Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/FIx0Q5D5snLUyuoTCEU1XSVBgTI.roa
File: FIx0Q5D5snLUyuoTCEU1XSVBgTI.roa (raw, json)
Hash identifier: 7VSpWigzAkw7QCu8+gC7IOVVejTeZ3yvJSeze3I1+/0=
Subject key identifier: 14:8C:74:43:90:F9:B2:72:D4:CA:EA:13:08:45:35:5D:25:41:81:32
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 01891FB2ACE60DF353E42A5358FA137FD5C9
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/FIx0Q5D5snLUyuoTCEU1XSVBgTI.roa
Signing time: Tue 04 Jul 2023 06:59:10 +0000
ROA not before: Tue 04 Jul 2023 06:59:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210025
IP address blocks: 88.218.204.0/24 maxlen: 24
88.218.207.0/24 maxlen: 24
2a09:b280:ffba::/48 maxlen: 48
2a09:b280:ffb0::/48 maxlen: 48
2a09:b280:1030::/48 maxlen: 48
2a09:b280:1010::/48 maxlen: 48
2a09:b280::/48 maxlen: 48
2a09:b280:ccc0::/48 maxlen: 48
2a09:b280:1020::/48 maxlen: 48
2a09:b280:1000::/48 maxlen: 48
2a09:b280:ffbb::/48 maxlen: 48
2a09:b280:ffbe::/48 maxlen: 48
2a09:b280:ffb9::/48 maxlen: 48
2a09:b280:ffbf::/48 maxlen: 48
2a09:b280:ffb2::/48 maxlen: 48
2a09:b280:ffbd::/48 maxlen: 48
2a09:b280:ccc1::/48 maxlen: 48
2a09:b280:ffb1::/48 maxlen: 48
2a09:b280:ffbc::/48 maxlen: 48
2a09:b280:cccc::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:b2:ac:e6:0d:f3:53:e4:2a:53:58:fa:13:7f:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jul 4 06:59:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=148c744390f9b272d4caea130845355d25418132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:65:8f:a6:65:71:71:08:49:9c:53:51:bf:ac:
2c:0f:39:78:04:3d:ee:31:37:d2:62:29:ec:da:ed:
ff:5f:e7:1e:27:b1:3e:94:16:e9:97:8b:07:bb:8d:
62:fb:20:be:4a:f4:1d:ec:be:33:22:d2:8b:4b:af:
74:f1:eb:03:49:60:0d:46:64:c6:86:d6:db:a1:52:
8d:11:b3:51:91:78:4c:6d:eb:56:0b:52:40:92:d8:
19:5a:76:da:73:0b:06:88:1c:da:1a:f9:ce:82:58:
4b:47:04:2c:b9:86:9b:8a:62:d7:58:65:d7:11:04:
76:8a:c6:f9:34:2c:c7:61:07:6e:0f:d6:bc:7f:ef:
73:e2:56:f1:f8:fa:bf:62:79:81:d6:e4:13:5e:8a:
73:52:f7:94:07:50:44:73:b8:17:6a:fd:23:d7:63:
90:c2:8f:6a:c9:16:34:da:b6:49:ad:73:82:d0:bf:
20:ef:d7:b0:30:4d:4e:ec:23:50:49:09:3c:ad:c4:
c1:68:e9:42:63:a0:42:3d:c8:64:17:8a:83:c4:03:
e7:7d:c9:db:9e:86:f5:6a:91:5f:e4:08:25:f4:51:
29:bb:05:e5:29:a1:d5:e9:81:3b:a2:82:df:72:bd:
c3:c3:b4:f8:ea:3a:da:bf:0c:28:f9:e4:43:1b:8f:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8C:74:43:90:F9:B2:72:D4:CA:EA:13:08:45:35:5D:25:41:81:32
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/FIx0Q5D5snLUyuoTCEU1XSVBgTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.204.0/24
88.218.207.0/24
IPv6:
2a09:b280::/48
2a09:b280:1000::/48
2a09:b280:1010::/48
2a09:b280:1020::/48
2a09:b280:1030::/48
2a09:b280:ccc0::/47
2a09:b280:cccc::/48
2a09:b280:ffb0::-2a09:b280:ffb2:ffff:ffff:ffff:ffff:ffff
2a09:b280:ffb9::-2a09:b280:ffbf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6d:b0:c5:2f:6a:7e:57:7e:c1:f5:42:43:3a:80:f3:ec:35:93:
97:3a:bc:15:48:46:eb:9f:9b:59:1c:06:a0:d3:8e:3f:0c:eb:
ff:d4:7d:71:2d:61:58:0e:62:af:06:4f:a2:e2:77:17:a3:20:
9d:0b:10:c6:55:44:ad:18:1f:f5:6a:df:b1:8b:24:6b:1f:d1:
23:5e:9b:54:fd:6a:fd:c7:40:c3:0d:05:ed:52:ea:82:d5:9a:
a5:50:0e:08:c2:e1:cd:c1:2c:8c:72:3f:b3:29:b4:6b:52:66:
83:24:59:9f:7c:39:3c:11:4b:6d:f1:a0:c4:e2:65:e5:49:9e:
05:d6:29:c6:b7:6f:78:0f:2e:59:47:56:86:6b:10:72:35:09:
ff:91:e0:6c:82:9d:b8:be:2b:06:85:0e:cb:73:e2:6d:a7:08:
ad:08:b1:9a:2d:be:b2:52:c9:36:3f:be:c4:78:ff:2f:eb:62:
c9:f7:ab:12:b5:fa:1c:e8:94:ce:45:b5:33:32:1b:59:75:7d:
95:c5:14:c6:7c:d6:07:be:65:a9:41:98:ac:41:11:1a:81:13:
c6:c3:ad:55:e0:fe:06:cd:0d:2c:16:72:77:57:0a:da:6c:f6:
85:81:8f:ea:70:b5:b6:70:72:ac:06:25:89:42:fa:bd:3d:9c:
29:17:70:c2
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 19 03:24:45 2023 by rpki-client on console-ams.rpki-client.org