Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zpum3NyoLA3vpauKC6KYvwZ5JVc.roa
File: zpum3NyoLA3vpauKC6KYvwZ5JVc.roa (raw, json)
Hash identifier: 0GVCYDH26wthp81RthVKFcXY4zYFzz313eanSvaB7CU=
Subject key identifier: CE:9B:A6:DC:DC:A8:2C:0D:EF:A5:AB:8A:0B:A2:98:BF:06:79:25:57
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E61675320ECFB7CEE84D9516ED901B26F
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zpum3NyoLA3vpauKC6KYvwZ5JVc.roa
Signing time: Thu 21 Mar 2024 14:25:45 +0000
ROA not before: Thu 21 Mar 2024 14:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
95.100.128.0/22 maxlen: 22
2a02:26f0:9700::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 15:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:67:53:20:ec:fb:7c:ee:84:d9:51:6e:d9:01:b2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 21 14:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce9ba6dcdca82c0defa5ab8a0ba298bf06792557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:9c:30:00:95:f9:18:a3:95:55:a4:86:6d:
50:f0:97:eb:34:8a:95:58:7b:f3:a5:5c:5e:46:e4:
8a:51:2b:09:d9:6e:6d:6c:6a:f3:21:1c:ff:79:09:
de:59:9b:c4:c6:32:1c:4c:5e:3d:12:38:1d:b5:86:
ba:a1:4e:f0:7a:43:67:23:77:93:e7:6a:a2:ec:41:
d7:4d:30:73:dc:65:cf:d4:12:bb:aa:83:34:21:00:
fc:3f:6c:5b:f4:d4:ef:99:8a:40:8d:c0:de:eb:6c:
19:6f:14:42:78:53:24:34:ac:47:61:f8:e5:b5:ae:
82:5a:16:aa:de:22:4a:d5:ab:b5:52:d7:aa:5e:56:
6b:5a:b7:70:e5:87:ff:f1:8b:ec:5a:79:fe:29:e5:
45:f2:62:fa:0c:5d:ee:b7:a4:32:a6:f8:1f:6a:07:
9e:53:a6:5c:6d:5e:c1:04:83:22:58:8a:82:c4:17:
b9:b4:b4:1f:42:be:b8:19:a9:3a:12:72:1e:4e:29:
d1:da:fd:25:4c:c9:b6:29:ae:82:fb:20:62:b7:1c:
27:55:51:31:03:7f:93:bd:74:a0:a0:6b:f5:53:98:
96:ea:8b:87:39:7a:6a:3f:00:e8:b0:72:42:12:00:
d6:72:04:c8:94:a2:0f:4c:c3:9a:f4:21:e9:04:05:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9B:A6:DC:DC:A8:2C:0D:EF:A5:AB:8A:0B:A2:98:BF:06:79:25:57
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zpum3NyoLA3vpauKC6KYvwZ5JVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.221.28.0/22
88.221.100.0/22
95.100.128.0/22
IPv6:
2a02:26f0:9700::/48
Signature Algorithm: sha256WithRSAEncryption
a5:d7:4e:d0:28:87:83:e5:42:90:78:bc:e1:f2:a6:10:d3:27:
a6:14:bc:a6:d8:ac:31:9a:84:7f:b0:62:a9:45:dd:96:19:0b:
b7:52:99:6e:a4:f8:4d:aa:d9:11:ca:3b:ed:60:9f:66:fa:ec:
27:f7:39:72:c3:af:a3:c1:70:3c:30:ee:74:68:93:59:42:4e:
cc:59:ae:6c:58:a9:c0:88:fa:27:bb:df:af:7f:85:24:19:72:
0d:d7:23:08:76:cb:35:3b:eb:1c:c4:03:42:93:05:f5:ab:d2:
3a:2e:dc:d4:b2:5b:2b:c2:f5:bb:a0:dd:21:b8:59:3b:9f:67:
bb:3a:fe:77:b9:a7:cc:22:f2:c7:3f:99:19:fc:4c:db:70:d4:
87:e9:13:a9:95:74:14:cb:2c:fb:94:cf:26:0c:dc:cd:80:f6:
fb:a8:55:ce:69:36:9b:36:30:fb:d0:a3:bc:d3:be:87:8b:a1:
b2:99:1e:de:80:10:07:0c:0e:30:b9:32:27:79:77:13:30:57:
f4:4f:14:78:1b:81:2a:e5:10:c1:93:9f:a8:cb:5f:de:34:a6:
22:1b:c3:c9:b9:04:ab:98:ea:0f:73:8f:5e:fe:a6:10:3e:ec:
bc:69:34:fe:84:ce:8f:66:de:63:06:76:9c:2a:5e:74:3d:66:
e5:09:4a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 22:22:24 2024 by rpki-client on console.sobornost.net