Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1v3Z2EBlFLTb8-Kuv8T8mBRfAaM.roa
File: 1v3Z2EBlFLTb8-Kuv8T8mBRfAaM.roa (raw, json)
Hash identifier: XHv4ZZhzO6nmhu5suJiet4hdsiTUuKzWsXzGkVEEbsU=
Subject key identifier: D6:FD:D9:D8:40:65:14:B4:DB:F3:E2:AE:BF:C4:FC:98:14:5F:01:A3
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 019363C55C429AD9C1BF30F018B812A6C7A5
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1v3Z2EBlFLTb8-Kuv8T8mBRfAaM.roa
Signing time: Mon 25 Nov 2024 14:41:38 +0000
ROA not before: Mon 25 Nov 2024 14:41:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400513
IP address blocks: 88.214.192.0/24 maxlen: 24
88.214.196.0/24 maxlen: 24
88.214.197.0/24 maxlen: 24
88.214.200.0/24 maxlen: 24
88.214.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:c5:5c:42:9a:d9:c1:bf:30:f0:18:b8:12:a6:c7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Nov 25 14:41:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6fdd9d8406514b4dbf3e2aebfc4fc98145f01a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:59:0a:77:38:a1:88:6d:99:81:cc:17:85:
14:cf:a5:b2:9d:75:3d:5c:5b:a0:93:17:6b:15:0c:
4f:7a:6c:62:e1:92:46:a1:4b:23:38:f5:f7:13:74:
85:af:c3:c6:e9:9e:cc:54:8a:2a:c0:76:b1:25:65:
ae:71:3b:d7:2c:5d:9f:31:33:16:67:4d:49:d3:b7:
95:32:b1:2f:90:2e:f1:81:cd:3f:bc:38:d0:5e:d2:
d0:28:9f:e7:0d:4b:91:7a:f5:c8:68:df:75:52:6d:
9c:eb:fc:f6:e0:20:27:a1:4b:9d:9f:f6:19:7d:76:
64:48:13:6e:32:ff:76:c7:d4:95:49:f6:44:8c:b5:
da:f8:eb:4d:71:69:38:30:aa:e0:6d:ff:97:93:b2:
61:c0:b6:4f:2f:6f:b5:1c:25:85:03:c3:93:26:88:
d7:a1:07:5d:d7:bc:39:d2:7d:a8:b9:d7:64:d7:36:
f1:84:7d:05:d2:b4:35:90:af:cc:04:4c:f9:45:b8:
fd:c6:a1:99:bd:79:91:1a:ae:d4:1d:a2:bb:8a:54:
21:42:5f:ab:1c:43:7d:e9:e2:42:18:8a:68:f4:af:
9b:fb:a2:57:c7:fc:3f:68:26:7c:ab:d1:b9:7a:12:
d1:b1:7b:f1:6d:05:16:01:36:2f:b8:8c:22:34:5f:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FD:D9:D8:40:65:14:B4:DB:F3:E2:AE:BF:C4:FC:98:14:5F:01:A3
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1v3Z2EBlFLTb8-Kuv8T8mBRfAaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.192.0/24
88.214.196.0/23
88.214.200.0/24
88.214.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:91:e5:fb:6a:0b:8f:1d:01:7a:4a:16:1c:0f:e5:bf:a3:e8:
5c:5c:2d:5d:4a:8b:b4:b4:db:f5:af:31:9d:02:1c:d8:d7:51:
97:82:cc:59:59:c6:89:e4:fa:2e:95:b9:d7:13:e1:0b:e1:c3:
84:e4:74:ec:19:49:47:c7:ba:c8:17:4a:ac:51:83:06:cd:74:
d9:d1:51:79:46:a9:f3:c9:ac:6e:a9:2f:2c:2a:9b:ee:d1:b9:
b1:e1:39:14:be:f8:24:d1:a5:21:f0:7a:50:48:66:f5:95:4a:
af:7f:8f:7b:06:43:30:09:c4:03:f9:4a:40:c6:75:64:10:e7:
33:4a:9d:50:01:42:87:36:8c:5a:f6:0c:70:2e:a8:ac:bc:38:
9c:db:e5:ed:20:bb:4f:09:aa:cb:72:11:5e:2c:8a:cc:1b:8e:
f4:a1:83:15:5c:65:97:dc:c9:8c:71:80:f6:f6:f9:cc:de:a2:
71:f4:ff:fe:d6:8d:04:8c:68:7b:e2:9a:99:5b:54:db:64:22:
0f:7e:42:fb:20:23:be:8d:8a:5d:2c:69:1b:51:74:a0:40:33:
df:91:3c:b0:3c:74:dd:24:ae:61:65:74:5c:e3:4b:13:b8:08:
2d:a8:ed:1d:20:cf:44:71:a5:fa:ed:20:03:66:49:aa:3a:a6:
83:0d:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:07:42 2025 by rpki-client