Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/uqCLF490OTlQyNb_ATj_jOrDMbQ.roa
File: uqCLF490OTlQyNb_ATj_jOrDMbQ.roa (raw, json)
Hash identifier: TbHpxs5sdNBZJtzXilTw4+eunl/hCcg3jtA40fH3HK0=
Subject key identifier: BA:A0:8B:17:8F:74:39:39:50:C8:D6:FF:01:38:FF:8C:EA:C3:31:B4
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018F819BB145CB1311ECC4A92163F01BBB56
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/uqCLF490OTlQyNb_ATj_jOrDMbQ.roa
Signing time: Thu 16 May 2024 13:33:35 +0000
ROA not before: Thu 16 May 2024 13:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 88.151.11.0/24 maxlen: 24
91.210.71.0/24 maxlen: 24
109.205.62.0/24 maxlen: 24
193.200.61.0/24 maxlen: 24
193.228.131.0/24 maxlen: 24
195.69.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 10:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:9b:b1:45:cb:13:11:ec:c4:a9:21:63:f0:1b:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: May 16 13:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baa08b178f74393950c8d6ff0138ff8ceac331b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:3c:9c:79:04:a3:62:bd:4f:7a:98:2e:d9:
11:d3:89:44:82:7e:67:e7:70:91:89:61:26:81:7c:
a3:79:a5:a0:81:0f:f4:1e:2e:87:fd:2b:08:38:fb:
ef:55:ca:9d:eb:42:dc:f4:8c:e1:5a:63:ff:ef:48:
d4:5e:f8:a3:76:b2:d7:88:7d:cc:ce:1e:d6:ba:e3:
e1:79:d6:ca:2f:8d:13:65:1a:ec:05:4e:62:1d:8b:
99:73:a7:c4:76:4c:c7:3e:9c:56:f6:2b:89:6a:8b:
00:9e:f0:9a:80:b1:59:49:24:a4:2c:c6:3e:63:c3:
ab:eb:c1:bf:1d:c3:b4:28:a5:5b:a3:d1:72:1c:0e:
5f:ef:fd:d6:9b:f2:74:d4:43:d6:15:c7:e0:64:6e:
27:4d:cd:cd:47:e5:3d:06:77:cd:1a:d1:55:48:30:
5a:06:8f:e0:10:2d:61:80:aa:d9:2c:c7:b3:0b:10:
99:ed:44:59:d3:75:42:60:0e:2f:d5:16:14:3e:74:
b3:cf:08:f0:5f:4c:59:4e:51:a7:65:22:96:09:dd:
f7:db:ff:23:ed:ae:9c:d7:54:20:36:91:5d:b6:72:
92:6c:1a:11:dc:23:1c:15:a0:37:81:fe:35:9e:4a:
8c:be:04:73:ba:e7:31:79:0e:64:50:8f:da:22:a1:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A0:8B:17:8F:74:39:39:50:C8:D6:FF:01:38:FF:8C:EA:C3:31:B4
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/uqCLF490OTlQyNb_ATj_jOrDMbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.11.0/24
91.210.71.0/24
109.205.62.0/24
193.200.61.0/24
193.228.131.0/24
195.69.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c7:b6:ee:00:e1:21:41:54:1c:71:de:0d:d1:3b:73:06:fb:
1b:0c:ae:f5:0b:56:15:9d:fb:58:96:f7:1f:c9:79:21:0f:af:
d8:77:a4:2e:8e:dc:58:0a:53:17:e1:11:03:61:29:ea:39:2a:
b7:73:35:ce:b8:b6:dc:84:fb:37:b7:0e:d7:85:0e:f6:ca:fc:
83:e5:9d:31:2f:20:20:97:1c:85:b7:21:de:3b:9a:8f:bd:16:
16:cf:e9:6c:2c:87:3e:3f:cd:b7:67:4d:b8:f6:95:d0:69:98:
83:d5:e6:fe:b1:03:79:cc:4b:fe:28:bb:94:da:1b:58:a9:da:
cc:ab:ab:3c:80:46:31:d9:17:0a:cb:88:c2:a5:5f:30:53:00:
77:08:5c:f1:27:ce:ec:f4:be:0c:b0:5f:42:ee:c7:a3:20:c1:
05:29:b2:9c:5a:32:fe:64:f0:e6:47:ae:00:33:c4:80:ce:1e:
0e:2d:6f:a6:9b:80:eb:e3:27:e6:d1:8d:8f:c2:0f:da:1f:e6:
5c:b7:c1:c8:42:b0:73:99:8b:60:92:ff:ef:ef:61:db:9c:66:
d7:73:57:80:ef:30:6a:28:5e:6c:58:aa:2d:2f:9e:ea:c6:06:
04:b4:ad:72:76:ad:24:ba:50:8c:82:e6:94:5d:69:2f:88:c0:
63:02:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 12:35:49 2024 by rpki-client on console-fra.rpki-client.org