Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B_zoZs2_KprNyxqaoksOkS7QkrI.roa
File: B_zoZs2_KprNyxqaoksOkS7QkrI.roa (raw, json)
Hash identifier: DIRJE2tan8s5J+shYB80JI+JUBws5/jilG+X4VJkabo=
Subject key identifier: 07:FC:E8:66:CD:BF:2A:9A:CD:CB:1A:9A:A2:4B:0E:91:2E:D0:92:B2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B157DEBD32BA5A63175E1FB9847446BFA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B_zoZs2_KprNyxqaoksOkS7QkrI.roa
Signing time: Mon 09 Oct 2023 17:30:55 +0000
ROA not before: Mon 09 Oct 2023 17:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 88.218.76.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:7d:eb:d3:2b:a5:a6:31:75:e1:fb:98:47:44:6b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 9 17:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07fce866cdbf2a9acdcb1a9aa24b0e912ed092b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:29:bd:26:26:0f:27:28:a7:0b:0d:9c:5e:
a3:8f:20:e2:f7:ff:dd:41:54:72:db:53:3a:74:f9:
d4:68:e8:eb:4d:dd:bf:22:e9:5c:de:e8:db:81:b2:
28:81:f0:ee:9f:c5:8a:00:1b:c3:7d:82:b7:51:3b:
45:49:89:45:ab:d1:b2:12:b6:d2:03:0c:24:82:de:
4d:93:4b:61:3f:3d:b7:f7:55:a9:b3:e2:80:05:68:
13:7f:66:60:c7:9b:dd:59:26:00:80:d6:b1:95:18:
31:e3:d9:de:26:e0:16:80:5f:8f:25:ad:af:4c:e1:
a7:3e:fe:2c:39:c6:f2:e1:1b:c5:ca:f9:b0:8c:c3:
f4:a8:5d:ac:b5:05:50:99:eb:75:25:8b:3e:07:9d:
c9:41:6d:cd:22:f7:17:13:2d:a9:f6:ce:7f:10:84:
35:61:6c:75:df:6e:e9:ff:c2:38:2a:7e:55:66:08:
0e:8f:a7:1d:02:55:18:52:e9:5f:08:c5:ff:a5:89:
9b:0b:8a:5e:d8:08:64:70:1c:c7:53:e4:59:73:57:
f0:20:32:9d:b4:68:e1:0c:53:92:cd:d6:71:41:fa:
d9:40:a8:c7:5a:4b:91:72:07:64:db:3a:22:52:b9:
20:b7:b3:67:f5:ea:6f:f7:e8:84:99:ed:c2:c3:0c:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:E8:66:CD:BF:2A:9A:CD:CB:1A:9A:A2:4B:0E:91:2E:D0:92:B2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B_zoZs2_KprNyxqaoksOkS7QkrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.76.0/22
Signature Algorithm: sha256WithRSAEncryption
67:eb:f8:1b:90:26:d0:18:7c:d4:0c:93:06:73:e5:bb:61:d1:
36:98:5e:9e:70:b3:e4:d2:f8:55:2b:d4:5c:1c:55:e5:f6:1c:
40:0b:e8:fe:fd:06:26:1a:cf:0b:92:6b:50:f0:10:41:b2:6f:
2a:e6:fe:3e:a1:70:2a:9c:73:c4:4a:c0:c2:1a:12:cf:79:9f:
34:d7:36:77:88:7f:54:4b:fe:0b:08:fe:0b:2b:e0:ad:3a:89:
37:e9:da:55:c9:43:28:2c:2b:17:8c:c9:d2:44:62:63:6e:be:
4a:ec:42:f5:b5:fa:15:70:b0:65:ea:b7:4e:1b:57:b1:7d:cb:
72:7e:e9:e4:e0:39:02:73:f0:f9:88:cc:81:67:6d:6d:0a:c3:
01:14:38:be:ce:23:85:3a:db:0e:8e:d7:f1:bb:ae:22:a7:6f:
ae:7b:21:ef:e9:d4:13:c7:c6:da:e7:91:8f:a9:c3:03:6d:38:
f5:3d:c4:0b:ec:b3:fe:83:0e:54:78:52:93:be:d2:46:ac:ca:
3d:3b:9a:a0:39:9d:9b:a1:8d:35:ca:3c:3f:d7:1d:42:37:ef:
4e:3d:32:d3:72:30:9d:56:e7:ae:f8:c7:55:1a:b4:4f:c2:4d:
e5:7b:ff:63:a8:ba:1b:e5:94:15:23:f4:1f:77:3e:43:a2:9e:
44:21:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 15:15:36 2023 by rpki-client on console-ams.rpki-client.org