Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/aLFwmFBac7XcDXyMEJ1BMHXFaR8.roa
File: aLFwmFBac7XcDXyMEJ1BMHXFaR8.roa (raw, json)
Hash identifier: oFg8KEK25u66Z7N97bZ4u6WsXXdWPYcOpo6Qc5JXpoI=
Subject key identifier: 68:B1:70:98:50:5A:73:B5:DC:0D:7C:8C:10:9D:41:30:75:C5:69:1F
Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Certificate serial: 01856EAFD34C9C9C4B1FAA806A31450752B0
Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/aLFwmFBac7XcDXyMEJ1BMHXFaR8.roa
Signing time: Sun 01 Jan 2023 18:54:54 +0000
ROA not before: Sun 01 Jan 2023 18:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35129
IP address blocks: 88.135.0.0/20 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d3:4c:9c:9c:4b:1f:aa:80:6a:31:45:07:52:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Validity
Not Before: Jan 1 18:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68b17098505a73b5dc0d7c8c109d413075c5691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:13:72:03:1d:1c:75:b9:55:05:d4:2c:9e:
9e:46:23:ba:53:0b:e2:79:df:31:a8:b8:a6:4d:6a:
c6:1b:63:51:7d:fa:c3:d2:ed:3d:84:31:d8:35:d0:
a9:12:57:79:28:ec:6a:90:c0:12:c4:1c:23:77:fb:
83:52:eb:ff:9d:30:77:4e:5d:6b:6e:d5:45:a2:4e:
7d:fd:63:55:a2:74:49:9d:71:49:42:e3:bf:73:1d:
b1:d5:89:e3:3f:85:01:25:53:8b:ed:7c:6d:9a:23:
92:79:36:27:a3:bc:c6:02:7c:33:39:09:54:7d:ee:
41:61:f6:ae:7b:dc:44:1d:3c:65:41:de:de:a5:66:
8f:71:65:f4:d1:b3:7f:10:e9:09:c8:d6:eb:84:8d:
f5:c5:30:33:56:91:b9:2d:a2:66:d0:3c:9a:fc:76:
5f:ab:b3:69:20:93:b2:81:78:29:1e:6c:1a:92:ee:
cd:11:ad:f4:00:aa:cd:cb:dd:42:c2:a8:df:e3:42:
6d:de:e1:3c:84:99:41:b8:ae:58:bc:2a:59:56:7a:
c5:e1:6c:20:ec:91:73:de:89:cf:05:63:7f:33:77:
20:b2:7d:23:ba:34:25:02:66:08:21:a6:ac:88:54:
03:85:65:fb:ee:37:bf:68:02:78:28:b4:cf:ed:39:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B1:70:98:50:5A:73:B5:DC:0D:7C:8C:10:9D:41:30:75:C5:69:1F
X509v3 Authority Key Identifier:
keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/aLFwmFBac7XcDXyMEJ1BMHXFaR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.0.0/20
Signature Algorithm: sha256WithRSAEncryption
80:e5:f2:2b:1e:75:71:df:93:15:4d:5d:31:87:cd:74:87:8f:
bd:2d:a7:78:b1:7d:0d:a1:1d:25:f2:6c:56:43:68:c9:23:7d:
54:0c:f1:be:08:ee:68:83:49:e3:c4:f0:fc:f0:23:a1:5f:7b:
4b:f3:3f:c9:87:32:d3:b1:42:0c:ca:d6:27:1d:88:18:0e:d1:
63:03:64:e1:5f:a8:3a:aa:f4:2a:b2:60:c6:b1:63:d3:82:ec:
a5:c4:35:35:24:d0:ca:32:1b:64:3b:02:e5:5b:ff:98:85:c8:
9c:1b:1c:5b:3d:66:2f:2b:8c:f9:f1:a9:c7:70:c0:85:5b:6f:
ef:89:14:23:2d:90:d9:5a:8e:c1:19:5d:04:9f:6c:4e:96:93:
b9:90:6e:67:2a:9e:4a:06:ca:23:5e:69:5f:b9:db:59:8e:be:
68:22:68:ca:22:f9:ac:9a:4f:15:68:df:2c:bb:bd:94:65:e4:
ae:6c:07:86:80:9e:64:ab:a4:51:38:cc:b1:97:17:de:d1:81:
24:32:c1:a6:3c:bc:28:0c:86:55:4c:30:77:30:37:d3:dd:98:
78:68:51:68:3e:dc:00:85:71:4c:91:9a:bf:0d:79:ec:2a:e3:
1a:bd:8e:d1:f3:fc:6f:03:5b:5f:3e:ad:6b:f2:c4:58:02:c3:
e9:5a:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:39 2024 by rpki-client on console-fra.rpki-client.org