Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/ElQ_aoSqmiyZQdIL9TfMqoe7Fzs.roa
File: ElQ_aoSqmiyZQdIL9TfMqoe7Fzs.roa (raw, json)
Hash identifier: AhXWc0w2+v5+E1JNKwPueAgYfu8b7qaFtCeEV8h4RBo=
Subject key identifier: 12:54:3F:6A:84:AA:9A:2C:99:41:D2:0B:F5:37:CC:AA:87:BB:17:3B
Certificate issuer: /CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Certificate serial: 018F72D002E5B0A403D36A3C8EEF14144B62
Authority key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/ElQ_aoSqmiyZQdIL9TfMqoe7Fzs.roa
Signing time: Mon 13 May 2024 16:36:25 +0000
ROA not before: Mon 13 May 2024 16:36:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197524
IP address blocks: 5.22.240.0/21 maxlen: 21
88.133.0.0/17 maxlen: 17
88.133.0.0/19 maxlen: 19
88.133.64.0/19 maxlen: 19
88.133.128.0/20 maxlen: 20
88.133.156.0/22 maxlen: 24
109.199.160.0/19 maxlen: 19
185.9.64.0/22 maxlen: 22
2a01:a980::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 05 Aug 2024 14:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:d0:02:e5:b0:a4:03:d3:6a:3c:8e:ef:14:14:4b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Validity
Not Before: May 13 16:36:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12543f6a84aa9a2c9941d20bf537ccaa87bb173b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:56:da:8d:00:ca:4d:10:2d:77:d6:68:8a:
1a:3d:a6:ec:5d:b0:08:e3:dd:1b:49:b6:bc:05:10:
1d:e4:bb:24:a4:ce:f8:72:46:16:2c:02:e0:f8:34:
d3:fd:64:13:12:6e:da:df:04:9e:ae:0b:bd:46:34:
64:68:c2:f1:cb:c7:ed:8f:6c:99:9c:e5:fd:3c:b1:
10:f8:15:71:4a:92:2a:74:17:2e:84:1d:49:b3:4e:
62:0d:6b:a3:48:ae:cc:d6:f5:d7:76:67:e0:1b:67:
29:9d:16:31:0e:9e:67:9b:53:7a:ea:e0:71:cb:d5:
6f:f8:74:5f:59:24:b4:10:be:36:d3:35:70:9e:c5:
87:dc:17:6f:98:3d:78:4c:1b:7f:45:52:e1:ab:b1:
ef:6b:9f:af:f7:41:fc:df:a1:67:58:f2:a6:dc:ca:
26:f3:1a:3f:10:96:b9:d5:e9:2a:6d:82:fb:81:31:
d8:a8:a1:c5:90:c9:ae:8a:aa:24:a9:34:25:c3:dd:
fc:99:b1:b7:f8:54:80:5b:0c:d3:fe:d7:a3:a2:d0:
44:9e:d2:64:20:dc:60:e2:7e:7e:6f:15:c2:71:4f:
71:26:02:5d:32:c0:7f:50:e8:00:75:3a:8b:02:82:
5c:c2:90:bb:31:7f:3e:66:33:ef:81:d3:a2:f4:c4:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:3F:6A:84:AA:9A:2C:99:41:D2:0B:F5:37:CC:AA:87:BB:17:3B
X509v3 Authority Key Identifier:
keyid:9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/ElQ_aoSqmiyZQdIL9TfMqoe7Fzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.240.0/21
88.133.0.0-88.133.143.255
88.133.156.0/22
109.199.160.0/19
185.9.64.0/22
IPv6:
2a01:a980::/29
Signature Algorithm: sha256WithRSAEncryption
32:06:35:4f:38:13:b7:9d:f3:bb:aa:91:28:08:9c:69:17:c3:
28:47:10:0c:0a:88:4d:c0:0d:a8:b7:55:f6:cb:d1:42:9a:f9:
22:d9:12:cf:06:21:a2:28:e5:b0:20:e3:e1:cc:d0:84:a4:85:
6c:c8:f7:78:01:8a:89:cf:6d:a3:16:b9:45:5e:a9:4b:5b:52:
c5:50:1f:bc:98:ef:0d:16:ea:10:1f:40:12:3a:86:2c:df:17:
93:93:5e:3e:51:b7:41:26:45:de:9a:37:5a:13:40:54:d5:a3:
ad:f6:47:7e:30:6f:02:8f:7e:27:46:73:20:ca:10:3b:15:90:
1a:ef:ca:c4:eb:8c:f3:d9:8e:8f:0f:3a:5c:ba:d1:09:ea:87:
f8:92:c4:9f:58:b7:ab:9e:98:e4:11:79:d5:0b:96:24:7b:6f:
40:df:b3:f7:7d:d3:8c:85:19:6f:f7:58:61:39:de:c2:cd:28:
4d:57:57:e5:49:89:99:05:6b:39:fa:95:bd:d1:a0:c5:5f:fc:
58:8a:94:1e:b9:5a:7c:0f:cb:0c:38:a6:d5:ab:43:d3:c6:2a:
0e:83:b0:2c:74:36:6a:99:20:f0:6d:42:50:56:61:27:44:4f:
94:9d:36:61:f2:d7:12:b0:af:2d:94:2a:ba:a8:27:fa:f2:60:
15:32:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 18:29:35 2024 by rpki-client on console-ams.rpki-client.org