Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vycnCFDdLrLWwCiXwD4377KUE4w.roa
File: vycnCFDdLrLWwCiXwD4377KUE4w.roa (raw, json)
Hash identifier: tfqMAJ6kyOOFFj2sp0RbznSHd/DXA8IhFON1b+vKUv4=
Subject key identifier: BF:27:27:08:50:DD:2E:B2:D6:C0:28:97:C0:3E:37:EF:B2:94:13:8C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01895328D2D4EC689C396E2E25DA0903B8E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vycnCFDdLrLWwCiXwD4377KUE4w.roa
Signing time: Fri 14 Jul 2023 06:48:51 +0000
ROA not before: Fri 14 Jul 2023 06:48:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 88.218.76.0/22 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:28:d2:d4:ec:68:9c:39:6e:2e:25:da:09:03:b8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 14 06:48:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf27270850dd2eb2d6c02897c03e37efb294138c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:5f:57:e5:29:17:28:82:37:ad:d5:d8:d2:
4d:54:fd:b3:49:9a:75:0c:de:9b:b0:17:4e:54:1d:
7d:17:78:54:bc:63:aa:8e:7f:32:8f:a9:34:b1:9d:
b6:40:a3:2c:90:32:10:d5:76:fb:36:92:a9:3d:25:
b0:98:e1:f6:d5:64:25:b7:fe:98:20:14:12:78:26:
c1:73:13:c9:05:eb:22:22:e3:73:2a:d8:22:39:c8:
f7:b9:73:e0:00:8c:79:a9:1b:4e:ea:88:c7:65:54:
8c:75:9f:ef:bf:f8:50:4c:09:9c:b2:06:27:34:0e:
4a:b6:02:29:de:dc:2c:3b:ae:ae:8a:11:fa:0a:99:
36:b5:4b:34:9c:f7:35:b5:bb:f3:72:96:e0:33:b6:
73:06:69:fc:a3:b1:a9:c5:c0:fe:a8:bd:15:e9:68:
69:c4:db:34:f2:a6:3a:7b:4b:e3:11:c0:b0:e8:c6:
f1:2d:ef:1c:43:8b:3f:7b:c1:91:ec:87:b4:3e:48:
35:f9:f9:67:03:1b:28:67:de:5e:aa:30:99:9d:9c:
99:06:d1:6a:eb:93:cd:50:29:5c:16:43:02:ca:53:
77:8b:7a:9b:5d:8c:8a:8e:d0:01:fe:5d:1e:92:62:
d6:88:48:ac:cf:58:da:33:05:b1:9c:da:8a:47:68:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:27:27:08:50:DD:2E:B2:D6:C0:28:97:C0:3E:37:EF:B2:94:13:8C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vycnCFDdLrLWwCiXwD4377KUE4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.76.0/22
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d6:2e:8c:e3:00:82:86:a4:fa:12:fa:86:cb:93:6c:4e:5c:
a3:44:b6:41:8b:22:2d:9e:e3:f1:9d:3d:a4:40:ef:24:87:a5:
4c:d3:f1:08:63:38:64:3b:26:05:8d:5f:aa:4a:74:d1:9f:cc:
84:40:41:54:12:15:9e:db:e9:d0:7f:e5:32:a4:e2:2f:01:04:
0c:58:29:34:f3:49:1a:88:5d:41:c7:54:80:01:ae:a5:ae:60:
75:ea:1f:79:67:e4:a8:a2:f4:a8:d1:db:57:01:42:3e:e0:51:
f1:47:3d:fb:37:e0:78:c6:b6:cd:2c:d9:4e:a4:ac:d0:66:6a:
00:ee:1f:70:28:5a:e6:f4:e3:b0:4e:14:24:18:f7:f0:d5:71:
2c:97:29:1e:5b:a2:1a:17:4b:1d:19:b9:62:ec:f2:f4:de:15:
62:87:9c:86:93:ab:76:66:e3:1a:3d:eb:f2:45:78:7e:44:b7:
41:73:cb:31:e8:e1:82:c0:07:fc:31:bb:37:b6:8b:56:b5:64:
bf:e8:27:2e:b7:15:3c:e2:32:8c:0c:fe:1b:03:0a:36:9e:9a:
b2:d5:24:77:47:04:fb:1e:4d:4d:db:4a:d0:5f:5d:6c:4c:e4:
6c:1e:0c:a8:80:01:68:42:da:24:46:94:36:ad:b1:73:2c:82:
6e:4b:db:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 12:04:54 2023 by rpki-client on console-fra.rpki-client.org