Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Z54Ow5JoVzZUK16_xblChAWGOQw.roa
File: Z54Ow5JoVzZUK16_xblChAWGOQw.roa (raw, json)
Hash identifier: M7WbSkowbIjkj/su9FBfLvkB8z6IsWXKexPOEhXLiq0=
Subject key identifier: 67:9E:0E:C3:92:68:57:36:54:2B:5E:BF:C5:B9:42:84:05:86:39:0C
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BCA5CBDFAE20D20B1A3BEF3C50FA8FA2C
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Z54Ow5JoVzZUK16_xblChAWGOQw.roa
Signing time: Mon 13 Nov 2023 20:25:57 +0000
ROA not before: Mon 13 Nov 2023 20:25:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 88.214.52.0/23 maxlen: 23
88.214.54.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 25 Nov 2023 10:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:5c:bd:fa:e2:0d:20:b1:a3:be:f3:c5:0f:a8:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 13 20:25:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=679e0ec392685736542b5ebfc5b942840586390c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:f8:f2:f6:09:ee:91:01:69:26:e0:e0:14:
c7:08:3f:fd:89:46:0a:46:cf:06:63:93:1d:28:10:
e8:e5:69:2c:06:ff:26:21:84:0d:7a:d6:f3:57:69:
5e:c4:85:9c:fa:5d:98:0a:3a:05:a7:26:3e:78:95:
d9:60:99:0f:71:e0:d0:8b:b1:0d:96:7d:fc:b3:28:
c9:2b:e9:b9:82:d5:9e:31:1c:a7:d4:ff:de:0d:55:
57:07:6a:91:88:79:aa:a8:1d:ac:26:d1:d0:a5:8c:
78:a6:d4:cf:30:e0:21:71:e0:bb:0d:6a:22:68:c0:
25:92:39:e3:02:7f:24:12:f0:64:22:ee:ab:95:8b:
d2:06:53:a7:bd:24:95:f3:88:c7:b9:74:40:02:b3:
25:22:75:ab:c3:e3:00:dc:d1:cc:68:52:6c:60:50:
58:3b:6e:8d:14:1d:73:39:56:15:49:f6:ce:74:49:
1c:e0:52:ee:f7:a4:c0:62:35:3b:4e:a9:9c:42:40:
2c:64:28:f2:c1:c1:1e:35:49:c4:6e:1d:b4:c2:1e:
77:3a:8f:94:eb:37:7f:a0:45:13:db:4f:93:99:9a:
56:61:e8:de:94:57:5d:99:cc:01:ee:3a:7e:ac:38:
03:f8:d3:2b:10:66:e0:87:54:a0:4a:cb:ed:ae:c7:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:0E:C3:92:68:57:36:54:2B:5E:BF:C5:B9:42:84:05:86:39:0C
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Z54Ow5JoVzZUK16_xblChAWGOQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:16:1d:4f:17:35:96:21:78:9a:29:ee:89:d8:b4:54:1d:ad:
3d:dd:17:ea:d1:c3:f0:ac:36:93:00:af:31:c0:0d:b8:28:5b:
31:d6:ff:a2:15:d9:a9:71:ca:d7:f2:e6:24:49:92:c5:b5:5e:
ce:a3:9a:80:dd:69:6a:43:c9:88:21:00:9c:a4:42:a7:8e:9e:
18:63:be:cc:d4:ce:75:66:ab:3a:3f:ae:74:b2:ce:d4:b7:ae:
27:c7:ae:0d:3f:45:8b:b4:c9:07:31:79:97:00:f0:ce:05:9b:
8f:8d:02:78:2e:50:a1:b6:25:cb:df:f5:a4:c0:71:2c:20:94:
c8:b6:d2:80:0d:37:8f:a9:df:52:e8:83:da:7b:7a:30:13:86:
c3:d3:ad:58:47:d7:d3:c4:a8:8b:e4:19:00:40:62:1f:f4:6e:
dc:b1:7f:79:72:31:ac:91:e5:53:16:64:b0:94:e3:63:67:dc:
4a:87:87:46:3b:0a:d2:09:6b:b8:00:5d:51:84:f6:e9:b3:14:
3a:b5:cd:58:53:db:82:b8:7f:f7:00:86:d3:69:de:03:33:47:
de:9b:f2:de:47:0d:ae:e4:13:17:98:6c:e6:d9:2c:4b:23:06:
67:93:3d:34:f3:55:9c:e9:de:f6:c2:0a:ac:40:dc:77:f5:6c:
72:8a:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org