Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8-eJt7ifK8p4dJj2ohv2ivnBveo.roa
File: 8-eJt7ifK8p4dJj2ohv2ivnBveo.roa (raw, json)
Hash identifier: EPxsav/wI02V9DLA19OwBPEy73Uc2EQ6HwZ6FOelyEo=
Subject key identifier: F3:E7:89:B7:B8:9F:2B:CA:78:74:98:F6:A2:1B:F6:8A:F9:C1:BD:EA
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018779994A16966F4956A897873288A0770C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8-eJt7ifK8p4dJj2ohv2ivnBveo.roa
Signing time: Thu 13 Apr 2023 07:51:41 +0000
ROA not before: Thu 13 Apr 2023 07:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 10:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:99:4a:16:96:6f:49:56:a8:97:87:32:88:a0:77:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 13 07:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3e789b7b89f2bca787498f6a21bf68af9c1bdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:24:ba:c6:70:9c:b3:34:0a:86:24:eb:bd:
96:e2:27:53:44:b5:79:00:de:06:24:da:b7:e0:09:
51:2c:64:2a:a5:96:b2:f8:49:03:05:92:a6:69:b9:
eb:6f:ff:7d:07:92:6d:66:5a:3f:db:16:5d:b1:0d:
13:86:09:b7:e4:8d:b9:91:2f:00:6f:de:87:2f:d3:
46:ad:f6:10:f7:37:9a:3f:9c:b7:16:e9:48:7e:40:
0f:6e:ad:4e:b8:c4:d3:19:82:83:d8:03:d6:34:8c:
6d:3d:a2:49:83:26:3a:e6:06:18:d1:2b:7f:16:c5:
17:e3:c4:62:45:d1:9d:1a:08:4a:e7:33:b4:62:fc:
39:1e:0b:d6:9c:35:6f:7b:fb:7a:d1:95:a7:d3:0a:
a5:cb:89:07:d1:9b:72:b4:7d:dd:e2:12:76:95:ee:
fa:7d:c6:d3:43:09:cf:bf:83:40:d4:36:5d:bb:d8:
a4:5a:fd:b6:f7:36:18:d3:a5:ac:4c:26:e8:5c:d6:
fc:fa:6d:f8:9d:d4:67:55:3b:ca:64:89:75:bd:f3:
7b:86:5b:95:53:56:32:4f:2f:9c:07:50:1e:60:d5:
4b:fe:af:42:20:2d:87:41:6c:0c:fb:b0:a5:6e:9a:
81:d3:d9:c5:72:00:55:e6:ca:03:75:7a:2d:fd:43:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E7:89:B7:B8:9F:2B:CA:78:74:98:F6:A2:1B:F6:8A:F9:C1:BD:EA
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8-eJt7ifK8p4dJj2ohv2ivnBveo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
88.151.56.0/24
88.209.216.0/24
88.209.225.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f8:f4:d2:05:ae:19:97:84:03:a7:48:0b:c7:32:a4:10:a3:
be:78:57:9c:e0:b4:c2:fe:dd:01:02:a3:43:17:30:1c:f1:c5:
9f:99:0c:59:a7:87:28:00:80:1a:d2:96:1c:64:f0:90:70:7e:
20:48:10:5d:fd:41:da:e8:9a:6a:b2:26:4a:41:6a:fd:40:97:
8c:bc:53:05:39:5d:ed:d3:ec:62:31:c1:c4:ad:49:d1:5e:ab:
5e:9c:f2:3a:0b:9b:2c:8c:ae:b8:ec:27:ab:d0:4d:89:4a:bf:
0e:96:99:e2:bc:32:d2:38:ef:ce:61:06:9f:d9:bd:15:c8:78:
4c:55:55:36:12:ef:9e:d7:89:a1:7e:42:a7:13:d5:c5:4a:af:
46:75:f5:0c:7e:c8:0e:6f:f1:a8:81:ef:c7:7b:4a:01:8c:1b:
03:76:0f:37:97:57:8d:17:5e:7a:46:44:c5:08:0f:d1:f9:55:
d1:84:9d:8a:73:99:65:7d:b9:9f:b0:73:bb:fa:a1:7a:a3:8e:
5a:51:a1:9b:1c:e4:52:8e:89:e2:91:23:89:f8:6b:a4:fc:64:
c4:a9:03:3a:ec:8d:9c:04:1b:e0:68:aa:92:1e:ac:bb:0a:a7:
cb:f5:71:9c:35:08:1a:28:94:4f:65:bb:ff:5e:b9:eb:27:8c:
1f:23:7c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org