Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/1Rk5nnJgCiF7s5SilvyYCR5bvRc.roa
File: 1Rk5nnJgCiF7s5SilvyYCR5bvRc.roa (raw, json)
Hash identifier: sdxU9OiDQ6o7uWfqgnsYTzYw2XEelHX3ly4Wf8jn7aQ=
Subject key identifier: D5:19:39:9E:72:60:0A:21:7B:B3:94:A2:96:FC:98:09:1E:5B:BD:17
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 018AFF45910A29E92BCC93C3BC9CFA1F462A
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/1Rk5nnJgCiF7s5SilvyYCR5bvRc.roa
Signing time: Thu 05 Oct 2023 09:57:43 +0000
ROA not before: Thu 05 Oct 2023 09:57:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35313
IP address blocks: 188.137.203.0/24 maxlen: 24
188.137.200.0/24 maxlen: 24
188.137.201.0/24 maxlen: 24
188.137.202.0/24 maxlen: 24
80.88.240.0/21 maxlen: 21
80.88.248.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 05 Oct 2023 12:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:45:91:0a:29:e9:2b:cc:93:c3:bc:9c:fa:1f:46:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Oct 5 09:57:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d519399e72600a217bb394a296fc98091e5bbd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:b7:37:4c:32:68:e9:4d:37:01:bc:ea:fd:
3d:18:b0:7e:5e:17:59:f7:f3:bd:09:67:7f:38:31:
78:83:84:2a:f2:61:ab:dc:21:a4:69:a9:e3:28:49:
97:a4:7f:cf:83:4a:e9:b0:4d:ad:af:43:7b:5a:f4:
f5:05:38:46:da:b1:7c:f4:85:d1:3f:2d:6e:e1:2f:
e3:d5:07:1a:34:22:31:a7:6e:08:e1:39:59:a8:fe:
c9:e1:f5:23:40:1f:f3:18:50:fa:b8:b0:07:94:55:
5e:98:94:ea:b9:75:4c:03:cc:56:89:21:9a:88:7b:
4c:c4:73:a5:d1:b2:6f:7a:44:7b:74:fd:52:64:7f:
1c:49:32:3d:3e:7b:1b:91:df:8b:ab:2c:21:07:5d:
dc:63:6d:ea:14:b0:4a:ef:62:31:f4:db:02:10:37:
01:8e:04:c8:da:c3:40:a6:55:73:57:6c:c1:d0:49:
2c:8d:84:f2:03:a1:f1:32:d8:90:3e:28:71:5d:84:
3b:82:59:b0:fa:f0:d2:c3:b8:c0:4f:73:2c:aa:62:
be:c6:bf:80:76:b2:0b:e2:77:54:2c:df:89:7e:b2:
4b:35:0b:88:a8:a4:45:f5:4d:30:e1:f2:38:66:5f:
59:65:60:9f:c6:72:2b:69:59:86:5b:30:ca:d9:a3:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:19:39:9E:72:60:0A:21:7B:B3:94:A2:96:FC:98:09:1E:5B:BD:17
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/1Rk5nnJgCiF7s5SilvyYCR5bvRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.240.0/20
188.137.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:a0:e5:bd:fd:50:49:49:01:29:f6:1c:df:fc:62:e2:da:e4:
54:8f:8e:3e:f6:d9:ee:19:ee:a4:c9:5c:2e:0a:76:56:cd:58:
53:89:c4:6e:c3:c5:67:44:b8:09:96:4b:90:8a:e5:21:ae:cd:
65:d0:9c:af:d1:3b:f8:db:38:66:e9:2c:ca:19:be:60:c8:0c:
c7:43:10:80:88:3a:57:78:b4:45:c1:95:95:43:ea:9f:87:72:
24:e3:6a:54:f5:47:5f:c0:dd:9b:96:3f:c1:d4:16:ef:74:4e:
bb:4a:4c:ca:19:b7:22:98:99:e1:2b:97:59:6b:f0:e1:1c:8f:
66:ea:74:cc:66:af:2d:ef:ca:5f:62:89:9f:ec:90:30:11:79:
0e:90:38:f1:56:57:b4:86:c0:b5:79:d8:98:db:5e:17:45:20:
ff:be:e6:6e:7e:9d:36:88:12:97:20:ba:66:ac:e9:ca:f1:2e:
10:77:85:b7:61:fe:91:67:82:ac:17:6f:19:f8:f6:6a:79:16:
67:f2:eb:0d:c0:37:df:7f:db:53:6f:e8:b3:1f:66:7a:a6:ab:
ee:56:77:77:4b:21:a4:6f:e3:a5:71:58:c3:14:fd:75:3b:e1:
c5:bc:20:a2:67:63:b9:f4:a6:cf:0a:00:a5:d5:76:d9:2a:c3:
72:23:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:02 2024 by rpki-client on console-ams.rpki-client.org