Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mArvH0xGqbSTedOHfkY0kvYP7H4.roa
File: mArvH0xGqbSTedOHfkY0kvYP7H4.roa (raw, json)
Hash identifier: +aoArH3UQkLTjxY6GfecTcnlh4LizBUqNVahpLTDRXg=
Subject key identifier: 98:0A:EF:1F:4C:46:A9:B4:93:79:D3:87:7E:46:34:92:F6:0F:EC:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187B21350A568AEB2E689D6A5907F7F349A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mArvH0xGqbSTedOHfkY0kvYP7H4.roa
Signing time: Mon 24 Apr 2023 07:03:42 +0000
ROA not before: Mon 24 Apr 2023 07:03:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 45.88.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 14:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:13:50:a5:68:ae:b2:e6:89:d6:a5:90:7f:7f:34:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 07:03:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=980aef1f4c46a9b49379d3877e463492f60fec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:93:13:0e:55:ad:ce:53:1d:d7:c5:8f:c2:
85:d0:87:9e:80:9b:90:7b:b6:e7:b4:b5:36:72:9d:
a5:ab:ce:b8:e2:75:4c:d7:a0:4b:ae:3b:cd:87:0e:
e5:fa:94:50:81:18:df:aa:55:18:b8:7b:24:49:ce:
17:ee:e3:5c:25:da:00:13:bb:1a:2c:d0:25:f6:be:
df:20:eb:06:d2:3f:14:6d:1f:be:ae:83:ac:b1:63:
7d:a4:ec:41:18:39:7e:2d:7a:e0:bb:8b:6c:99:9c:
78:81:61:a1:5a:79:3b:54:73:c5:cc:88:86:b2:23:
e6:d6:a9:a7:3f:bb:c2:01:9a:5a:7f:03:17:da:dd:
35:1c:33:5b:eb:af:0f:f5:61:2c:c2:e8:a8:2c:6f:
c4:1b:fa:1f:14:93:05:6a:42:47:f1:fd:ba:6f:ab:
27:e4:7a:71:64:c3:1c:1a:7f:75:48:a1:29:1e:a1:
42:c2:f0:c3:55:e7:1e:e0:04:8a:0a:e5:7f:e0:77:
d2:81:58:d0:20:8b:cd:98:aa:07:ad:e4:16:a5:1b:
c8:73:94:29:1d:2d:7b:ac:c5:41:0b:69:c5:b7:b8:
14:3c:ff:eb:c4:f6:25:c2:b9:39:1d:d0:b7:62:6c:
64:61:d5:58:19:be:bf:9d:11:9f:24:05:13:56:08:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0A:EF:1F:4C:46:A9:B4:93:79:D3:87:7E:46:34:92:F6:0F:EC:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mArvH0xGqbSTedOHfkY0kvYP7H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:28:84:4c:1b:cf:5a:28:97:2f:af:a4:3a:98:d9:31:dc:cf:
b4:5f:02:3f:0e:6c:f7:78:b8:94:7b:eb:42:69:55:bb:cb:cf:
64:6e:ef:54:bc:6d:dc:c5:db:62:e9:48:86:0d:6f:6a:82:44:
a4:5a:fc:80:0d:96:20:0d:9d:e1:c7:e1:48:97:ad:4f:21:47:
57:12:45:d8:af:3d:91:78:20:7e:53:df:0d:0a:53:f4:38:68:
18:e0:70:12:3f:06:12:c3:0a:36:c1:ae:90:0c:d3:9e:1a:b8:
6b:e0:7e:50:68:bd:83:66:1a:0e:60:43:2b:67:7d:b2:58:55:
54:ed:21:71:d4:a8:49:37:ed:f5:fc:8b:e3:8c:ab:1a:e5:2b:
f7:fc:d6:e3:f7:68:da:22:7f:5f:ba:29:7d:ef:22:f3:06:75:
18:41:f2:7b:b3:e7:95:ca:36:b3:bd:df:eb:ae:2e:07:08:78:
d6:d0:8b:75:9e:b4:e4:51:4b:48:e8:5e:09:50:50:ff:84:c7:
78:ad:39:60:ad:27:b2:76:74:a7:7d:2c:11:8a:a5:7b:40:4e:
7b:68:75:f9:f1:2f:a8:59:ca:c1:3c:a7:94:75:54:6c:0e:06:
98:c3:4a:e1:09:2e:76:f5:9d:71:5d:da:ee:d0:fd:cb:52:6e:
c2:0c:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:18 2024 by rpki-client on console-fra.rpki-client.org