Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/8aFGdML5pwPEf7StNZrA5FIYCec.roa
File: 8aFGdML5pwPEf7StNZrA5FIYCec.roa (raw, json)
Hash identifier: yFhoxkR0D2q39rNKff6FOH3nfaMIi1ZLvwD09JsqeSA=
Subject key identifier: F1:A1:46:74:C2:F9:A7:03:C4:7F:B4:AD:35:9A:C0:E4:52:18:09:E7
Certificate issuer: /CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Certificate serial: 018CC8DE56A31AEEA72A2A90C610212E3550
Authority key identifier: 7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/8aFGdML5pwPEf7StNZrA5FIYCec.roa
Signing time: Tue 02 Jan 2024 06:31:03 +0000
ROA not before: Tue 02 Jan 2024 06:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35311
IP address blocks: 88.132.128.0/19 maxlen: 19
87.242.0.0/18 maxlen: 18
88.132.64.0/21 maxlen: 21
88.132.72.0/21 maxlen: 21
185.145.204.0/22 maxlen: 22
88.132.80.0/21 maxlen: 21
88.132.88.0/21 maxlen: 21
88.132.96.0/19 maxlen: 19
88.132.0.0/19 maxlen: 19
88.132.32.0/19 maxlen: 19
88.132.160.0/19 maxlen: 19
88.132.192.0/20 maxlen: 20
2a02:808::/29 maxlen: 29
2a02:808::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:56:a3:1a:ee:a7:2a:2a:90:c6:10:21:2e:35:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Validity
Not Before: Jan 2 06:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a14674c2f9a703c47fb4ad359ac0e4521809e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:a0:d6:eb:51:f2:32:83:e3:12:df:17:71:
d1:b7:a3:3d:0e:8c:e8:22:f2:be:c3:f6:20:ce:ad:
7c:9c:08:4f:a9:fc:bc:f5:a3:0d:ec:e1:70:9a:c4:
3c:77:ea:fb:e7:4f:ed:bf:6d:2e:83:31:d1:0c:f6:
99:19:5a:cb:7c:51:88:b7:77:9b:b4:12:d5:54:f3:
a3:fb:f9:29:99:a7:03:29:93:d2:21:40:04:83:98:
56:46:c7:93:6e:d4:e4:97:0b:96:9b:31:13:23:3c:
ec:1b:13:37:f7:91:42:43:ce:c3:89:64:a7:09:e7:
d9:f0:ce:53:43:f3:b5:9e:81:b5:70:40:10:34:e5:
da:ea:ae:a6:9b:17:70:92:ab:f2:26:c5:29:cb:12:
ff:b5:f9:b1:70:ff:f2:e5:de:40:0e:20:9a:8b:6e:
a5:cf:ef:a4:01:4d:e1:5b:17:cf:b5:d8:b9:fe:3b:
05:68:ec:e1:0e:64:61:f8:89:ce:1d:b5:3a:5e:41:
4a:ce:1b:c1:3e:d7:46:58:a8:7a:49:28:42:8c:36:
bb:61:f2:3b:c5:33:4b:61:8e:59:88:dd:e1:29:16:
e3:34:02:8f:c4:95:8a:41:e0:93:13:d9:4c:66:0e:
bc:1b:f7:e7:66:98:86:31:67:cd:81:e1:b4:2e:9f:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:46:74:C2:F9:A7:03:C4:7F:B4:AD:35:9A:C0:E4:52:18:09:E7
X509v3 Authority Key Identifier:
keyid:7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/8aFGdML5pwPEf7StNZrA5FIYCec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.242.0.0/18
88.132.0.0-88.132.207.255
185.145.204.0/22
IPv6:
2a02:808::/29
Signature Algorithm: sha256WithRSAEncryption
50:7f:87:4f:91:84:4d:7c:36:db:51:75:6f:a6:3a:07:c9:55:
78:8e:cd:95:85:54:95:55:88:29:17:01:e5:67:a1:5d:90:af:
05:4f:ad:5d:f4:31:8a:d3:3e:ea:e8:5b:97:f9:0c:a7:cc:2f:
ed:68:30:ab:f8:bf:1b:a4:ba:75:58:46:c5:3a:dc:2f:95:eb:
95:06:7b:20:2c:4b:9a:91:7a:df:74:ca:68:95:d4:ee:c9:0e:
99:0a:54:10:5f:0a:41:0c:3f:e2:9d:4f:84:94:58:ba:6e:bf:
68:bc:d6:4f:f6:be:fa:cc:77:b5:e0:ec:d9:c4:c6:31:42:be:
e7:93:9a:93:33:53:55:89:78:84:c0:f8:6b:13:64:3f:67:51:
80:33:6a:0c:83:61:6f:90:99:2f:91:c6:0c:8d:ff:44:a9:81:
36:e4:d0:4a:c9:f8:c4:94:75:25:bc:48:b1:7c:ea:0c:61:fe:
19:9b:76:a8:52:04:5c:54:46:53:1b:25:1d:b6:c9:81:cb:cd:
5a:86:ab:d2:e5:c9:99:e3:f1:a9:aa:03:a3:1a:a9:cc:49:53:
0b:3f:48:08:79:32:f8:e6:73:57:b9:0f:36:25:12:c8:10:5d:
18:f3:35:61:18:6b:d5:0c:57:d6:51:ea:60:d3:47:4c:5c:ca:
96:21:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:28 2025 by rpki-client