Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/9afG2f7Lvs72wtBc2AbNhAcBAZo.roa
File: 9afG2f7Lvs72wtBc2AbNhAcBAZo.roa (raw, json)
Hash identifier: HpctB2YGtCJTcI1QFLyl5HWo27ckeQT9EBu33C9gYSY=
Subject key identifier: F5:A7:C6:D9:FE:CB:BE:CE:F6:C2:D0:5C:D8:06:CD:84:07:01:01:9A
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 018CC6B793D6C0C4F603BD847F0625AD9671
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/9afG2f7Lvs72wtBc2AbNhAcBAZo.roa
Signing time: Mon 01 Jan 2024 20:29:28 +0000
ROA not before: Mon 01 Jan 2024 20:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212345
IP address blocks: 88.218.115.0/24 maxlen: 24
88.218.113.0/24 maxlen: 24
93.179.90.0/23 maxlen: 24
2a0f:52c1:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 08 Oct 2024 08:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:93:d6:c0:c4:f6:03:bd:84:7f:06:25:ad:96:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5a7c6d9fecbbecef6c2d05cd806cd840701019a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:2a:30:73:f4:2f:ae:33:c9:88:de:9d:6d:
a6:a7:36:ff:7f:85:d2:87:8e:5f:f9:f0:92:80:1e:
ce:16:5c:66:4e:0c:51:56:44:04:6b:8c:15:2b:25:
71:ed:be:62:c6:64:62:a4:c9:2a:34:b7:a1:ea:34:
84:a3:ce:d2:ca:a0:7e:64:e4:f0:4c:9d:a4:4e:44:
30:8c:6a:8c:22:5e:8b:66:d6:39:8e:22:99:fb:2b:
af:48:50:e5:cc:2f:ef:6e:73:14:19:44:f6:f6:00:
85:08:dd:19:f0:18:a0:ae:a3:dc:3e:2e:b5:9e:e8:
e6:68:3b:6e:15:13:d6:56:ff:ed:a3:bf:46:f0:70:
84:18:70:9f:4f:60:8e:e7:f0:6b:7a:d4:9b:24:53:
a8:3e:37:ab:61:e0:c9:4a:f6:a0:ae:18:26:5c:31:
82:93:e0:09:eb:6d:34:2a:24:84:5c:1d:43:1c:97:
85:36:6d:85:9a:24:a3:1a:10:49:5a:38:65:55:f6:
73:44:2e:27:c1:3c:00:c5:36:c1:26:ea:01:d1:3f:
c5:4f:2f:0b:9a:62:aa:ae:55:2b:8f:7e:68:5f:d1:
55:b2:b1:9e:15:39:3e:65:73:b2:9a:d1:9c:89:8f:
12:32:41:4e:af:3d:65:2d:11:f1:65:a0:6f:15:5c:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:C6:D9:FE:CB:BE:CE:F6:C2:D0:5C:D8:06:CD:84:07:01:01:9A
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/9afG2f7Lvs72wtBc2AbNhAcBAZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.113.0/24
88.218.115.0/24
93.179.90.0/23
IPv6:
2a0f:52c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
94:1b:60:41:e8:cf:8e:f9:f6:46:2e:74:3d:8e:57:2f:d7:9a:
ed:12:0c:31:be:d3:28:ad:57:3a:49:1f:49:e7:cd:94:3b:c5:
67:c2:ca:9b:06:82:d4:f3:23:75:ee:0c:c6:94:e2:87:ce:c8:
9c:04:2a:75:0a:9e:b8:35:60:78:3f:3b:f6:e6:df:42:eb:b5:
02:91:7f:9a:4c:b8:53:35:5f:b7:96:11:40:04:aa:b0:24:94:
f2:0b:c0:16:bf:55:88:6f:64:fa:f6:e5:af:f4:a9:2e:24:77:
29:6a:3e:e9:fa:fe:b8:65:19:da:1b:24:ff:23:15:97:20:2f:
78:a9:17:26:2c:01:96:a7:d4:52:ba:19:ac:56:08:7d:95:a9:
05:56:c4:b0:b1:46:e7:42:af:0d:46:e4:92:d4:db:cf:8f:5c:
6c:bd:45:c1:d2:0f:72:9f:5b:e0:b2:fd:05:48:9f:36:16:c8:
0e:c1:4c:96:68:3e:17:53:fe:58:27:eb:2f:e8:7a:31:7a:aa:
73:e7:ab:fe:cb:14:37:04:3c:e9:07:76:97:c5:2e:88:a0:62:
0d:ee:c4:0b:e2:80:d7:95:57:79:41:a3:ce:78:f3:2e:a0:6c:
7d:4b:b2:92:fa:61:8f:7c:41:fd:fb:7a:e3:f4:f8:9d:de:ef:
94:4e:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:07:02 2025 by rpki-client