:97:8c:63:4f:0f:fa:73:0b:94:12:c5:17:5d:4e:5e:95:
e2:1b:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:25 2024 by rpki-client on console-fra.rpki-client.org