Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/xMM0vm0BwTNOywId0kbS-eJcggg.roa
File: xMM0vm0BwTNOywId0kbS-eJcggg.roa (raw, json)
Hash identifier: d/4NMaobcwnbuYGCritX2SDd9112jzOZLddPZ9edYsU=
Subject key identifier: C4:C3:34:BE:6D:01:C1:33:4E:CB:02:1D:D2:46:D2:F9:E2:5C:82:08
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 018AFFB458F7177F1B589BE87203641C2322
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/xMM0vm0BwTNOywId0kbS-eJcggg.roa
Signing time: Thu 05 Oct 2023 11:58:43 +0000
ROA not before: Thu 05 Oct 2023 11:58:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 88.218.132.0/22 maxlen: 22
2a09:aa80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:b4:58:f7:17:7f:1b:58:9b:e8:72:03:64:1c:23:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Oct 5 11:58:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4c334be6d01c1334ecb021dd246d2f9e25c8208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:a0:d2:93:eb:52:b5:f5:48:1f:ad:a5:c3:
2f:1b:f1:9c:f0:4a:08:5c:3c:81:57:d6:d0:f5:0f:
09:82:c0:0a:99:70:2d:68:12:bb:14:76:9c:dc:26:
60:13:1e:7f:b4:60:40:d3:86:78:8d:28:26:5d:2c:
47:3d:cf:34:d7:d4:6b:c4:eb:a8:c9:99:03:cc:51:
5a:7d:83:b2:9a:50:8a:b8:7c:42:4e:f9:09:2d:a8:
49:68:a2:7e:68:2f:c5:a7:a6:4e:c2:f2:83:3c:89:
ad:89:af:df:04:f2:38:ea:62:59:6b:5a:ca:12:16:
2e:ab:67:69:29:31:b0:92:af:2f:81:09:ec:71:c0:
bb:3f:4e:82:ae:23:76:23:b6:a9:8b:9f:bc:4f:09:
cd:0e:2d:4e:ef:ca:74:b2:e8:9f:f8:47:95:5f:4e:
cc:5e:6e:df:64:db:ef:c3:91:4c:95:56:b0:c3:f5:
5f:89:3f:e2:cc:ea:a8:4b:ae:c4:af:a2:47:d7:b7:
a5:d5:0a:13:30:78:4a:c2:bf:2c:94:63:2a:1a:31:
9e:75:b8:c6:10:bc:24:42:1b:00:f9:5b:ca:86:42:
32:5a:d7:7b:fc:9c:80:bc:30:69:dd:d1:dc:f0:52:
a8:cf:8d:89:19:93:05:3a:83:f8:1b:1d:44:8f:45:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C3:34:BE:6D:01:C1:33:4E:CB:02:1D:D2:46:D2:F9:E2:5C:82:08
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/xMM0vm0BwTNOywId0kbS-eJcggg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.132.0/22
IPv6:
2a09:aa80::/32
Signature Algorithm: sha256WithRSAEncryption
82:16:7e:af:75:86:e8:13:01:1d:81:58:aa:25:22:55:81:60:
d6:c8:60:89:98:0b:32:6b:ed:84:85:3d:df:95:11:73:4d:01:
c4:59:ee:4d:24:1f:e2:b3:22:de:29:f4:56:bf:14:8d:fb:0e:
7e:19:f3:75:11:60:dc:f1:4e:79:24:04:52:6f:c6:e0:5a:e7:
1d:17:89:e1:9b:5f:3b:8e:d0:a2:83:cc:61:db:87:66:22:07:
60:cf:48:70:e5:a3:84:4f:a7:2b:c6:30:a8:ef:68:d1:41:c3:
65:c2:6f:90:cd:2b:a6:cc:b4:e7:e2:ff:2b:7d:d9:21:f0:c0:
9c:b2:af:93:31:ac:73:4f:50:5b:cd:6f:a7:33:a8:a9:30:c5:
3b:1d:48:28:1a:2e:f7:c3:51:bd:23:d8:76:9a:3a:0a:15:a2:
57:9a:39:42:f9:d7:4d:f6:9c:aa:0b:0c:43:7b:1b:ba:19:3a:
3f:01:b1:3e:9b:30:1b:87:ba:38:b5:c2:fa:8c:27:7f:bb:95:
71:a1:e2:45:ff:84:b2:c4:8e:94:1e:30:d7:aa:25:20:e4:df:
d1:36:2d:37:6f:08:34:44:7c:c3:f0:c4:03:68:b8:9d:d8:0d:
e9:5d:59:20:7c:64:81:c3:d3:6a:fc:52:e0:3d:f9:14:9e:91:
56:67:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:27 2024 by rpki-client on console-ams.rpki-client.org