Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/kqat5UYAizRXoX-M7PT6LvJBLZ8.roa
File: kqat5UYAizRXoX-M7PT6LvJBLZ8.roa (raw, json)
Hash identifier: oFifc1XcBv/AJRm8XR0jGNaC7lfSBqYiI5CUmqr8uuE=
Subject key identifier: 92:A6:AD:E5:46:00:8B:34:57:A1:7F:8C:EC:F4:FA:2E:F2:41:2D:9F
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 01935C4D4CD48ACA8E25CDFC6F747C68C01B
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/kqat5UYAizRXoX-M7PT6LvJBLZ8.roa
Signing time: Sun 24 Nov 2024 03:53:10 +0000
ROA not before: Sun 24 Nov 2024 03:53:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212345
IP address blocks: 88.218.113.0/24 maxlen: 24
88.218.115.0/24 maxlen: 24
93.179.90.0/23 maxlen: 24
93.179.91.0/24 maxlen: 24
178.57.68.0/24 maxlen: 24
2a0f:52c1:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Dec 2024 10:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5c:4d:4c:d4:8a:ca:8e:25:cd:fc:6f:74:7c:68:c0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Nov 24 03:53:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92a6ade546008b3457a17f8cecf4fa2ef2412d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:cb:32:4d:51:1c:30:aa:e4:5c:e7:f8:fe:
91:a9:25:43:62:94:24:9a:de:b9:28:f9:45:17:1d:
81:c2:6f:f8:1a:5f:15:07:f2:f6:03:b0:ad:7c:51:
6e:cc:36:65:a2:a2:e3:bd:d5:d7:01:cb:9e:92:de:
72:7a:07:6c:b8:c6:ae:fa:97:f3:1f:e5:6e:d5:c8:
09:ff:0c:d8:ca:08:f8:6c:03:65:03:c1:16:2d:00:
a5:cd:fb:c0:c4:90:a9:ac:48:6f:c4:5a:23:6d:af:
13:9e:f7:11:a2:00:cf:1a:90:e7:51:93:3b:81:8c:
ad:e1:70:98:11:e1:18:f2:cb:ff:08:6c:97:c8:d0:
76:11:a5:b6:19:e0:f6:97:02:f4:90:83:e7:25:23:
07:ce:26:9a:74:f9:62:2d:18:2e:22:a2:7c:dc:53:
7c:23:60:2f:19:23:5b:45:94:8d:cd:3b:f4:54:d4:
ee:f3:9a:0e:c5:52:f2:e7:10:ee:63:76:90:fd:cd:
4e:a5:5d:98:a9:06:d6:53:68:9d:9b:57:aa:fb:63:
34:b8:48:0c:43:25:0f:0e:dc:c8:b5:92:92:67:8e:
08:f1:2a:f3:6d:13:d0:9e:5c:84:a9:81:0a:e9:e3:
31:f1:63:f1:d6:ba:8b:d6:19:f1:a7:c1:24:08:9c:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A6:AD:E5:46:00:8B:34:57:A1:7F:8C:EC:F4:FA:2E:F2:41:2D:9F
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/kqat5UYAizRXoX-M7PT6LvJBLZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.113.0/24
88.218.115.0/24
93.179.90.0/23
178.57.68.0/24
IPv6:
2a0f:52c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
4b:67:15:65:c0:d0:48:28:fa:e4:04:75:63:b6:66:c9:f7:80:
08:ab:1f:57:f6:8e:07:8c:75:3a:62:f8:d8:2f:40:29:43:83:
8a:ec:f1:32:45:7a:5b:bc:8c:bf:71:dd:ed:6c:1c:b4:f0:f7:
d0:71:d2:fd:5a:57:cd:95:35:47:da:37:b5:32:6f:7a:af:9e:
66:cb:af:01:ac:3b:ae:93:da:7f:81:2a:91:d0:8e:59:d7:c9:
69:63:57:1d:2a:5a:d3:c7:34:7b:75:ce:f2:9f:d8:fa:eb:b4:
64:69:4c:d2:86:9b:75:82:75:35:16:7b:14:84:ff:54:7a:70:
cd:d4:d7:ec:c4:ca:40:6f:07:28:02:86:0c:a8:a1:aa:32:d5:
01:84:ca:a8:4a:e2:ac:a6:08:b8:c9:8c:07:69:4c:32:51:d0:
3d:5e:d9:b7:c9:89:17:09:d6:8d:fd:fb:3d:e3:5b:a4:8a:18:
34:61:b8:fe:62:5c:61:b2:ea:b5:e7:65:db:9d:05:96:0f:33:
e6:99:3c:16:df:5f:47:39:64:79:94:6c:41:b0:55:c1:5b:77:
14:d5:d2:95:d9:ba:98:3e:d4:50:18:f0:04:44:c4:8b:b2:60:
4a:a1:70:b3:df:ff:81:bd:48:1c:f7:c3:9b:9a:27:9e:29:f6:
75:8e:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:28:18 2025 by rpki-client