Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Ep1O9BtbNZ-oFU59RE9oEzi6kog.roa
File: Ep1O9BtbNZ-oFU59RE9oEzi6kog.roa (raw, json)
Hash identifier: V/aZMxxA/GOs4liM4UE/7HCJaSIcvG3btfKJt54VQx4=
Subject key identifier: 12:9D:4E:F4:1B:5B:35:9F:A8:15:4E:7D:44:4F:68:13:38:BA:92:88
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018CC8DF902F7FF3833DB8EDB0F0A171B6DE
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Ep1O9BtbNZ-oFU59RE9oEzi6kog.roa
Signing time: Tue 02 Jan 2024 06:32:23 +0000
ROA not before: Tue 02 Jan 2024 06:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20657
IP address blocks: 195.68.214.0/23 maxlen: 24
193.108.24.0/24 maxlen: 24
194.79.15.0/24 maxlen: 24
194.79.12.0/23 maxlen: 24
88.80.131.0/24 maxlen: 24
88.80.132.0/24 maxlen: 24
88.80.133.0/24 maxlen: 24
88.80.152.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 09 Jan 2024 16:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:90:2f:7f:f3:83:3d:b8:ed:b0:f0:a1:71:b6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 06:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=129d4ef41b5b359fa8154e7d444f681338ba9288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:12:58:d7:1b:22:7c:55:36:61:a1:16:41:1a:
eb:b9:27:4f:43:63:a5:c9:b4:cc:c3:e5:61:9a:24:
16:9e:b9:b3:50:8e:48:0e:04:31:38:43:6c:7d:e4:
b7:64:e6:1c:d4:05:21:1e:ce:2d:dd:76:6e:8a:e7:
4b:30:e1:bf:94:81:38:c3:99:2f:ab:25:c4:7d:bf:
95:24:89:a4:dd:57:96:41:86:cd:60:7f:84:83:b5:
71:59:f6:4f:9a:8a:85:83:ea:58:b5:31:57:ca:b1:
ee:c1:73:0d:f6:69:e0:60:fa:85:0d:7f:fe:67:74:
b0:fc:20:f1:70:b1:5a:9e:95:e9:70:f1:0d:51:49:
b4:6c:90:92:fe:df:14:26:e0:6d:de:45:9f:0a:20:
48:1b:a9:8d:0a:fd:6c:67:25:b9:09:98:ab:8e:f7:
10:e1:0b:c8:0a:8b:09:42:18:cd:a3:8d:80:ff:49:
3a:c1:17:3a:4d:85:cd:5d:87:8b:c4:ff:9b:07:b9:
f3:77:a2:61:d8:d6:aa:5e:a5:92:71:b7:40:61:59:
d4:7a:d8:5e:5c:73:46:2f:ac:2c:80:0a:2f:4c:47:
d1:6a:fb:6b:bc:06:80:ab:6a:cf:00:b9:5f:43:39:
b3:42:65:24:a5:60:08:69:89:29:ee:7d:08:e1:9f:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9D:4E:F4:1B:5B:35:9F:A8:15:4E:7D:44:4F:68:13:38:BA:92:88
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Ep1O9BtbNZ-oFU59RE9oEzi6kog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.131.0-88.80.133.255
88.80.152.0/21
193.108.24.0/24
194.79.12.0/23
194.79.15.0/24
195.68.214.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:ec:00:7b:c7:95:d8:18:b5:38:26:6e:27:93:ee:19:fb:8a:
09:46:fc:fb:a5:9d:f1:03:fb:75:25:17:04:ee:a8:06:59:44:
42:a1:3a:de:12:63:99:dc:4d:28:6b:12:f4:07:ae:92:c6:16:
ce:42:79:d8:3f:bc:b2:a6:ad:d3:dc:9d:2d:61:05:38:d4:1f:
a7:62:7c:a1:69:57:8e:7e:ff:43:38:3a:b6:91:bc:e8:5e:db:
0e:e0:79:b7:50:9c:1e:06:ca:e1:94:0a:5d:46:ed:a7:b0:e6:
b5:bd:75:31:42:5f:f9:a9:ac:e4:39:4d:5f:5a:38:a0:d9:1a:
6d:6e:53:34:8b:a8:e1:81:4c:ce:5d:c9:22:0c:f6:cc:95:84:
25:71:32:65:da:c6:8e:69:ba:4b:4a:32:7c:49:78:67:fe:48:
ec:bf:14:bb:59:37:86:5d:c5:c2:0b:f7:85:de:ad:78:5d:27:
4b:a9:f8:6b:f0:d5:3c:5c:10:88:ac:e3:1c:cc:11:fd:65:28:
26:20:4f:63:dd:f3:27:c0:9d:b5:fc:63:2f:34:6d:a1:13:e8:
07:e1:25:22:08:e3:54:f5:b7:e6:7a:ab:b0:a5:87:5f:66:34:
cf:a5:94:72:4e:73:57:0b:40:68:16:3b:c9:08:70:9b:dd:92:
ec:94:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org