Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/z1lR2LTyj25_i7ersxLDwJppEHM.roa
File: z1lR2LTyj25_i7ersxLDwJppEHM.roa (raw, json)
Hash identifier: CEQfFyNo9FqKOgZ+lWvV1z8bNw47VENs+D9sbIc0eOU=
Subject key identifier: CF:59:51:D8:B4:F2:8F:6E:7F:8B:B7:AB:B3:12:C3:C0:9A:69:10:73
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 018DFE26BDDC48351E427FF7293BD37C6174
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/z1lR2LTyj25_i7ersxLDwJppEHM.roa
Signing time: Sat 02 Mar 2024 07:52:48 +0000
ROA not before: Sat 02 Mar 2024 07:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 88.218.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 21:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fe:26:bd:dc:48:35:1e:42:7f:f7:29:3b:d3:7c:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Mar 2 07:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf5951d8b4f28f6e7f8bb7abb312c3c09a691073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:fd:3a:b9:b9:aa:60:cd:82:46:53:68:1f:
df:9d:97:dd:1b:32:f5:9e:2f:75:5c:4b:bc:c5:8e:
00:9a:60:61:07:5f:16:18:df:ed:ac:1d:3c:eb:80:
0e:62:29:d5:55:03:a9:ee:6d:ef:ed:f2:76:68:53:
e4:ea:ce:04:e5:50:80:4f:c9:de:1c:e2:e3:ff:f0:
06:97:16:ee:67:41:18:d7:a3:64:58:b8:a4:cc:da:
05:e1:b6:a6:93:04:e8:72:44:36:70:b7:d2:c2:b8:
1f:62:57:f4:de:c6:4f:5d:9b:e2:e6:45:15:8a:5f:
57:29:78:07:89:b6:30:1a:c1:52:99:9f:4a:a4:3b:
8c:71:ea:1f:fb:8c:33:54:f8:d3:0a:55:02:b7:fa:
60:e4:52:69:f7:79:b0:88:79:a9:31:23:7a:cc:1b:
ea:17:9d:c2:71:2d:3e:35:08:99:06:d6:a0:49:bf:
16:0e:42:84:13:71:dc:34:a8:aa:4a:f8:00:3d:11:
b7:24:63:2f:03:4d:fd:90:a0:da:8b:0f:14:f7:20:
b5:10:61:26:21:5d:e5:e7:5e:59:11:58:e5:97:e7:
8e:bf:19:ec:06:d4:01:22:0b:b7:36:4d:5c:76:70:
17:b7:3b:8b:f6:90:6c:c0:85:5c:1d:fd:c9:46:57:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:59:51:D8:B4:F2:8F:6E:7F:8B:B7:AB:B3:12:C3:C0:9A:69:10:73
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/z1lR2LTyj25_i7ersxLDwJppEHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.205.0/24
Signature Algorithm: sha256WithRSAEncryption
28:94:48:f5:bd:03:47:0a:c0:ae:4b:62:4e:5b:5f:e5:3b:17:
8e:3d:f3:8d:87:0c:74:5a:ec:cf:68:ab:fe:04:56:a6:7c:81:
ca:6f:29:86:64:6d:51:5d:0d:30:62:ad:39:a6:81:77:86:93:
37:a5:36:6d:a1:06:79:0c:9a:83:99:59:08:45:00:63:5b:60:
4f:10:42:68:9a:44:7f:71:fa:05:07:58:8f:a5:b1:db:f3:a1:
c0:90:8d:fa:9f:a9:76:ad:a1:f3:5f:b4:97:cd:db:75:f1:da:
7d:c8:80:c3:53:09:b4:1e:db:14:a1:b1:76:0b:e0:45:cf:c9:
1a:a6:9e:dd:91:d5:0d:03:0c:f7:f8:85:c7:8d:29:0f:54:1c:
c1:78:81:e1:48:5e:39:eb:97:3a:c5:be:d3:f9:22:6f:85:63:
9a:d5:9d:de:11:e0:6b:3d:ea:a0:bc:89:43:fb:05:7e:8c:d7:
ca:0e:d1:e4:3b:a6:22:ac:33:66:ee:0e:17:3d:43:42:e3:c2:
4f:8d:b4:64:d7:db:42:5f:be:dc:bc:1e:43:37:e2:fc:09:c8:
ff:e8:40:b4:c7:37:85:58:ee:7e:22:7b:e8:16:da:b7:0f:05:
1d:c5:42:c8:f3:35:a1:b2:6b:4b:eb:f0:85:9c:b5:1f:76:3f:
67:35:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 23:25:40 2024 by rpki-client on console-ams.rpki-client.org