Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/nEvLLye9g_u_ZwCv1FdfqO_RoQM.roa
File: nEvLLye9g_u_ZwCv1FdfqO_RoQM.roa (raw, json)
Hash identifier: RwQbSX2Lmr5UK6V9m/jxONCB9Xf12FxVFWdSzTZw6Mo=
Subject key identifier: 9C:4B:CB:2F:27:BD:83:FB:BF:67:00:AF:D4:57:5F:A8:EF:D1:A1:03
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 0192B5001EB3CD003FDE80C45EA79EC251F9
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/nEvLLye9g_u_ZwCv1FdfqO_RoQM.roa
Signing time: Tue 22 Oct 2024 16:12:16 +0000
ROA not before: Tue 22 Oct 2024 16:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 09:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:00:1e:b3:cd:00:3f:de:80:c4:5e:a7:9e:c2:51:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Oct 22 16:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c4bcb2f27bd83fbbf6700afd4575fa8efd1a103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:8a:a3:02:e5:8c:0d:18:74:a7:43:82:28:
18:33:ea:67:ea:bf:63:80:8f:1d:a6:37:0f:bd:f3:
2e:a2:e6:59:80:42:ba:43:6e:1c:99:19:0d:7d:ee:
d9:c5:a4:99:cb:bd:76:1a:40:67:02:91:e6:1a:68:
6a:1b:d4:77:94:69:22:f2:1a:34:dc:74:60:de:38:
d7:d3:d7:66:fc:56:83:b2:3d:ac:3f:59:b8:a7:9e:
f1:e8:b7:9b:4a:a4:a3:ba:15:f8:e5:1f:08:95:d0:
ab:70:a2:3d:6b:e1:77:45:70:ed:6f:d2:26:6b:11:
72:b1:18:23:a7:1a:7c:c1:ae:51:33:cf:f2:de:5a:
ca:29:89:86:a1:c3:b4:36:64:a5:20:c7:84:3e:9b:
78:64:34:64:fe:0b:5a:bb:49:61:1f:c1:54:a0:d4:
d5:db:be:a8:a8:60:36:9b:33:df:d0:66:af:bf:97:
4c:53:b6:c5:ad:c8:dd:e7:4a:b7:01:b2:d9:89:eb:
bf:85:80:04:2e:65:ed:ee:23:c0:b3:a1:8d:fc:fe:
72:e2:10:bd:df:08:cf:78:aa:d3:a2:61:2f:cb:48:
68:b2:b7:1d:d8:6e:33:73:8c:28:fd:33:1d:7f:d6:
1b:4a:68:52:98:c3:7d:7a:3f:31:7a:fe:0c:d3:d8:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:CB:2F:27:BD:83:FB:BF:67:00:AF:D4:57:5F:A8:EF:D1:A1:03
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/nEvLLye9g_u_ZwCv1FdfqO_RoQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.157.230.0/23
Signature Algorithm: sha256WithRSAEncryption
42:01:89:a6:76:82:bb:6b:02:de:77:f0:c6:0a:96:32:46:a5:
6c:ff:80:f9:2a:75:d3:6c:16:d0:b1:7f:f1:75:3c:3d:52:4b:
cf:ee:16:a6:07:4a:9f:6a:d7:27:7f:ac:fe:8c:ef:3d:df:9b:
6c:7e:03:ec:86:85:dc:ea:3b:f1:0b:a2:fa:fe:71:0d:d3:74:
61:74:47:81:2a:81:c5:f4:04:94:02:8c:44:c4:ab:9e:49:9c:
42:2a:6c:4d:df:1f:d0:9c:69:ea:5c:ba:02:0c:c9:68:32:13:
ba:0d:d6:7c:7e:d0:2f:85:fd:be:17:df:bc:13:f5:fc:2e:88:
46:4e:f7:2f:3c:eb:28:d1:f3:7e:04:da:77:eb:26:1b:22:e2:
a3:f9:54:00:52:5c:03:83:dd:e7:db:ad:ce:9a:47:c5:16:57:
9e:1b:50:8c:4a:ca:ee:c9:3b:af:80:39:68:01:4b:bf:48:88:
fc:11:d2:06:7e:7d:ba:ff:b7:9f:33:0a:34:72:fe:6c:9a:dc:
36:61:c8:20:3f:1a:cf:16:60:45:b8:85:07:31:97:53:28:ec:
e7:ed:b6:6e:43:5f:e5:df:8f:dc:74:91:72:63:1c:34:45:08:
32:f9:fe:80:90:2e:96:02:0c:d8:c0:ee:36:cd:12:59:0b:b9:
a5:32:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:14:49 2025 by rpki-client