Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/AxrLzK_kPAwKtps86AUjHqHipxk.roa
File: AxrLzK_kPAwKtps86AUjHqHipxk.roa (raw, json)
Hash identifier: 8hGNojO4BrGdnR6llwT/QXXPCJJC4ljK0ZBmykrI0c8=
Subject key identifier: 03:1A:CB:CC:AF:E4:3C:0C:0A:B6:9B:3C:E8:05:23:1E:A1:E2:A7:19
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 01856CB851EC0EE66909D2B4474F3071D10C
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/AxrLzK_kPAwKtps86AUjHqHipxk.roa
Signing time: Sun 01 Jan 2023 09:44:57 +0000
ROA not before: Sun 01 Jan 2023 09:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 88.151.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:51:ec:0e:e6:69:09:d2:b4:47:4f:30:71:d1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jan 1 09:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=031acbccafe43c0c0ab69b3ce805231ea1e2a719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:28:72:48:89:c0:9f:70:60:8c:07:a3:7c:
ea:81:78:79:73:a6:16:19:cc:75:ac:70:76:07:96:
09:2b:d9:02:1c:a1:01:cf:e1:dd:10:69:c6:66:c8:
11:44:23:24:17:67:57:c5:a3:97:fc:bd:b1:be:71:
e6:20:77:1e:6f:7e:64:3b:3a:24:c1:2a:4a:a6:ce:
ad:22:2f:4d:8b:26:81:e0:ee:23:57:2c:59:ab:2e:
7e:77:be:93:ef:9a:58:4e:11:bc:6d:d7:c6:d0:44:
19:a2:1b:43:2b:42:4f:13:6e:08:bd:23:de:95:5b:
ab:a4:9e:47:10:cc:2c:3c:7a:c4:b5:5d:68:2c:96:
06:5d:4b:2f:5f:ac:17:0f:c7:76:a7:d4:06:1b:fe:
97:ae:dc:37:98:02:99:dd:98:3d:77:31:96:2f:46:
e0:08:88:c5:7f:eb:ab:7c:a5:bd:46:24:d7:f6:5d:
c9:2d:9e:da:71:4b:6a:00:ca:9a:1a:87:b0:6f:fb:
62:80:e8:e8:c1:93:32:47:ec:cf:1a:e7:3d:bd:a2:
ef:81:01:e9:88:be:8d:05:83:33:10:fc:4e:cf:63:
2f:d3:d3:71:36:b1:c0:2c:1a:5d:89:f8:0f:55:d2:
ab:b5:f9:2b:df:6f:37:15:93:9d:13:67:6d:00:4e:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1A:CB:CC:AF:E4:3C:0C:0A:B6:9B:3C:E8:05:23:1E:A1:E2:A7:19
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/AxrLzK_kPAwKtps86AUjHqHipxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e9:32:94:ec:10:91:f5:08:89:dc:1f:a1:7e:e7:cf:0e:80:
aa:bf:52:e5:e8:88:6f:5f:11:ee:01:a5:0c:85:cd:81:c8:80:
8a:cf:70:fc:96:10:5a:51:95:83:42:cb:67:ef:8d:14:7e:97:
8c:cf:03:95:41:3d:cb:34:30:11:a6:05:ed:0f:4a:37:44:1d:
b8:f2:2d:ab:c2:1a:5e:10:8a:c8:fe:1f:88:4e:15:45:b5:53:
5e:a1:27:73:ee:a7:8a:5f:22:1b:bd:f3:04:4b:f2:9f:40:bd:
20:b9:bf:b5:6c:e8:c3:cf:57:2f:50:8e:ae:2d:e8:72:91:5c:
2f:a6:7b:f4:bb:c6:7c:77:87:f2:6c:64:2d:66:25:52:45:90:
c9:ab:99:66:6c:6b:61:ad:9b:e0:3a:ea:8d:f6:95:28:91:60:
58:ae:c9:4f:e9:bd:85:07:92:5f:3b:32:84:4e:19:c4:f4:ca:
0c:fc:ad:0c:f2:2c:26:9a:cf:d9:ca:fb:13:f2:69:93:d0:ae:
73:c0:43:15:99:06:4d:93:94:dc:e6:5a:58:12:6e:be:bc:d6:
91:0d:5c:cc:ec:19:c6:29:b5:4f:9c:89:79:cd:b6:d8:d3:4b:
f6:f9:91:f8:c7:e3:73:92:39:05:e6:53:8c:77:d3:c0:c3:eb:
e5:13:fa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:21 2024 by rpki-client on console-ams.rpki-client.org