Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Ecd71I1ppNrDEY-N16EmcE9R1jw.roa
File: Ecd71I1ppNrDEY-N16EmcE9R1jw.roa (raw, json)
Hash identifier: CACtwRDegWui+CUDdyIXoy6S6MioIK2SQ810p31aRYM=
Subject key identifier: 11:C7:7B:D4:8D:69:A4:DA:C3:11:8F:8D:D7:A1:26:70:4F:51:D6:3C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018B1A0B632CB9F402A5D4A388BA3909EAF5
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Ecd71I1ppNrDEY-N16EmcE9R1jw.roa
Signing time: Tue 10 Oct 2023 14:43:55 +0000
ROA not before: Tue 10 Oct 2023 14:43:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20657
IP address blocks: 193.108.24.0/24 maxlen: 24
195.68.214.0/23 maxlen: 23
195.68.214.0/24 maxlen: 24
195.68.215.0/24 maxlen: 24
194.79.14.0/24 maxlen: 24
194.79.15.0/24 maxlen: 24
194.79.12.0/22 maxlen: 22
194.79.12.0/24 maxlen: 24
194.79.13.0/24 maxlen: 24
88.80.128.0/21 maxlen: 21
88.80.131.0/24 maxlen: 24
88.80.132.0/24 maxlen: 24
88.80.134.0/23 maxlen: 23
88.80.133.0/24 maxlen: 24
88.80.152.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:0b:63:2c:b9:f4:02:a5:d4:a3:88:ba:39:09:ea:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 10 14:43:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11c77bd48d69a4dac3118f8dd7a126704f51d63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:b9:6a:0a:37:b7:e1:2d:97:a8:9f:9d:94:
70:3e:4e:20:47:d2:51:7b:1f:57:a4:a3:1d:b1:d3:
7c:31:01:9c:55:e9:86:7c:b4:04:3f:85:9e:c6:c7:
0c:43:97:9a:45:3a:e5:ed:3c:dd:bd:84:36:80:ac:
1d:cc:5c:0e:4c:e7:09:e4:93:80:13:d7:01:ee:d4:
50:4d:7e:9c:9e:58:84:f9:d9:05:a7:fd:90:40:fc:
02:47:06:f7:53:5e:e7:f1:5b:8b:9b:f6:e3:9c:ff:
20:ba:12:7d:78:7f:b6:dc:e1:b1:22:65:da:13:97:
38:06:8f:9a:ac:3f:d1:77:01:df:07:ee:aa:58:96:
c7:3a:9e:c9:cc:b7:24:1d:50:56:28:fe:be:77:9f:
83:54:cc:89:a7:be:a3:e0:00:4f:06:64:ac:09:31:
e5:7a:ee:78:f7:5b:bc:98:40:4a:97:c4:fe:8b:b8:
7b:54:09:f4:19:b2:df:36:8d:c8:07:e4:8c:73:c6:
ca:71:65:80:b5:48:17:dc:28:1d:e0:fc:2e:bf:2e:
4c:0e:9a:dd:42:49:7b:56:ee:0f:15:29:9e:e1:f1:
cc:92:74:1a:89:ba:3c:09:52:9f:bd:bf:cb:39:c5:
59:8e:cf:48:7c:b4:4d:ab:8b:c8:e7:25:b1:48:fb:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:7B:D4:8D:69:A4:DA:C3:11:8F:8D:D7:A1:26:70:4F:51:D6:3C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Ecd71I1ppNrDEY-N16EmcE9R1jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.128.0/21
88.80.152.0/21
193.108.24.0/24
194.79.12.0/22
195.68.214.0/23
Signature Algorithm: sha256WithRSAEncryption
70:a6:87:71:74:5f:03:c5:da:47:b3:e2:4c:4e:04:92:ec:51:
49:7e:91:12:79:99:bb:ca:ef:b1:3b:01:77:6e:93:dc:c7:3c:
42:b2:9c:08:85:ff:46:a8:96:3b:e9:b3:da:63:c0:09:4c:33:
5f:51:9e:95:85:e4:db:f5:1c:eb:2e:74:33:7e:aa:13:ac:e7:
c5:a5:53:90:1d:e2:db:23:ea:59:39:a0:1c:1a:3a:2b:b1:28:
d9:f4:6b:87:14:b2:a7:bb:dc:fc:f5:5a:9f:fe:4f:ef:47:57:
12:88:c5:f9:55:82:9f:a0:c7:23:59:35:4c:12:6f:fd:05:7a:
47:82:81:5d:9c:30:05:55:15:89:f5:40:3b:03:da:f6:40:aa:
dd:fb:7d:6e:6f:0b:f2:d3:07:8a:fd:10:72:3d:43:e4:4e:d1:
96:1f:6e:d2:fb:39:b5:82:81:6d:78:7f:15:e0:80:5c:22:84:
3e:2f:45:6c:f2:9d:ba:00:3d:51:d8:8d:f0:dd:ef:66:21:ed:
a8:40:22:43:a2:33:f9:fc:10:d1:f8:21:ca:c3:89:b8:89:e1:
4f:5d:98:19:78:61:aa:79:74:32:74:7d:e2:5f:a4:48:d4:d7:
6f:e6:54:a2:87:81:e8:89:5b:8d:c8:d3:6a:cb:61:74:8b:ee:
82:62:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 21:49:18 2023 by rpki-client on console-fra.rpki-client.org