Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Pq01fX7NcKCIV-UOrcu-HA775rM.roa
File: Pq01fX7NcKCIV-UOrcu-HA775rM.roa (raw, json)
Hash identifier: iw254gqp0fA0t7ktXZVEgvHIl/9F+heyMq4jVnT0kDk=
Subject key identifier: 3E:AD:35:7D:7E:CD:70:A0:88:57:E5:0E:AD:CB:BE:1C:0E:FB:E6:B3
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E3337B32C68C806D6B90DD0A12204
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Pq01fX7NcKCIV-UOrcu-HA775rM.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39005
IP address blocks: 95.157.192.0/18 maxlen: 18
88.219.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 15 Nov 2024 15:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:33:37:b3:2c:68:c8:06:d6:b9:0d:d0:a1:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ead357d7ecd70a08857e50eadcbbe1c0efbe6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:38:0e:79:2d:c1:84:27:21:12:7b:73:a3:
9e:40:18:3e:90:57:16:b7:3b:03:2e:5d:41:36:e8:
0c:ac:60:75:29:87:5e:93:0a:a4:44:8a:5f:44:8e:
e5:c9:f5:b3:b7:45:e5:86:ec:5f:31:5b:12:97:f0:
ed:3c:d0:4d:a2:92:d2:8a:71:60:eb:9c:36:93:cb:
61:3c:e7:fa:d1:29:30:3c:21:69:5e:d4:0a:28:71:
02:76:4f:0f:0e:32:ba:f9:e7:ac:8d:88:a7:40:b5:
b2:c4:68:6c:32:6f:c7:a0:0b:6a:de:3b:ec:d4:a2:
b7:f8:27:d2:04:2a:0a:2d:2e:63:69:a0:d9:28:9d:
1e:18:69:de:57:07:52:f3:a3:07:da:c7:9f:3a:37:
23:97:c0:91:e3:50:dc:9e:40:86:9a:df:12:d4:bc:
1d:d9:d6:fe:2c:a3:6f:aa:b3:6b:13:0d:ce:b5:f4:
f6:0e:92:f0:2d:7f:94:7c:45:34:72:77:ca:42:0f:
a2:57:88:ca:bc:e3:fb:a8:45:59:2d:e6:43:58:99:
29:9f:24:17:4f:65:fa:23:2b:0f:c9:b2:ad:0b:28:
11:d4:12:db:2b:78:6a:78:75:57:bb:28:fc:11:6f:
54:fc:b2:cb:18:99:35:08:dd:39:3f:1b:d4:0b:78:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AD:35:7D:7E:CD:70:A0:88:57:E5:0E:AD:CB:BE:1C:0E:FB:E6:B3
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Pq01fX7NcKCIV-UOrcu-HA775rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.219.0.0/16
95.157.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:fd:60:1c:4b:d5:0d:38:af:40:51:1e:e0:68:b0:59:15:34:
71:64:b1:34:40:3a:d3:1d:b6:0a:66:a6:90:fd:15:9f:35:d3:
14:de:36:ad:56:ef:71:da:6d:e3:fe:40:d2:d3:40:cc:a4:30:
76:89:bb:55:ad:9d:6b:d3:93:2a:52:fd:98:6b:6c:d9:d6:af:
cc:09:39:33:2a:b8:98:6b:47:da:25:d1:f8:fb:10:c2:71:f5:
1e:30:5e:fd:e7:a2:92:21:2c:16:b9:bf:0e:e3:26:3e:4b:1b:
81:e6:18:25:91:6f:24:fc:5e:31:e5:18:b5:c3:da:1a:f9:60:
7b:5f:68:b3:db:6f:e4:98:20:5f:0a:07:cb:f1:db:16:26:9e:
92:80:4a:4c:94:d4:44:05:a0:f4:e3:1d:11:30:bb:c9:c6:b6:
e7:bd:eb:63:c3:af:af:f2:f5:a1:f1:da:f9:30:cf:55:76:87:
2c:27:81:5d:ed:a6:fa:3a:03:dc:e0:ca:ec:4b:f2:fd:7b:54:
9b:60:c3:77:2f:5b:ac:52:8c:7b:c9:e4:a6:2f:75:eb:30:95:
28:ac:22:cb:d4:86:30:f7:58:56:7b:21:13:0d:1b:fe:9a:1e:
50:76:9c:be:a3:33:f1:06:f5:b1:5b:33:be:a5:19:68:98:c0:
c1:1e:1e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:37:23 2025 by rpki-client