Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0qV8RV6Zx6SbdbAb0SxntEfcc3w.roa
File: 0qV8RV6Zx6SbdbAb0SxntEfcc3w.roa (raw, json)
Hash identifier: uAjdB4WTOwfCaeXEY1sSbIWR06tks1U0Z+x7hhICD70=
Subject key identifier: D2:A5:7C:45:5E:99:C7:A4:9B:75:B0:1B:D1:2C:67:B4:47:DC:73:7C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187216EDED06B8E2BEFE26F3FB588C80945
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0qV8RV6Zx6SbdbAb0SxntEfcc3w.roa
Signing time: Mon 27 Mar 2023 04:58:46 +0000
ROA not before: Mon 27 Mar 2023 04:58:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 45.88.14.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 13:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:6e:de:d0:6b:8e:2b:ef:e2:6f:3f:b5:88:c8:09:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 27 04:58:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2a57c455e99c7a49b75b01bd12c67b447dc737c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:c6:72:50:18:ff:70:95:2b:72:d6:ad:fd:
6b:02:76:5e:7f:fe:97:73:66:9a:cf:99:74:ce:b2:
24:b2:de:cd:13:cb:2f:74:f4:7d:66:24:d8:1d:c2:
61:86:1c:29:e5:9b:6f:6c:79:c1:96:6a:b9:19:68:
8d:c0:33:36:ab:d5:83:33:de:e7:ca:8e:1a:33:07:
3f:da:48:22:16:b1:19:38:aa:28:43:09:ac:e9:74:
48:ea:92:13:f1:58:38:5e:04:81:a9:01:86:b5:b6:
ef:86:27:e2:02:49:2f:3a:7d:4f:13:9a:7c:4e:62:
cb:13:bd:19:06:7d:0d:d2:0a:95:15:54:b4:02:74:
ea:78:1d:fb:78:0f:e3:7e:9b:5e:3c:83:6a:6f:10:
d6:85:56:8f:3f:32:24:a4:c3:2b:d4:4f:a8:4e:c5:
93:7c:1f:7c:37:a0:43:11:ce:09:5c:54:82:1c:b8:
be:b2:e9:f7:0b:e2:dc:40:73:e8:81:af:f3:75:65:
98:4b:c4:dd:16:7b:c7:33:5b:73:e6:33:42:2f:93:
7e:9b:14:e3:24:d7:d2:67:da:f8:e8:9b:09:9f:aa:
ee:bf:f1:cd:52:92:6b:06:e9:8d:09:2a:6e:2c:1d:
44:ae:22:2f:26:f5:ce:87:d3:af:ec:9d:33:33:9f:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:7C:45:5E:99:C7:A4:9B:75:B0:1B:D1:2C:67:B4:47:DC:73:7C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0qV8RV6Zx6SbdbAb0SxntEfcc3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1d:ce:b6:8e:11:ba:6d:91:fa:be:38:36:cc:bf:2e:ea:30:
a4:af:b8:c8:7e:f0:3b:5e:7e:55:02:59:b0:0f:ea:a4:0f:01:
4b:0a:d5:63:91:c0:1b:b7:de:58:58:4a:b6:00:95:1c:d7:14:
e2:9c:77:f0:22:d7:d2:fe:0e:12:2e:3e:db:f2:a1:be:32:a8:
fd:4a:cb:2d:77:5c:1d:a1:bb:e1:5f:e9:76:fe:80:a7:fe:b1:
27:5c:6f:ac:72:22:cd:10:a7:0f:5d:9d:32:26:ae:b5:2d:36:
cc:ae:b2:bb:10:bc:9f:b7:a9:ee:40:e0:a2:dc:45:62:a4:20:
d3:89:28:99:ea:3d:32:56:35:d9:ce:35:43:f0:ed:69:16:e3:
56:a8:66:ee:47:11:ad:92:0c:cf:91:ae:ba:c3:e3:b2:4c:9b:
54:d8:23:81:1a:b9:18:4d:3a:62:ab:8b:1b:f9:17:a0:f8:d0:
f0:f5:72:b4:95:c8:67:fb:f5:15:12:be:a8:1b:41:ff:15:8e:
77:c7:d3:0c:da:7f:8c:3c:e2:19:1a:62:36:34:8e:eb:a3:6a:
f6:79:6d:de:8b:76:ef:41:ed:63:b8:f7:2e:3f:e1:5d:de:8c:
ae:4c:c4:da:5e:3d:fa:1d:47:52:58:1c:d5:35:a9:a3:d8:f8:
d9:9f:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:05 2024 by rpki-client on console-fra.rpki-client.org