Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/7vhEw_GFTI_9waUz82MA-BtEivM.roa
File: 7vhEw_GFTI_9waUz82MA-BtEivM.roa (raw, json)
Hash identifier: reavHWWE5NSJscC1J7e1EQykI4xziQsRAfS3lIMwsgo=
Subject key identifier: EE:F8:44:C3:F1:85:4C:8F:FD:C1:A5:33:F3:63:00:F8:1B:44:8A:F3
Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial: 019155AF06FFD170232C49BA661F2F71D382
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/7vhEw_GFTI_9waUz82MA-BtEivM.roa
Signing time: Thu 15 Aug 2024 10:56:59 +0000
ROA not before: Thu 15 Aug 2024 10:56:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39087
IP address blocks: 88.201.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:af:06:ff:d1:70:23:2c:49:ba:66:1f:2f:71:d3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Validity
Not Before: Aug 15 10:56:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eef844c3f1854c8ffdc1a533f36300f81b448af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:8b:32:28:f5:08:ec:d6:42:b9:2f:90:3c:
04:4e:cf:75:53:57:7e:6d:89:7e:d5:d2:5b:b1:0f:
78:12:5a:a4:28:84:5f:82:83:b1:3e:43:cc:f8:94:
43:ab:da:1f:89:e0:58:03:ce:2b:34:b9:b5:79:a5:
81:7c:c1:8a:b0:ac:9c:29:ef:b1:6d:98:60:59:d7:
5a:09:2a:0c:d6:93:cc:36:e0:d5:b8:99:c8:5d:fc:
bf:c9:1e:13:d5:9c:70:a7:10:07:9d:96:8a:c7:03:
fd:4c:57:5f:9e:3e:0b:d7:68:cc:d1:a3:0c:b1:ec:
60:c1:ab:d2:62:7a:b8:94:ea:18:f4:6c:54:49:47:
4d:ed:a5:76:69:20:29:96:93:93:29:4b:26:f3:32:
45:9c:b8:38:96:be:08:5e:3f:01:ff:74:5c:32:ac:
e2:91:e9:10:b3:79:57:1d:97:05:02:83:15:73:c9:
52:3e:e7:98:ca:10:35:d9:7f:c3:11:c4:4e:33:5b:
9c:8b:ba:94:83:bc:8b:e8:65:fa:8a:12:12:12:4a:
d0:5f:92:93:49:fd:37:45:78:b7:d9:e6:b8:c5:c2:
bf:69:91:4e:ff:86:3c:79:f3:85:2c:6c:76:c2:1d:
28:a0:d8:e5:fb:90:db:2e:a3:b2:77:1e:f9:db:a7:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:44:C3:F1:85:4C:8F:FD:C1:A5:33:F3:63:00:F8:1B:44:8A:F3
X509v3 Authority Key Identifier:
keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/7vhEw_GFTI_9waUz82MA-BtEivM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.201.170.0/24
Signature Algorithm: sha256WithRSAEncryption
06:50:17:ba:fa:2e:b5:ef:b1:c2:75:38:8e:58:28:93:24:2c:
2f:af:d3:cb:60:a9:78:92:c7:a3:13:11:35:5f:5d:cc:a7:3f:
47:3a:91:85:2c:77:13:14:a1:f8:4e:48:ec:7d:01:b9:3f:d5:
e1:c0:f7:79:9e:21:09:cb:9f:b6:c2:b4:54:50:ed:92:15:4c:
28:f0:7b:35:fb:34:66:84:07:e5:90:13:88:38:3c:eb:d7:92:
2d:0a:e4:40:af:18:d2:13:8d:4d:7f:5a:79:1a:35:dc:e0:f7:
90:b9:c3:4b:e0:13:85:60:7d:bc:75:d3:e1:ca:6e:e8:ab:af:
52:68:0e:40:5f:0d:dd:3e:30:c5:fc:32:47:2b:2d:e5:e2:db:
1f:2d:c2:d1:24:61:35:e1:0a:63:50:cc:05:94:04:e1:fe:7a:
92:ce:92:61:06:fb:55:0e:30:32:c2:1b:39:78:57:15:f8:b8:
af:ab:2e:a0:ff:22:71:e9:88:62:e0:8c:70:17:67:f6:be:de:
74:76:62:7c:7e:4c:aa:36:6e:fd:7a:cc:ab:ff:1c:da:fe:ca:
fb:a7:47:46:73:20:21:b1:f4:a6:b9:31:f3:33:d5:fa:18:d8:
f3:95:03:03:df:23:c5:61:c1:14:3e:17:00:f9:57:28:05:21:
79:ad:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:34 2025 by rpki-client