Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/QxtoDF59omMTb3h7FVP2ErEyWYo.roa
File: QxtoDF59omMTb3h7FVP2ErEyWYo.roa (raw, json)
Hash identifier: HID7zdpp7wTE+mZACnvOUJFM1CUdsI1XbDlf2ZEekTE=
Subject key identifier: 43:1B:68:0C:5E:7D:A2:63:13:6F:78:7B:15:53:F6:12:B1:32:59:8A
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 01856B934BFED5E24187C7FB54554112F43C
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/QxtoDF59omMTb3h7FVP2ErEyWYo.roa
Signing time: Sun 01 Jan 2023 04:24:53 +0000
ROA not before: Sun 01 Jan 2023 04:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21371
IP address blocks: 88.84.128.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:4b:fe:d5:e2:41:87:c7:fb:54:55:41:12:f4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jan 1 04:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=431b680c5e7da263136f787b1553f612b132598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:31:d9:e8:08:9f:4c:67:34:96:b3:d7:ab:e1:
f8:29:7b:a0:81:ae:44:52:e5:48:6d:0a:5e:81:cc:
03:f5:8d:bd:22:ee:f6:d9:47:84:48:bd:97:a3:88:
b0:e7:a2:d1:33:38:03:0d:db:27:53:1d:03:94:bd:
e2:59:ba:f2:4c:0f:4a:78:e5:5d:63:1b:94:b8:41:
fd:d2:9c:91:38:bd:45:6a:2d:79:1f:44:09:81:55:
e7:48:21:3b:ff:c9:5c:35:e9:3c:df:00:19:c6:20:
1c:99:54:f5:d4:fb:bf:62:8a:cf:6e:f7:d7:01:15:
f3:4e:ca:3e:72:a1:8b:27:fd:33:fd:1f:84:34:22:
bc:31:3b:6a:ab:fc:01:eb:4a:39:a1:f4:13:6b:27:
1e:fb:b3:52:3d:77:c1:84:d8:c4:98:ba:1d:a7:dd:
fd:5c:a6:c5:c3:79:49:34:8b:a6:e7:3a:86:34:00:
03:3a:73:ab:4f:a8:93:5e:d9:65:92:82:75:21:f8:
2b:9f:26:60:e6:25:30:6f:69:42:be:3c:b5:6f:09:
90:24:fa:d3:d1:de:83:c2:ba:c7:5c:95:1f:aa:fa:
3c:97:be:7d:ff:17:83:b0:7f:14:eb:04:34:87:3a:
f4:d3:36:cd:86:7a:aa:45:81:8f:d7:47:4f:e2:02:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1B:68:0C:5E:7D:A2:63:13:6F:78:7B:15:53:F6:12:B1:32:59:8A
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/QxtoDF59omMTb3h7FVP2ErEyWYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.128.0/21
Signature Algorithm: sha256WithRSAEncryption
25:16:6b:26:88:dd:07:2d:d2:d9:09:dc:d2:76:8b:6b:30:46:
e4:77:14:08:df:f9:7e:2c:13:c1:d9:2d:0d:0f:a9:22:0f:6f:
4f:1d:c0:e4:be:6f:20:56:a9:c5:22:09:2a:da:d8:9d:a7:7e:
f8:59:54:a2:67:4f:53:3f:18:f8:a4:b6:f2:63:79:90:9e:90:
43:f2:9b:60:2c:ff:6b:b0:88:4e:09:1b:4e:57:ed:14:66:87:
04:f3:a1:6d:d7:3b:92:43:45:0d:dc:3e:1f:15:24:a7:b4:86:
b9:af:80:c7:a1:b3:bb:1d:39:9e:09:71:46:99:d6:e6:e3:25:
0f:ba:dd:72:fe:a1:52:fa:b5:e0:5b:c0:46:4a:9d:bb:b1:92:
3c:05:2e:08:36:49:7f:96:c9:00:8b:9b:13:4f:d4:f9:fd:be:
76:76:70:ef:1b:0a:33:19:3e:7d:ef:18:52:6c:78:8c:d7:34:
e2:11:cd:60:6a:eb:31:1b:38:01:35:55:58:8d:df:9c:4f:79:
d6:88:4c:39:f1:99:4a:62:9a:d4:62:e4:9b:5e:b3:b4:20:99:
1f:78:60:98:c6:38:aa:a8:7d:8a:02:a7:e5:f3:30:d7:4a:b4:
5e:e4:32:ab:6a:23:e5:d1:4d:1a:5f:27:00:b7:11:8e:de:99:
fa:68:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:27 2024 by rpki-client on console-fra.rpki-client.org