Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/p9H3u3bX9R4rFb4VtTW5lX29QZ8.roa
File: p9H3u3bX9R4rFb4VtTW5lX29QZ8.roa (raw, json)
Hash identifier: rXvsU1jxlcGISD+wjngh+7gXQ3DTOSYM+mP0Arrx7LE=
Subject key identifier: A7:D1:F7:BB:76:D7:F5:1E:2B:15:BE:15:B5:35:B9:95:7D:BD:41:9F
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01857079867A289F9ABE6D67D3C3D5312C53
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/p9H3u3bX9R4rFb4VtTW5lX29QZ8.roa
Signing time: Mon 02 Jan 2023 03:14:50 +0000
ROA not before: Mon 02 Jan 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 88.218.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 03:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:86:7a:28:9f:9a:be:6d:67:d3:c3:d5:31:2c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 2 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d1f7bb76d7f51e2b15be15b535b9957dbd419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:3b:7c:34:92:dc:a3:39:f7:37:92:38:a6:
92:12:4a:6c:32:a6:e7:73:7a:7a:2d:9d:86:d2:75:
39:d8:05:4b:a5:ec:77:10:7a:1c:f3:4c:97:94:2e:
24:ed:45:60:38:ca:2c:83:3d:56:22:50:00:86:f6:
53:9a:d0:53:7e:c8:00:5e:1c:02:7b:f2:03:ee:12:
24:ba:21:1d:7e:13:1a:33:85:9b:2d:39:f0:29:8b:
e8:75:af:a8:a4:fd:ba:61:df:2e:35:25:02:71:a4:
15:cd:ab:ba:6f:e2:f5:38:e9:af:7d:6c:c3:61:c4:
b3:14:66:f4:ee:95:7a:ec:d1:04:d3:80:e1:25:80:
22:70:e1:a8:06:a6:fa:23:db:ed:69:0b:06:ed:fb:
ae:38:19:d8:78:2a:a1:f2:5a:bf:69:72:53:50:6b:
1d:58:e8:6e:48:bf:d5:13:b8:4e:83:4e:4b:2d:e3:
17:26:45:34:5e:89:ee:dc:04:c4:dd:1c:32:80:d8:
a5:8e:53:3e:00:f5:30:54:05:37:15:db:1e:9d:9e:
c7:a9:99:91:1f:42:d0:ef:af:e3:1f:f6:6a:58:95:
df:4d:9a:47:65:10:89:07:98:55:b9:fc:0b:1d:48:
e3:57:31:6b:68:4d:ef:29:67:66:81:03:54:5b:32:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:F7:BB:76:D7:F5:1E:2B:15:BE:15:B5:35:B9:95:7D:BD:41:9F
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/p9H3u3bX9R4rFb4VtTW5lX29QZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f0:14:3f:e8:e8:a1:b3:fe:4d:4b:16:48:cc:98:d4:c9:48:
1a:e0:78:bb:94:5a:41:ff:01:46:fa:db:a0:0b:7b:4b:4e:f8:
a6:3b:9b:42:23:ee:b2:a6:c8:d3:8d:d1:58:a7:55:bd:b7:62:
18:c4:a3:2b:fd:67:29:21:4a:3f:20:a3:dd:b9:c5:82:36:88:
51:51:2e:4d:10:84:fe:c1:23:e5:0b:cf:5f:fa:3c:6f:58:91:
6f:9c:01:e0:f4:65:33:68:bf:37:f9:7d:72:69:2a:2f:00:4d:
9f:6a:f9:c4:d7:a2:43:2f:b4:2e:e5:24:58:2b:0c:d1:b5:47:
5d:cd:0a:fa:5f:4f:03:79:c5:05:7f:47:29:02:62:46:b9:6f:
25:3a:f9:ef:4d:84:4b:ba:7b:05:b8:13:a4:60:be:0c:e2:f8:
0f:3c:6f:85:01:89:bf:52:19:02:be:d9:c4:fb:53:15:c3:d0:
2a:ba:14:57:f3:25:14:08:e7:e5:69:a5:95:25:cc:1d:27:1f:
ff:ac:c2:54:b0:81:56:2f:c2:7a:ae:8e:bf:ba:a3:28:09:e1:
de:cb:7c:65:0b:54:47:2b:05:9c:7e:a9:8c:24:8d:22:1a:7c:
d5:54:9a:51:99:6b:5c:78:cb:b2:4d:eb:5e:df:b7:cb:cb:ce:
06:69:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:02 2024 by rpki-client on console-ams.rpki-client.org