Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/E96WfruXO5uVpqzuBY_s6iQLwFI.roa
File: E96WfruXO5uVpqzuBY_s6iQLwFI.roa (raw, json)
Hash identifier: ilJdSKn2dJiF0lAnHG8lx5+sJ/ntUGIT+x4rQsCKDbg=
Subject key identifier: 13:DE:96:7E:BB:97:3B:9B:95:A6:AC:EE:05:8F:EC:EA:24:0B:C0:52
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 018CC64AFDBD77BBD4C8B2A8E4FAC6D11EF1
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/E96WfruXO5uVpqzuBY_s6iQLwFI.roa
Signing time: Mon 01 Jan 2024 18:30:52 +0000
ROA not before: Mon 01 Jan 2024 18:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16154
IP address blocks: 88.213.194.0/23 maxlen: 24
88.213.200.0/21 maxlen: 24
80.95.24.0/21 maxlen: 24
217.79.64.0/19 maxlen: 24
2a02:7900::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Apr 2024 17:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:fd:bd:77:bb:d4:c8:b2:a8:e4:fa:c6:d1:1e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Jan 1 18:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13de967ebb973b9b95a6acee058fecea240bc052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:a4:13:ef:4d:80:c1:a6:1f:c8:77:a0:d6:
c4:40:e0:24:eb:9e:b6:36:bc:03:44:fc:02:a2:09:
17:b8:21:a5:37:7d:d7:63:4c:6f:ea:4c:fd:05:a9:
68:27:d2:88:2e:1e:6c:a6:c0:93:e1:0a:f1:7c:ee:
d5:9c:71:d2:c9:cf:2d:ce:fe:48:a1:fd:08:48:4f:
c4:e9:f6:d8:b3:7f:6f:9b:f3:87:0d:a6:59:f7:f7:
77:38:cf:6f:49:9c:e6:b3:e7:f1:fe:30:3e:72:3c:
db:ea:4a:41:e6:3e:05:12:3b:25:a4:c4:89:ca:4b:
b2:68:25:58:90:4b:44:9f:ad:26:19:8a:dc:6b:cd:
f0:b5:59:18:6a:0b:87:1a:c8:54:5d:12:6f:b7:70:
2e:28:fa:16:09:f9:42:54:8c:c6:c0:c6:25:91:c6:
b2:25:48:15:74:72:10:29:54:a3:98:3c:40:a0:f9:
4b:a5:02:41:e6:2b:4b:bd:67:71:d4:63:dd:c5:fa:
b8:77:98:17:d5:1b:16:3f:77:a1:e0:8f:73:3d:11:
70:1d:6c:e4:f9:aa:23:6a:b5:1c:f3:f4:10:46:bd:
ec:ba:1a:bf:e8:d4:b4:49:77:5d:63:7e:e2:02:f7:
ff:e0:79:0d:4f:8c:7e:be:b0:6c:9a:23:94:25:d5:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DE:96:7E:BB:97:3B:9B:95:A6:AC:EE:05:8F:EC:EA:24:0B:C0:52
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/E96WfruXO5uVpqzuBY_s6iQLwFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.24.0/21
88.213.194.0/23
88.213.200.0/21
217.79.64.0/19
IPv6:
2a02:7900::/32
Signature Algorithm: sha256WithRSAEncryption
6f:24:6c:c5:fc:bf:ed:a7:61:b6:52:e9:fc:67:cd:3c:45:14:
84:4d:09:c7:3b:5e:b0:99:2b:7b:96:39:06:7d:a2:11:e8:6a:
09:6f:a0:34:8e:ea:27:49:f0:00:85:be:fa:61:a1:6a:14:b6:
e5:e2:5a:c5:fd:c9:7d:ed:19:cc:ec:af:38:eb:36:3b:65:54:
3b:1a:31:ae:6c:4b:4a:53:f4:d3:bb:90:d5:41:b8:9f:10:aa:
95:ad:28:04:ee:28:33:96:eb:2c:4a:d8:13:18:ae:aa:96:40:
8a:05:07:42:c6:80:1d:f4:b7:c9:59:f6:0c:53:6c:36:a4:56:
e9:f1:04:44:52:02:f6:c9:93:f3:46:0b:11:51:40:be:71:82:
19:9b:0a:ed:d9:51:e6:58:2a:39:63:6c:a2:36:88:ca:34:3c:
b4:a1:3b:27:5c:5b:ff:eb:dc:54:c5:f3:96:b3:d7:b8:54:be:
1c:d0:70:0a:c5:48:a0:e2:40:a3:25:cb:43:1f:d9:6e:bc:28:
06:ee:6e:7d:50:06:d5:c0:7c:fe:1e:7d:1c:13:5a:07:a4:28:
7a:6c:a8:f1:f3:f7:bb:7a:cc:de:45:c5:10:0a:34:59:a5:a8:
a3:44:4b:90:0b:e8:a7:08:cb:23:7b:6b:a1:5f:9c:37:cd:d4:
5c:e1:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 20:28:55 2024 by rpki-client on console-ams.rpki-client.org