Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/98PVKkjUmW1tw3m6tqFBDEzHGuA.roa
File: 98PVKkjUmW1tw3m6tqFBDEzHGuA.roa (raw, json)
Hash identifier: fnh7vCbU3FaK7dwiL4j0wiTlilaWHh/WIEGtluujMcY=
Subject key identifier: F7:C3:D5:2A:48:D4:99:6D:6D:C3:79:BA:B6:A1:41:0C:4C:C7:1A:E0
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 018CC87040CF28443047789E669101D3DBC9
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/98PVKkjUmW1tw3m6tqFBDEzHGuA.roa
Signing time: Tue 02 Jan 2024 04:30:48 +0000
ROA not before: Tue 02 Jan 2024 04:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 81.88.69.0/24 maxlen: 24
81.88.70.0/24 maxlen: 24
81.88.67.0/24 maxlen: 24
81.88.68.0/23 maxlen: 23
81.88.68.0/24 maxlen: 24
81.88.76.0/24 maxlen: 24
81.88.78.0/24 maxlen: 24
81.88.73.0/24 maxlen: 24
81.88.74.0/23 maxlen: 23
81.88.79.0/24 maxlen: 24
185.77.117.0/24 maxlen: 24
185.77.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 16:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:40:cf:28:44:30:47:78:9e:66:91:01:d3:db:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jan 2 04:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7c3d52a48d4996d6dc379bab6a1410c4cc71ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f9:29:f6:1e:77:14:86:63:b4:9c:07:b9:e5:
3a:2e:59:81:a5:47:ef:2e:a5:bf:7e:64:a0:76:00:
b0:91:d6:49:02:f6:4c:52:ab:d7:b2:69:f1:dc:d4:
c5:5d:31:80:45:b5:11:ba:04:21:a6:5b:76:8a:6f:
45:a7:8f:5f:21:67:6e:7d:c5:63:84:a5:c7:0b:9a:
55:41:c6:7b:ff:e3:7b:91:11:c0:3f:68:a1:5f:39:
a4:8e:b6:33:d1:9b:74:64:78:c7:3a:37:44:18:f0:
06:9c:b2:43:04:fb:49:39:95:83:dd:d3:90:4d:a4:
26:86:43:fa:8e:3b:60:85:80:56:36:a6:fd:91:76:
a6:96:03:8c:d1:3d:38:e9:01:4d:ec:58:be:a9:f0:
93:cb:31:d8:5b:e0:81:2a:b8:9b:56:9b:9f:13:fd:
76:89:24:c9:07:50:86:a4:0b:4a:20:1f:ef:a0:12:
d2:7e:cc:ac:01:61:c3:a4:6b:1e:c5:32:78:1d:0e:
10:ab:a8:b6:94:44:40:03:cb:f6:5a:ef:58:13:d8:
55:0f:6f:f4:99:00:60:9a:ec:98:6a:59:ce:11:ce:
cf:b6:c0:82:a4:84:ef:17:d1:0f:06:88:76:b6:22:
6c:21:55:22:65:56:13:f7:3b:56:9d:93:47:5a:78:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C3:D5:2A:48:D4:99:6D:6D:C3:79:BA:B6:A1:41:0C:4C:C7:1A:E0
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/98PVKkjUmW1tw3m6tqFBDEzHGuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.67.0-81.88.70.255
81.88.73.0-81.88.76.255
81.88.78.0/23
185.77.116.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:31:4c:f4:95:8e:48:e9:50:28:67:62:c7:97:f5:14:7e:27:
b7:b6:4a:37:c1:83:2b:a6:35:10:dc:ab:e1:14:1c:9b:a8:f1:
1e:5f:7a:bf:29:ec:c4:0a:b2:a7:79:ba:d3:04:eb:71:5f:b2:
99:30:b1:fa:e8:10:3b:9c:d6:c1:d1:83:aa:03:8a:96:97:b2:
94:f5:d6:1c:0d:9b:bd:c2:6f:45:d8:41:29:c1:e1:3d:5a:f8:
0e:cf:c0:9d:b2:d2:e3:80:94:35:6a:71:a0:36:b1:95:0b:18:
de:06:5c:f1:50:35:87:55:f3:4f:d2:07:79:ae:1d:a9:70:16:
f5:f5:c1:94:33:ee:b8:62:a3:e8:80:c5:40:37:f0:b7:e9:16:
47:72:33:e4:2f:e5:c2:ab:84:72:ab:14:0d:f9:8b:9f:f8:fd:
7a:48:59:48:6f:a7:01:8d:ff:a6:9c:de:22:5a:25:46:ab:84:
fc:72:82:33:b5:1d:49:96:59:a9:4d:16:1d:86:7d:2b:32:84:
92:74:3f:a1:2c:74:26:f9:d3:6e:0f:1c:57:a6:38:1d:da:53:
f9:db:6b:84:5b:fd:e0:0e:88:50:47:ad:64:32:57:bd:71:2c:
cd:62:14:5c:e2:72:2c:07:cb:61:81:f4:45:4e:4b:76:09:76:
f5:1b:2e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 19:56:37 2024 by rpki-client on console-fra.rpki-client.org