Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/VtjgAqvRG-HcA7aYgtz9E4hLO1c.roa
File: VtjgAqvRG-HcA7aYgtz9E4hLO1c.roa (raw, json)
Hash identifier: /vpBmSZmbtvjBhP6xHwwdzif6Pmg70hIRoVzAXiH4tk=
Subject key identifier: 56:D8:E0:02:AB:D1:1B:E1:DC:03:B6:98:82:DC:FD:13:88:4B:3B:57
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 01856E2FC940C58A4E7957884A7B63D7877A
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/VtjgAqvRG-HcA7aYgtz9E4hLO1c.roa
Signing time: Sun 01 Jan 2023 16:35:03 +0000
ROA not before: Sun 01 Jan 2023 16:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42841
IP address blocks: 88.212.0.0/19 maxlen: 19
88.212.0.0/20 maxlen: 20
88.212.0.0/18 maxlen: 18
88.212.16.0/20 maxlen: 20
88.212.32.0/20 maxlen: 20
88.212.32.0/19 maxlen: 19
88.212.48.0/20 maxlen: 20
185.61.16.0/22 maxlen: 22
2a02:130::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:c9:40:c5:8a:4e:79:57:88:4a:7b:63:d7:87:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Jan 1 16:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56d8e002abd11be1dc03b69882dcfd13884b3b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:ba:47:e3:5d:fa:fd:82:38:e8:06:5a:5a:
20:5b:ac:b6:c6:7d:18:cc:c6:ed:8d:0b:55:28:9a:
41:18:bc:66:95:9f:f9:37:3b:4e:92:13:ec:23:2b:
00:68:c2:75:2f:10:50:c8:24:9b:89:81:4a:41:fb:
2f:93:5d:1b:45:25:31:00:29:e0:1a:3c:73:bb:5a:
27:83:a4:a8:55:eb:2c:c0:97:fb:b4:d2:df:7f:71:
f2:dd:aa:58:a4:be:2e:12:fd:4a:18:6b:7c:f2:ce:
f9:75:e1:67:e4:df:b4:43:aa:92:c3:4d:72:47:16:
ac:8c:13:0d:01:19:8c:94:d3:02:ac:56:ab:26:d7:
2a:c4:ac:21:ee:dd:e5:06:df:07:91:8f:67:e7:0f:
c7:27:2e:37:42:64:19:32:82:a1:11:c2:5f:83:1c:
d3:36:e7:99:b3:93:98:84:2f:79:c7:65:a0:92:e1:
4b:3c:25:bb:df:f1:ee:4e:bf:eb:70:66:1b:91:f1:
b9:0d:6f:b3:dd:ec:66:05:7b:96:01:05:3e:f1:60:
5b:d8:98:e8:25:c6:3e:ff:d1:2b:d4:f1:36:05:c7:
2e:2d:70:a9:93:ba:b7:7e:24:fd:e5:7e:26:82:11:
8a:49:de:96:ef:95:d1:77:2e:4e:fb:ee:da:dc:13:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D8:E0:02:AB:D1:1B:E1:DC:03:B6:98:82:DC:FD:13:88:4B:3B:57
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/VtjgAqvRG-HcA7aYgtz9E4hLO1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.212.0.0/18
185.61.16.0/22
IPv6:
2a02:130::/32
Signature Algorithm: sha256WithRSAEncryption
85:06:88:49:6a:c2:95:b6:47:21:45:12:e7:b1:40:35:39:5c:
9e:ef:2b:f9:69:12:21:d8:9d:6b:0c:4b:00:c2:05:cb:35:2e:
4f:20:a2:2d:6a:49:7b:d8:13:de:30:b6:56:69:ba:f2:2d:b7:
40:0d:33:a8:66:b6:6d:b9:a5:91:de:1d:1a:3f:a8:29:5e:5f:
6f:f8:cc:02:b2:76:62:0e:a6:92:fb:46:63:98:0a:1e:04:79:
2e:c9:56:87:44:98:cf:d9:e4:09:9d:f2:7f:af:9c:21:14:34:
fc:dd:0f:49:71:8a:76:90:6d:d4:e9:5e:6b:32:7a:ea:93:8a:
5e:f2:84:34:85:d7:d6:05:d8:0a:26:ff:ad:84:ff:22:37:4a:
9c:dc:19:a7:6f:ab:3f:3c:91:c0:6e:69:47:a8:e9:93:8e:eb:
f2:40:6a:cb:8b:00:3c:99:04:44:a0:ad:5c:ae:bd:84:00:5f:
2c:ab:ab:2b:c3:b6:a7:34:31:b9:99:1d:59:0d:6b:2a:0e:27:
1a:e9:7c:99:4c:58:58:55:f0:e2:e5:63:9e:2d:93:54:95:8b:
69:f7:5c:8d:03:98:e9:a8:af:05:11:7d:34:97:84:4a:4e:e2:
61:ee:fd:2c:ad:51:2c:5c:fc:26:f5:84:9f:0b:3a:4a:8a:9b:
3f:dc:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:55 2024 by rpki-client on console-ams.rpki-client.org