Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/88S-uH9SHUiJ0ynDOH5lWabeY4A.roa
File: 88S-uH9SHUiJ0ynDOH5lWabeY4A.roa (raw, json)
Hash identifier: V+hpZdevjQR0tXIRwLTNCEg8ovN2i/cCUAzR43pGqqA=
Subject key identifier: F3:C4:BE:B8:7F:52:1D:48:89:D3:29:C3:38:7E:65:59:A6:DE:63:80
Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial: 0189261FE2AA1DCBBB14F4BEA2566AB4A0BF
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/88S-uH9SHUiJ0ynDOH5lWabeY4A.roa
Signing time: Wed 05 Jul 2023 12:56:11 +0000
ROA not before: Wed 05 Jul 2023 12:56:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198948
IP address blocks: 178.218.193.0/24 maxlen: 24
91.239.248.0/22 maxlen: 24
185.129.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:1f:e2:aa:1d:cb:bb:14:f4:be:a2:56:6a:b4:a0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
Validity
Not Before: Jul 5 12:56:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3c4beb87f521d4889d329c3387e6559a6de6380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:0a:fe:98:84:32:6d:f0:6e:d8:56:a8:53:
05:e2:cf:8d:de:55:6a:04:da:2d:88:a6:fb:ba:7b:
c5:4d:63:9b:f1:03:d4:6e:dc:bf:b5:ec:62:38:a7:
d9:01:93:4d:1d:34:53:bd:5d:ec:62:b6:c5:c4:59:
ca:7a:e9:97:91:6e:bc:fa:c8:3a:80:64:89:b8:b1:
d2:82:e9:c2:1f:af:85:b2:37:ea:63:af:a4:43:28:
02:7e:ed:4c:b8:f5:08:8f:b6:a6:d6:53:5e:21:d7:
84:e2:65:6f:aa:7c:7b:90:57:e6:39:2c:89:41:ac:
ab:24:74:25:d5:72:04:16:41:48:ea:ee:ef:4e:f1:
79:b5:da:10:63:ec:1f:50:48:3f:91:97:41:13:dd:
46:3a:2a:45:75:22:a3:82:e8:a9:38:3b:b7:c8:85:
3c:c7:60:8d:83:2e:c2:1f:a6:ab:1a:3e:2e:a8:61:
da:e9:3f:c9:07:40:eb:41:65:a9:f4:cf:5c:95:04:
90:b5:cd:7d:8d:bf:40:15:d3:81:e3:78:9b:ed:37:
7f:af:77:74:fc:1c:cc:cb:b4:2b:d0:56:85:80:e6:
4f:26:f5:3d:1b:23:34:04:72:2b:22:6e:df:5d:4d:
17:eb:94:ef:3b:b3:b4:a8:6c:c0:cd:7d:b7:31:74:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C4:BE:B8:7F:52:1D:48:89:D3:29:C3:38:7E:65:59:A6:DE:63:80
X509v3 Authority Key Identifier:
keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/88S-uH9SHUiJ0ynDOH5lWabeY4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.248.0/22
178.218.193.0/24
185.129.112.0/22
Signature Algorithm: sha256WithRSAEncryption
35:df:fc:ee:b6:56:15:e2:3b:9c:9b:9c:ab:9b:a5:08:59:a1:
31:6b:9b:70:2e:f1:9c:ce:b7:2b:f1:59:84:ea:84:29:3c:6d:
a4:f6:db:01:10:ba:e6:f0:11:56:83:4f:54:00:15:d1:3a:72:
9b:c2:af:cf:a0:c1:18:e4:0e:f7:43:02:f4:38:c4:c3:53:f0:
ea:5a:08:0a:68:29:d5:68:e5:56:e3:51:95:5f:ab:d3:72:a4:
dc:48:37:97:2e:90:d8:c8:2f:aa:b3:67:30:a0:8a:ca:0f:7d:
90:ec:83:cb:6a:50:6f:b8:14:21:ab:1f:3b:34:b4:9f:56:06:
68:ee:88:a8:03:3d:bf:b5:e1:1d:ea:f8:d2:b5:f7:67:35:fd:
02:29:1f:33:50:98:dd:84:25:ba:a4:6a:70:0f:85:e3:da:1d:
a4:59:18:17:e5:d6:02:31:63:8d:30:6b:90:0f:10:58:e8:b9:
2e:c7:e5:5c:c6:3d:b2:bd:23:bd:89:39:e9:9c:e6:d5:50:05:
31:fa:f0:34:f1:ea:b4:a3:e4:6a:45:c6:c5:7f:52:fe:cd:0c:
09:93:74:5c:e1:db:00:48:71:be:33:29:6d:5e:8c:85:d1:b8:
d3:2e:8b:b4:04:d1:d3:59:46:85:5f:04:fd:1f:dd:0a:03:26:
91:96:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org