Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/88V0W3SuLm4hP0DKE565UYisnjw.roa
File: 88V0W3SuLm4hP0DKE565UYisnjw.roa (raw, json)
Hash identifier: 5exfz684uFvKVumAlM5RCvURk7ObE0KsaCMmwP00Tzk=
Subject key identifier: F3:C5:74:5B:74:AE:2E:6E:21:3F:40:CA:13:9E:B9:51:88:AC:9E:3C
Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial: 018997D1A5DF11C16002B9EE8B012176EF1C
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/88V0W3SuLm4hP0DKE565UYisnjw.roa
Signing time: Thu 27 Jul 2023 14:47:26 +0000
ROA not before: Thu 27 Jul 2023 14:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8855
IP address blocks: 212.78.26.0/24 maxlen: 24
212.78.28.0/23 maxlen: 23
212.78.31.0/24 maxlen: 24
212.78.0.0/24 maxlen: 24
212.78.3.0/24 maxlen: 24
212.78.2.0/24 maxlen: 24
212.78.4.0/24 maxlen: 24
212.78.10.0/24 maxlen: 24
212.78.11.0/24 maxlen: 24
212.78.5.0/24 maxlen: 24
212.78.7.0/24 maxlen: 24
212.78.13.0/24 maxlen: 24
212.78.12.0/24 maxlen: 24
212.78.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 11:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:d1:a5:df:11:c1:60:02:b9:ee:8b:01:21:76:ef:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Validity
Not Before: Jul 27 14:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3c5745b74ae2e6e213f40ca139eb95188ac9e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1e:9a:f4:00:8c:52:66:67:65:7d:52:3c:29:
30:31:9e:37:ee:4b:cf:46:d0:98:5a:aa:c5:e1:8b:
77:03:f4:fd:db:ed:f4:80:5d:ac:39:86:45:22:14:
3f:f2:54:58:34:17:b2:23:13:d6:94:91:65:ff:34:
b6:23:91:ff:28:90:88:bb:15:ca:4e:0e:e8:dd:5f:
9d:33:08:1c:6c:5c:a5:78:94:81:d2:ad:9b:aa:fc:
52:75:fd:d4:a9:e3:24:5a:a5:a2:f7:ff:87:1f:50:
a2:73:2c:88:70:b8:0a:61:7b:1b:b0:32:e6:a0:ed:
d0:46:46:70:ee:01:b0:6c:b7:b2:2e:3b:84:d4:00:
b7:b5:e7:6c:45:e6:59:8e:b5:20:7f:5c:6c:a6:ec:
13:16:87:21:ed:aa:8a:d7:91:0c:d9:2a:43:08:28:
11:c7:21:e1:1d:ba:19:f7:97:53:f3:a0:33:7f:e6:
ae:01:b4:ae:24:dc:33:b1:b3:49:1d:a0:93:10:2e:
63:f2:a0:a7:eb:0d:22:1b:63:69:bc:21:e3:a6:91:
45:60:a2:04:03:3c:af:36:df:35:f9:50:b3:c1:1a:
39:25:b9:13:a4:0b:23:bc:19:dd:a8:77:aa:57:96:
a0:25:00:a7:4c:8c:c5:5b:d4:2a:05:41:18:8f:e4:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:74:5B:74:AE:2E:6E:21:3F:40:CA:13:9E:B9:51:88:AC:9E:3C
X509v3 Authority Key Identifier:
keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/88V0W3SuLm4hP0DKE565UYisnjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.0.0/24
212.78.2.0-212.78.5.255
212.78.7.0/24
212.78.10.0-212.78.14.255
212.78.26.0/24
212.78.28.0/23
212.78.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:83:ca:1a:6a:62:c4:94:19:7e:85:d7:f9:f4:c0:57:4b:7c:
17:a7:5a:9f:7a:7b:bf:81:01:fc:68:4d:19:1b:40:e8:f5:72:
03:b7:07:92:86:f1:3e:2d:2e:e0:dc:30:75:3b:65:99:5c:a3:
bc:73:88:63:38:73:f0:9a:51:49:4b:bb:61:b3:88:ba:12:c3:
3f:a0:4c:b8:66:83:a1:61:70:12:fa:d5:2e:bb:26:e6:74:74:
21:66:b7:73:2d:ca:66:61:da:76:f5:b5:ee:73:a3:ad:a6:5b:
18:b0:e1:39:1e:88:5b:49:f1:ce:9d:59:ef:d4:60:63:af:77:
8d:4f:63:ef:cd:a5:ff:69:da:61:22:a8:9a:34:32:61:7a:2e:
e1:ca:d6:57:a2:e3:88:78:dd:02:84:22:13:44:26:95:c6:1a:
bb:93:c2:76:bf:fb:13:42:94:ca:26:7f:45:2c:89:a5:e4:c8:
b7:2d:80:d1:01:e7:47:aa:07:3f:20:28:33:f3:b4:ee:9e:9e:
c4:e0:ae:28:46:f6:c4:dc:c6:71:34:d2:8e:e8:3c:b4:63:ab:
50:a7:c4:1e:28:d7:2d:d4:67:92:5b:ff:d5:2a:37:0d:81:29:
7d:67:47:ef:77:e5:07:41:d1:24:18:a5:83:9d:7d:de:de:82:
22:c7:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:10 2024 by rpki-client on console-fra.rpki-client.org