Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/CAI8pmmA_RGXPItuPi2ns9ihqEg.roa
File: CAI8pmmA_RGXPItuPi2ns9ihqEg.roa (raw, json)
Hash identifier: XV1li/jfioRKFeyK9R8u7dQ10HjsX2lEr7doafUGDDo=
Subject key identifier: 08:02:3C:A6:69:80:FD:11:97:3C:8B:6E:3E:2D:A7:B3:D8:A1:A8:48
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018B665B397E4F30D2C3CEB53EE54E384585
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/CAI8pmmA_RGXPItuPi2ns9ihqEg.roa
Signing time: Wed 25 Oct 2023 10:22:16 +0000
ROA not before: Wed 25 Oct 2023 10:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400402
IP address blocks: 88.214.52.0/24 maxlen: 24
88.214.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 12:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:5b:39:7e:4f:30:d2:c3:ce:b5:3e:e5:4e:38:45:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 25 10:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08023ca66980fd11973c8b6e3e2da7b3d8a1a848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:77:ce:a1:52:23:8d:db:bd:d2:cb:43:29:
eb:e5:b3:39:a9:33:5b:1c:52:5b:45:c7:2b:8d:0e:
e1:e3:a8:bd:50:91:b9:99:e4:1f:b1:6b:f5:d3:83:
64:63:3f:70:94:6e:de:56:d8:40:1d:51:3b:9e:e2:
92:d0:82:ec:17:86:0b:68:f0:fa:9d:72:15:76:26:
df:8a:f0:d2:16:46:b6:00:26:91:1b:11:70:57:0f:
b5:1e:4c:d5:8c:55:9f:93:ae:b4:67:6d:47:95:84:
9a:9d:98:8d:09:dd:fb:18:e5:81:62:81:20:0f:e1:
49:f9:ed:b0:c4:0b:fc:ea:61:86:c9:4c:3a:29:c3:
2d:52:ef:f0:b7:87:22:cc:5c:41:06:89:50:3a:f1:
bd:2b:c4:11:ae:8c:cc:db:93:d1:29:b2:95:cc:d8:
3b:e2:75:a2:b9:8e:b1:31:76:6f:a6:ef:ce:17:7a:
96:85:f5:98:cb:f9:11:65:1b:20:d1:df:99:f0:66:
32:97:8c:e0:bb:02:a4:9f:36:62:96:aa:58:25:d6:
7b:11:db:0d:43:db:77:07:3a:01:9d:99:96:22:eb:
c7:74:42:d6:7d:12:6a:66:32:59:59:5f:67:70:98:
b9:a7:97:5f:44:26:ad:c1:89:e7:75:e3:39:4d:6d:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:02:3C:A6:69:80:FD:11:97:3C:8B:6E:3E:2D:A7:B3:D8:A1:A8:48
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/CAI8pmmA_RGXPItuPi2ns9ihqEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.52.0/23
Signature Algorithm: sha256WithRSAEncryption
87:e5:fe:de:b9:28:00:cb:57:ff:a7:96:60:01:73:2d:97:20:
6a:de:30:38:d9:e6:6f:da:a8:10:8c:94:bd:2f:56:21:e0:1f:
0e:a7:65:ff:87:ff:97:8d:4e:62:52:a5:94:7e:69:99:c4:3a:
e6:c2:7f:a7:03:6f:ce:d6:7d:2d:84:29:53:11:5f:b9:91:bc:
b9:bd:c7:f6:03:4f:c3:9b:aa:ce:7f:e1:67:c2:27:f1:28:30:
ae:5f:82:b5:e3:8e:d7:1a:62:9d:8e:fd:61:90:90:33:12:bd:
ff:70:01:b5:fc:53:ab:d4:94:af:cb:b6:95:25:4c:3c:c7:e8:
21:2e:22:d4:8d:67:d6:4e:42:27:fa:32:86:2b:2d:a6:20:a9:
ad:7c:a7:24:23:f9:e3:ee:7c:55:af:45:25:8b:31:ae:2b:3c:
61:c4:b2:96:c7:9a:42:7a:63:01:ca:be:88:4c:41:ce:14:97:
6b:f6:08:90:9e:e6:a0:fe:cf:6f:ba:1b:d2:5a:ff:a4:99:ae:
7c:a7:57:54:4b:29:18:5a:b0:27:48:eb:e6:47:ce:70:b3:8b:
eb:bd:6e:12:74:fe:8f:0e:0a:8c:ee:79:1b:04:1e:7c:2e:6c:
1c:83:60:14:e7:fc:22:fc:a6:a7:63:74:e1:bf:53:74:dc:62:
e7:d1:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org