Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/auFrqBjegy0nWgI1wfOrEJY__T0.roa
File: auFrqBjegy0nWgI1wfOrEJY__T0.roa (raw, json)
Hash identifier: FOrl/U6f4xOZw15wL+NOauQkdDLTgAqVVsRGAjQlzjI=
Subject key identifier: 6A:E1:6B:A8:18:DE:83:2D:27:5A:02:35:C1:F3:AB:10:96:3F:FD:3D
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01856E01EB0E9F8E9C2BB41DF09F8E13F777
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/auFrqBjegy0nWgI1wfOrEJY__T0.roa
Signing time: Sun 01 Jan 2023 15:44:57 +0000
ROA not before: Sun 01 Jan 2023 15:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29551
IP address blocks: 88.214.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:eb:0e:9f:8e:9c:2b:b4:1d:f0:9f:8e:13:f7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Jan 1 15:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ae16ba818de832d275a0235c1f3ab10963ffd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:b1:17:85:7a:bd:70:b1:09:dc:de:15:de:
02:db:6d:1a:9a:69:65:6b:96:fb:33:7f:18:b6:1b:
62:d3:fb:9d:a1:49:14:e0:99:15:17:1b:b6:46:a0:
f4:fa:ed:e8:64:5d:c1:d8:94:14:d1:7c:af:58:c2:
36:14:41:a8:2b:67:80:b0:fe:b9:c6:0a:02:f6:c4:
0a:2a:e6:b0:2a:b2:27:45:d7:3d:1f:a1:e7:74:c0:
5e:b2:b2:b0:d6:e1:fd:8e:99:d2:7b:2f:98:80:c2:
11:17:d1:64:37:71:cc:3b:4d:81:1d:d1:28:94:43:
a7:6d:76:50:75:f3:7d:22:f0:4a:1f:3f:85:12:17:
f2:c8:1d:4e:5c:80:37:17:c4:d4:5e:1b:15:79:9c:
63:a6:f0:9f:78:7c:a5:b5:c3:53:72:51:b4:61:fa:
96:dd:8e:ad:79:ab:4e:17:c8:1e:53:1a:1f:e9:2c:
3c:e6:c0:73:d7:34:55:1c:77:63:32:ee:67:d0:73:
72:3b:23:9f:b3:2d:fd:f5:b9:0e:73:37:45:d7:26:
e2:7c:44:d3:98:b2:be:4b:a4:14:cd:50:3e:f9:b1:
27:9f:bd:07:b1:9e:f7:db:78:c9:09:1e:62:bc:c9:
26:49:77:da:2b:ac:ea:e3:b8:9d:b7:cc:1f:57:70:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E1:6B:A8:18:DE:83:2D:27:5A:02:35:C1:F3:AB:10:96:3F:FD:3D
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/auFrqBjegy0nWgI1wfOrEJY__T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c0:d2:80:60:13:de:da:96:d5:58:29:2c:09:9f:8d:08:00:
d3:73:de:99:02:4c:32:4e:fc:fc:d0:75:e4:44:01:ed:6d:f7:
83:2d:ac:7f:d0:14:d3:7a:f2:e7:25:5f:ee:c3:7e:2d:98:53:
75:ef:f3:af:a8:67:a3:48:20:2c:aa:d8:83:6a:d9:df:89:e4:
40:03:87:8b:f5:04:7b:a4:1a:54:48:3b:b3:50:84:4d:6e:6d:
53:4a:ea:a4:e5:9a:bc:47:19:7c:ee:c3:03:e2:f7:2a:78:c0:
31:90:03:69:08:5d:02:fc:26:43:46:e5:99:c5:2d:1a:f4:49:
3d:3e:9c:c2:c1:ed:1d:c5:f3:9d:e3:f3:a4:3d:2e:8c:23:87:
ea:92:cd:bd:06:4f:35:33:23:0f:96:e1:44:67:9d:34:25:0b:
21:9a:b5:c3:1e:f3:9e:a9:37:20:7f:a9:8b:5a:d3:68:d6:ca:
4b:17:55:30:e6:a4:0d:52:40:cf:de:7f:2c:dc:e1:f6:6d:14:
d6:67:d6:dc:7f:dd:72:ae:c0:d7:62:18:d4:cc:22:5b:cd:a3:
2e:00:3c:de:54:24:7b:fa:a0:23:14:b8:6c:26:47:ff:d8:5a:
e1:93:08:71:7c:07:f8:54:07:2e:6d:ae:b1:16:4b:c0:6c:20:
f9:af:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:03 2024 by rpki-client on console-ams.rpki-client.org