Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/4L6ZxoqplkzLsjXtqOBdtV9hZpc.roa
File: 4L6ZxoqplkzLsjXtqOBdtV9hZpc.roa (raw, json)
Hash identifier: 6Be3+MDcdVWkc28xu2B/vWF1BgcYqBO9vU/wAD8OlTs=
Subject key identifier: E0:BE:99:C6:8A:A9:96:4C:CB:B2:35:ED:A8:E0:5D:B5:5F:61:66:97
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 01856EAFEC2804E57B700371B5CF4E5D9D71
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/4L6ZxoqplkzLsjXtqOBdtV9hZpc.roa
Signing time: Sun 01 Jan 2023 18:55:01 +0000
ROA not before: Sun 01 Jan 2023 18:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209275
IP address blocks: 88.214.40.0/24 maxlen: 24
88.214.42.0/24 maxlen: 24
185.225.198.0/24 maxlen: 24
2a09:9d00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:ec:28:04:e5:7b:70:03:71:b5:cf:4e:5d:9d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Jan 1 18:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0be99c68aa9964ccbb235eda8e05db55f616697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:2f:d5:9c:32:55:23:17:51:00:ae:7a:87:
af:8a:f9:12:ac:71:49:d4:d8:67:94:49:42:82:5f:
40:4a:f5:60:9f:97:4f:62:8c:6c:29:f6:cd:7a:90:
b2:95:b1:17:a7:64:a4:3f:53:bb:b4:82:d1:9e:8a:
1b:82:04:b6:b8:76:63:5e:50:24:48:7e:ff:ad:6d:
f4:48:96:a8:f4:38:57:9e:83:8d:18:1b:d4:6e:54:
e6:9a:45:cc:be:4b:5c:26:5f:9c:95:bd:17:1f:78:
b0:fd:b5:ea:47:9a:ec:6e:ce:cf:60:23:83:cf:76:
a1:ee:55:2a:50:fe:b2:19:19:01:4a:3a:cd:a7:f9:
3e:09:36:df:97:3c:6d:36:a2:39:78:3f:d1:da:63:
04:cd:6b:32:7c:fe:db:fc:12:32:f3:a2:04:1d:6e:
70:b2:d1:da:b6:89:90:17:18:29:02:96:dd:11:51:
ac:fa:b0:65:a1:5f:f7:5c:e8:1d:95:4b:41:0f:61:
8b:52:9f:c0:41:e1:43:73:ef:87:e0:c0:4c:d9:17:
b6:34:5c:d6:5e:9d:93:9f:fe:3d:25:1d:e4:82:78:
41:dd:cd:e2:ad:bd:10:16:41:d4:88:f2:f4:92:81:
cd:5e:cd:5c:b5:05:47:6f:62:03:38:6d:d4:81:50:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:99:C6:8A:A9:96:4C:CB:B2:35:ED:A8:E0:5D:B5:5F:61:66:97
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/4L6ZxoqplkzLsjXtqOBdtV9hZpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.40.0/24
88.214.42.0/24
185.225.198.0/24
IPv6:
2a09:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
93:88:7c:4e:9b:62:e1:2c:1d:4f:06:bf:a3:26:f8:4e:c1:6d:
4f:c5:5f:1a:7e:db:df:75:14:af:94:43:4a:7a:23:49:3b:c9:
e1:5a:bc:13:59:94:9c:e6:ff:b5:64:de:c9:c0:74:10:b0:1c:
27:3b:8a:46:6c:0b:10:a5:fc:9c:2c:f2:78:fa:04:94:06:52:
2f:f1:c9:a0:ca:66:92:41:72:e9:5e:56:48:93:5c:b7:41:82:
30:5d:c8:d9:62:24:70:42:d1:77:52:cc:7e:1f:1d:22:cc:b7:
3f:64:c2:e6:af:77:b5:1b:85:38:ec:65:28:53:58:ef:a9:4b:
90:f5:71:87:ba:fc:e0:c5:49:1d:d2:f2:1d:4a:24:c8:9f:3a:
cd:cd:91:38:6e:be:33:43:d3:be:79:39:67:97:df:57:ce:11:
72:cb:ec:b1:1f:cb:03:cc:2b:2d:de:ec:19:e7:60:82:45:c3:
b2:27:51:76:5f:dc:11:d3:3b:5e:fc:c5:f7:49:a2:63:e0:b0:
dd:f9:d5:40:4f:50:23:71:e9:0a:b4:fe:6c:17:f8:54:ab:34:
f9:f3:86:52:3d:73:3c:73:1c:32:8a:f0:7e:cf:c2:1a:39:dd:
19:17:74:57:c8:1c:d1:65:16:13:7b:93:8a:38:0e:1a:ce:1b:
5c:46:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org