Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/ppTYHfFsQ1EPTzFdZ3jkklG0Zec.roa
File: ppTYHfFsQ1EPTzFdZ3jkklG0Zec.roa (raw, json)
Hash identifier: vWAAgFERDkA/SsWuAMjnfnO+92IsqetUAGGXoydeQPY=
Subject key identifier: A6:94:D8:1D:F1:6C:43:51:0F:4F:31:5D:67:78:E4:92:51:B4:65:E7
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 01885DCEA9771CED1183743F916A63353943
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/ppTYHfFsQ1EPTzFdZ3jkklG0Zec.roa
Signing time: Sat 27 May 2023 15:23:24 +0000
ROA not before: Sat 27 May 2023 15:23:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50810
IP address blocks: 93.117.176.0/20 maxlen: 22
93.119.208.0/20 maxlen: 22
188.213.192.0/22 maxlen: 22
188.212.240.0/21 maxlen: 21
37.98.114.0/24 maxlen: 24
188.211.0.0/20 maxlen: 20
178.131.0.0/16 maxlen: 22
37.98.64.0/18 maxlen: 22
62.102.128.0/20 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:ce:a9:77:1c:ed:11:83:74:3f:91:6a:63:35:39:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: May 27 15:23:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a694d81df16c43510f4f315d6778e49251b465e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:65:a3:8a:d1:5b:8d:46:c8:87:11:b3:f3:
23:81:c0:ce:78:11:4b:a1:94:39:f9:80:24:24:e6:
17:51:5d:de:c0:21:d6:1d:bf:65:cb:7c:2c:31:2b:
97:c9:53:2a:26:37:5b:e0:e7:0e:8e:c2:b4:a5:e4:
46:4b:66:c8:71:7e:0d:31:46:75:81:ef:e6:9f:ac:
01:dd:c9:a8:5e:a0:71:4b:10:05:20:7a:53:bc:a0:
72:25:cb:5b:f2:51:19:5f:cf:28:e2:e1:19:09:ef:
43:ec:d2:ee:d7:90:fd:d5:0e:74:a7:b9:fb:49:29:
b7:9a:35:ae:e6:de:87:27:f7:b5:eb:fb:b0:b2:76:
a7:50:dd:af:6d:a7:b4:8c:d7:91:97:fb:a7:ce:83:
9f:5e:ed:f1:5e:35:0d:dd:cf:b2:cc:a0:f5:eb:de:
d8:77:75:4c:a0:0b:6e:f5:e7:66:73:ab:d4:d3:64:
9d:86:cc:99:d9:e2:e5:fe:6f:26:82:8c:ca:9f:46:
7a:b1:2d:e6:7d:37:c1:4a:5e:85:0b:47:25:10:d4:
a8:f2:73:35:ec:17:a9:bf:0b:1a:a2:90:24:a4:bc:
bc:c8:b4:d6:99:27:85:96:ce:7b:df:32:ea:01:d5:
39:7d:92:a0:8f:42:b4:ae:60:4b:87:9c:8d:91:f4:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:D8:1D:F1:6C:43:51:0F:4F:31:5D:67:78:E4:92:51:B4:65:E7
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/ppTYHfFsQ1EPTzFdZ3jkklG0Zec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/18
62.102.128.0/20
93.117.176.0/20
93.119.208.0/20
178.131.0.0/16
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
06:de:36:c3:bd:b3:4a:03:87:c5:09:c5:71:84:e1:32:78:72:
12:53:67:74:c6:d8:13:e9:53:4f:22:b5:73:37:a0:f2:0f:a5:
b1:6d:49:7f:85:40:a5:1a:11:15:15:5e:95:48:4b:0d:92:d9:
d8:fb:b1:20:71:2c:a6:fe:24:cd:72:94:55:c3:16:a1:59:b8:
05:26:4f:c5:3e:1d:9e:bc:7e:97:63:07:b5:c3:ff:e1:15:4a:
ce:0f:53:d9:37:cd:16:41:a2:0b:5a:5a:ca:ce:e0:17:06:96:
c0:55:a8:71:39:e0:2a:e6:fc:74:79:8d:4f:7c:5a:d4:0f:9d:
47:14:9f:dc:32:92:2e:c1:c9:8b:a9:07:e9:76:c8:ec:4a:91:
3d:f8:43:47:fd:13:89:2b:24:e8:57:be:7d:7d:dc:76:d2:f2:
c0:1f:5b:92:c7:75:ad:67:ce:9e:7b:4e:45:b7:2d:2d:09:54:
3f:09:07:41:76:c8:a2:88:96:c1:38:95:91:2b:a5:55:e3:af:
cb:25:bb:ec:83:0b:a7:66:cc:77:ba:1b:e2:20:89:7b:fc:47:
71:f9:be:cc:f0:d5:8f:30:53:c8:d4:0a:39:f9:ce:f9:2a:26:
83:39:3a:ce:10:38:42:a0:62:5a:76:76:b6:fd:33:bb:33:c0:
ac:13:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:27 2024 by rpki-client on console-ams.rpki-client.org