Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/QBj5s8opf28nBO6_mCjC86KIsjg.roa
File: QBj5s8opf28nBO6_mCjC86KIsjg.roa (raw, json)
Hash identifier: ynVpf6HFUEJhn/LfBUHUFlX08EDaIF8K9aE3GR6braw=
Subject key identifier: 40:18:F9:B3:CA:29:7F:6F:27:04:EE:BF:98:28:C2:F3:A2:88:B2:38
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 01914262B85F6365D13F11A00CF0CE71D440
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/QBj5s8opf28nBO6_mCjC86KIsjg.roa
Signing time: Sun 11 Aug 2024 17:00:51 +0000
ROA not before: Sun 11 Aug 2024 17:00:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214431
IP address blocks: 88.135.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:42:62:b8:5f:63:65:d1:3f:11:a0:0c:f0:ce:71:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Aug 11 17:00:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4018f9b3ca297f6f2704eebf9828c2f3a288b238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:0b:ea:f3:8c:c8:7b:41:25:40:13:ae:8e:
33:6d:14:f1:db:02:d1:bb:b0:6c:a2:81:43:fc:3c:
68:09:e2:c2:a4:b1:98:d4:15:cc:aa:51:69:ed:fd:
f4:b2:6a:30:4d:25:3d:07:aa:d5:db:66:f0:99:15:
33:0d:78:8d:18:af:e3:b7:50:4c:76:da:d8:20:9c:
11:71:73:03:6f:34:6b:3f:71:38:99:58:62:cc:9d:
dc:95:f4:9d:24:4c:ee:fe:9b:86:63:05:27:35:9d:
fd:d6:ef:98:83:94:08:fd:48:83:4d:e2:be:5a:16:
fe:29:e9:1a:ea:ba:fa:4b:07:86:9c:cf:62:e5:29:
41:9e:ce:17:07:66:ea:99:86:22:d8:4f:83:ec:de:
53:52:4a:f9:cf:2d:bb:cb:ac:de:d7:56:74:9a:18:
4b:c8:30:95:47:18:df:5a:83:98:d8:8b:0a:c2:b5:
c3:01:72:ec:e8:a7:7f:d6:54:b8:a6:21:fa:13:10:
a6:71:63:f7:65:be:da:a0:6a:79:0a:3d:45:e4:fa:
82:95:39:8c:2d:7c:40:23:bd:ae:6f:bf:8b:2e:d4:
8c:ab:d0:f0:e0:e7:9f:c3:60:bd:c2:1c:51:bf:09:
ff:12:b7:96:51:4a:d9:0d:a3:ce:ac:fd:8f:c2:40:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:18:F9:B3:CA:29:7F:6F:27:04:EE:BF:98:28:C2:F3:A2:88:B2:38
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/QBj5s8opf28nBO6_mCjC86KIsjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:02:60:a3:2c:c5:3c:eb:82:1f:1b:a6:c8:b3:eb:9a:a7:9a:
26:ff:af:c5:31:03:49:fc:21:65:48:75:4a:84:aa:2b:a0:85:
c4:4a:e6:df:5c:b0:f5:23:64:74:4f:a0:67:f9:19:20:b4:af:
8f:ca:00:d4:3f:7e:70:28:ee:fb:41:e1:b5:91:d3:08:86:2f:
af:92:e7:cc:bb:59:df:c3:84:72:ac:e6:f1:b2:3a:83:b6:e9:
cf:29:23:59:b4:bc:08:92:24:e2:7c:0d:96:32:61:f0:ca:d6:
57:3a:66:17:03:af:2c:87:2e:84:42:70:9b:bd:4e:2f:89:ff:
c5:f0:e2:5d:04:04:41:16:2a:55:4a:bb:c4:c9:77:95:c7:50:
64:66:19:ab:57:58:e7:36:5a:e9:9c:28:82:e5:b6:24:97:5a:
5f:e6:f1:b0:eb:83:59:eb:87:30:99:c8:72:8c:63:59:5e:3c:
cd:8e:03:23:ae:23:4c:e3:f2:cd:93:01:9c:53:c8:ed:4b:ae:
da:c2:29:b3:75:cf:bc:12:ea:ac:f9:c7:df:93:19:06:d8:2a:
8b:50:d3:56:a6:7b:4c:2a:79:24:fe:0c:6c:fe:bd:4f:1a:b3:
02:2f:a4:78:fd:f9:4d:c2:b6:dc:c9:4b:e1:15:48:58:51:fb:
9e:f7:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:48 2025 by rpki-client