Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/bm9Z4llntDcda49gOpPMKQeamMM.roa
File: bm9Z4llntDcda49gOpPMKQeamMM.roa (raw, json)
Hash identifier: IaoaklCk8s9Gkh5iWUjKxvH4DlHvauFp5fzdz6NfPs4=
Subject key identifier: 6E:6F:59:E2:59:67:B4:37:1D:6B:8F:60:3A:93:CC:29:07:9A:98:C3
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 018AFA9B049A58F882AFD290F15313686532
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/bm9Z4llntDcda49gOpPMKQeamMM.roa
Signing time: Wed 04 Oct 2023 12:12:57 +0000
ROA not before: Wed 04 Oct 2023 12:12:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35313
IP address blocks: 188.137.255.0/24 maxlen: 24
188.137.203.0/24 maxlen: 24
188.137.200.0/24 maxlen: 24
188.137.201.0/24 maxlen: 24
188.137.202.0/24 maxlen: 24
80.88.240.0/21 maxlen: 21
80.88.240.0/20 maxlen: 20
80.88.248.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 05 Oct 2023 09:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:9b:04:9a:58:f8:82:af:d2:90:f1:53:13:68:65:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Oct 4 12:12:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e6f59e25967b4371d6b8f603a93cc29079a98c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e4:d1:86:bd:28:b5:88:ee:23:08:1c:61:01:
b1:77:39:63:e4:fb:f5:8a:b4:af:59:6c:39:d4:47:
e9:96:09:22:22:ce:a9:2c:bb:b9:a7:a9:b1:7b:e4:
38:bb:f7:77:61:46:01:a8:44:43:8f:32:a2:73:10:
12:7a:6c:d1:d6:55:fb:0b:b2:11:01:e3:8e:c9:4d:
59:ee:5d:1f:f6:b9:26:01:d4:a8:66:7c:1b:fe:22:
c7:36:68:72:bb:77:98:06:e6:d1:15:fd:dc:50:97:
2c:d7:65:a9:13:62:59:e8:d1:5c:33:b2:5a:4d:46:
51:9e:8e:ea:a1:8c:07:05:a5:94:3b:a8:e6:3c:94:
08:43:ee:e7:10:d7:2e:b3:19:d0:5b:e5:82:f1:8f:
af:3e:50:b2:cf:45:bb:a7:ad:93:94:4b:a7:a1:ba:
d2:1e:d1:4e:b9:6e:3b:9d:e8:a2:f8:19:a5:db:cd:
04:32:85:99:1e:19:7c:45:5a:8e:c4:f2:0d:69:70:
08:65:2e:a3:ff:fa:51:71:ae:4f:9f:43:22:24:62:
29:62:4f:61:9e:6e:82:18:24:99:51:eb:38:89:ca:
bf:b3:cd:d1:62:fa:09:b2:1a:10:ee:64:91:22:ff:
4b:0a:2b:00:1f:e8:09:c3:4e:8c:97:2c:8d:75:de:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6F:59:E2:59:67:B4:37:1D:6B:8F:60:3A:93:CC:29:07:9A:98:C3
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/bm9Z4llntDcda49gOpPMKQeamMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.240.0/20
188.137.200.0/22
188.137.255.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d6:9f:61:b1:ba:14:3d:d1:fc:b5:42:ee:2d:d2:2d:66:9e:
ec:c4:b8:0e:2b:ea:62:e9:de:35:7e:15:dd:f3:75:89:e5:00:
a0:d5:4f:e5:59:dd:01:75:af:a2:80:a4:6d:df:0d:9f:db:6e:
25:5f:11:8c:a9:43:45:1c:72:49:45:a5:58:75:7a:98:84:1a:
e2:34:03:84:b3:88:34:00:61:b1:67:ab:12:a0:61:0e:c6:8b:
55:cc:b3:09:3a:3d:6b:4a:32:fb:d7:13:56:ad:8e:82:44:25:
ad:6c:f8:42:e1:9e:06:5d:de:e5:6b:e9:2c:03:7f:05:77:ef:
a8:8b:ea:b7:03:b2:3f:0f:d7:67:c3:6e:50:e3:34:1f:25:fb:
eb:1f:32:fe:f7:60:cf:3c:70:06:73:2a:d2:a6:91:d1:94:c7:
b2:1c:4b:e4:95:37:50:e2:ca:6d:57:32:fe:65:56:2e:d4:8f:
e3:3c:55:5c:40:9a:e0:6d:51:0d:b8:3c:fb:76:7d:df:da:79:
5b:75:a3:2a:d2:77:ec:f6:4b:be:06:f4:0e:6d:20:8b:41:b9:
b7:10:c1:84:10:45:8e:8a:cc:ba:12:11:c1:b7:60:69:37:3b:
76:01:0a:cb:35:d7:af:ed:70:e4:a6:b1:78:1e:7f:e5:a6:8e:
06:f9:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-fra.rpki-client.org