Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/FBSdO7n3KJSfOSppspEh7SmreW4.roa
File: FBSdO7n3KJSfOSppspEh7SmreW4.roa (raw, json)
Hash identifier: mvB60vaRRmgNgD+n+Tfzq34AUsBgDWnaCEzw9PcZgxk=
Subject key identifier: 14:14:9D:3B:B9:F7:28:94:9F:39:2A:69:B2:91:21:ED:29:AB:79:6E
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 018BD2638A89779B7BE6558DC3C48DA35943
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/FBSdO7n3KJSfOSppspEh7SmreW4.roa
Signing time: Wed 15 Nov 2023 09:50:20 +0000
ROA not before: Wed 15 Nov 2023 09:50:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 88.204.44.0/23 maxlen: 24
88.204.42.0/23 maxlen: 24
88.204.46.0/23 maxlen: 24
78.136.250.0/23 maxlen: 24
78.136.248.0/23 maxlen: 24
78.136.252.0/23 maxlen: 24
78.136.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:63:8a:89:77:9b:7b:e6:55:8d:c3:c4:8d:a3:59:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Nov 15 09:50:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14149d3bb9f728949f392a69b29121ed29ab796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:d6:85:04:bf:18:9d:67:13:5e:bc:7c:02:
ec:71:0d:ee:eb:c1:d1:20:64:a3:f4:1d:f5:d9:52:
17:7c:ba:17:a7:48:4e:1c:0a:ed:d9:ff:bb:a3:05:
2b:0a:0b:29:c3:85:01:42:03:61:16:72:57:e1:69:
f5:fb:fb:5a:13:00:bc:47:2d:4c:7e:57:23:be:bc:
6d:d7:3e:29:b5:5f:f7:d9:43:6d:88:8e:e8:c5:6b:
c6:00:6c:b4:1e:d8:7e:35:3a:c2:12:ba:21:24:b0:
ce:99:9a:ff:99:18:e7:a5:8a:b8:1f:c6:d4:6b:89:
be:31:9b:bc:0d:55:66:66:93:de:a4:cf:5f:6f:a3:
cb:57:b3:21:c1:46:d3:cf:9c:e9:ea:ae:e6:f2:9e:
fe:84:ed:ad:8b:ad:ae:87:a5:93:6c:f5:c5:68:55:
b4:55:0c:31:e9:74:a8:b4:7c:bb:63:d4:5c:56:82:
65:55:b9:3d:43:25:4d:ea:41:6d:c5:73:3c:ee:ef:
72:07:8f:ed:a5:07:d7:45:22:8a:23:cd:b4:40:f5:
5b:2a:7f:ed:23:b8:2f:2d:e3:cd:f7:73:7e:7d:d5:
81:ec:66:7d:5f:94:f3:9e:9d:8a:d4:de:a3:86:27:
0a:9d:4d:bb:70:bf:b8:31:ac:cc:2c:ec:e7:a3:ce:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:14:9D:3B:B9:F7:28:94:9F:39:2A:69:B2:91:21:ED:29:AB:79:6E
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/FBSdO7n3KJSfOSppspEh7SmreW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.248.0-78.136.254.255
88.204.42.0-88.204.47.255
Signature Algorithm: sha256WithRSAEncryption
1c:9f:73:e4:83:c0:17:2c:41:ff:4d:78:24:ac:52:fe:79:e6:
87:28:f2:73:ca:8b:5e:79:ea:cf:df:d6:a0:4f:86:75:7d:1f:
fc:9f:07:85:5a:ac:27:52:c8:1a:72:e4:7c:d7:7a:d6:c9:cc:
07:cf:b5:6f:9a:3c:99:50:50:99:b0:5f:34:02:b4:13:48:44:
da:34:fc:4d:8a:d9:94:fe:ad:00:6f:70:5c:e0:bb:d7:a0:71:
f2:fa:e2:73:96:cd:65:d8:c6:d1:ab:c6:26:80:89:ee:2f:d7:
ac:e7:bb:41:5a:1e:a1:7c:1b:43:be:de:f8:e1:07:c6:f9:64:
c1:1a:20:7a:26:95:61:6a:ef:89:3a:c8:35:a1:ca:94:a5:84:
83:60:9e:e9:05:f7:71:d2:4e:0d:19:6d:d4:c2:83:ab:35:a7:
24:da:a9:00:de:77:b5:e3:0a:55:40:f4:7b:fa:fa:7d:5e:c9:
e3:81:11:2a:0d:ce:64:b4:aa:bb:da:1a:4e:f0:14:aa:eb:a9:
8b:f1:b3:e1:90:4f:b7:92:c1:18:6d:c9:a5:d3:a7:2c:3d:9f:
c4:e8:19:ba:3e:51:03:c3:12:db:98:9a:5e:67:78:09:89:a5:
f2:a1:30:14:02:28:53:29:5e:61:c1:bf:82:33:b1:e9:8b:d3:
23:16:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:25 2024 by rpki-client on console-ams.rpki-client.org