Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/N5AEuIifbG31QrQLPNw2i04vrTE.roa
File: N5AEuIifbG31QrQLPNw2i04vrTE.roa (raw, json)
Hash identifier: 3SIeJNHZZOmyrmbgBD2UgQCOKjEe+U517ghC+Nu9bkY=
Subject key identifier: 37:90:04:B8:88:9F:6C:6D:F5:42:B4:0B:3C:DC:36:8B:4E:2F:AD:31
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 0193627EFE4E7BB585C8F6A79CFE8B772423
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/N5AEuIifbG31QrQLPNw2i04vrTE.roa
Signing time: Mon 25 Nov 2024 08:45:09 +0000
ROA not before: Mon 25 Nov 2024 08:45:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212318
IP address blocks: 88.218.113.0/24 maxlen: 24
88.218.115.0/24 maxlen: 24
93.179.90.0/23 maxlen: 24
178.57.65.0/24 maxlen: 24
178.57.66.0/23 maxlen: 24
178.57.68.0/24 maxlen: 24
185.217.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 10:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:7e:fe:4e:7b:b5:85:c8:f6:a7:9c:fe:8b:77:24:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Nov 25 08:45:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=379004b8889f6c6df542b40b3cdc368b4e2fad31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:53:71:bb:da:a6:00:ca:33:fa:07:a9:45:
34:c6:e4:b9:26:e0:c2:0e:e5:4e:0e:fa:29:99:1d:
6b:84:96:49:63:57:25:9d:e0:f2:1f:c2:22:c5:54:
0b:1b:7d:c0:84:7d:4f:82:4d:e1:d3:89:08:aa:81:
59:2f:fa:da:21:5e:29:50:c5:a1:83:2e:18:54:88:
52:93:1a:da:74:ff:a4:b6:45:3e:86:22:b9:9f:df:
99:15:14:48:c7:98:25:ba:27:ab:69:20:10:d1:3d:
fb:0d:6d:9c:be:69:af:5e:42:d6:45:3c:fa:68:86:
e3:be:31:a1:6d:f8:6f:e1:cc:cf:25:a6:58:9f:88:
ea:74:21:c4:23:bc:49:e0:48:5c:82:a9:55:21:d9:
e2:41:30:e1:38:52:c4:c2:20:cc:f5:6e:ad:38:ff:
21:da:4f:7a:74:e8:1d:23:7f:ba:2d:ae:a1:5d:f5:
67:f7:d2:45:1b:a9:16:88:a0:0b:fc:2f:91:1f:c8:
19:aa:ed:15:4f:14:0d:2a:39:af:ae:dc:ea:5f:33:
46:82:68:74:bd:9b:a4:42:b4:0f:4b:e8:d9:d5:1f:
80:88:af:a8:c8:12:96:7a:ea:23:54:bc:21:82:db:
f2:c8:2c:0f:05:e9:15:f4:b4:b7:e9:95:6a:31:63:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:04:B8:88:9F:6C:6D:F5:42:B4:0B:3C:DC:36:8B:4E:2F:AD:31
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/N5AEuIifbG31QrQLPNw2i04vrTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.113.0/24
88.218.115.0/24
93.179.90.0/23
178.57.65.0-178.57.68.255
185.217.37.0/24
Signature Algorithm: sha256WithRSAEncryption
94:16:83:5a:46:25:cf:dd:08:f3:a6:19:67:29:62:4a:34:06:
49:48:cb:35:fc:ce:5f:60:20:7c:80:b0:9a:d1:3a:d9:84:8c:
3d:1a:11:b4:eb:af:3f:7e:f2:d5:5a:18:82:0e:d4:07:02:7e:
f3:be:02:25:b0:6c:7f:41:8c:b0:8c:ce:cf:03:e3:0c:0a:ed:
8d:de:49:f1:65:71:4d:d8:3e:b2:06:59:3c:73:d1:d3:b7:df:
bb:1d:51:7c:83:2b:28:0d:03:3d:92:47:2a:6b:ec:c3:e1:b1:
b0:f6:6b:86:eb:e2:52:ae:7b:af:d0:05:c2:2c:1a:b2:79:77:
28:3a:6b:20:6c:99:9d:99:cc:da:61:d0:9a:38:48:f0:80:cc:
a6:40:36:58:b7:c8:73:b7:5b:7d:9d:7b:49:31:93:6d:68:68:
a2:5c:eb:8b:28:f2:1c:f3:75:f1:86:47:21:1f:8e:41:bf:b2:
82:ed:1e:ad:ba:9c:81:8c:47:03:3a:63:16:1e:5d:7b:2b:c2:
fd:03:92:d4:61:14:51:1f:1c:bb:2a:a7:cd:41:1f:49:31:2e:
58:d2:b9:6a:03:05:fb:8c:9d:16:6c:8d:4b:c6:82:00:76:94:
a2:c8:5a:38:6f:55:a9:69:32:81:a9:9a:78:54:d1:53:57:97:
7f:63:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:35:28 2025 by rpki-client