Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/q994s7dvb28MIPugGg3ElRzriog.roa
File: q994s7dvb28MIPugGg3ElRzriog.roa (raw, json)
Hash identifier: yyKs2tk03iyOenhB+PSWGZoUkExhVS8x3y84FzllIww=
Subject key identifier: AB:DF:78:B3:B7:6F:6F:6F:0C:20:FB:A0:1A:0D:C4:95:1C:EB:8A:88
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 01856CB851863D24554A77C43B91FFB198B0
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/q994s7dvb28MIPugGg3ElRzriog.roa
Signing time: Sun 01 Jan 2023 09:44:56 +0000
ROA not before: Sun 01 Jan 2023 09:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 88.151.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:51:86:3d:24:55:4a:77:c4:3b:91:ff:b1:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jan 1 09:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abdf78b3b76f6f6f0c20fba01a0dc4951ceb8a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:60:ab:21:24:7f:3e:55:18:45:3b:e0:92:d2:
78:ef:90:90:f1:73:4b:ff:13:23:c8:8b:f1:79:b0:
31:39:78:89:50:14:b8:76:89:02:82:03:b0:ea:e9:
2a:77:b8:7e:1c:aa:9f:94:3b:01:32:e0:07:b0:1d:
34:34:29:d6:a5:75:8d:df:7d:bb:6d:72:9e:34:6f:
de:73:14:c0:78:ba:e5:7e:db:94:8b:76:80:ad:e7:
12:36:bb:a4:3b:1e:dc:d2:a5:bd:90:b0:ab:9c:7b:
f2:a4:b4:87:ca:9c:dc:49:a6:f2:65:9b:2e:d2:76:
28:94:f9:79:5d:5e:a4:5a:6c:a1:75:2d:8c:2c:45:
cf:54:a2:c0:90:e7:82:51:76:5f:68:92:0d:e0:28:
2f:a1:75:1f:97:f3:c6:01:45:3a:47:f9:90:34:77:
ec:61:b8:10:4a:b1:c3:34:cd:57:e4:0e:bb:85:fc:
cf:8d:03:e9:1f:d4:22:f7:40:08:e1:fd:9f:c7:34:
d3:ea:32:b6:a8:ac:f2:f8:1e:b2:6f:7e:cb:c3:86:
c0:c5:12:58:d8:d1:c3:c1:bf:1e:d1:99:d0:76:5a:
1e:c3:66:b3:06:e1:04:41:69:1c:a3:a7:47:d9:83:
81:a1:19:2a:9e:71:21:27:ca:5f:44:07:e4:39:0b:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DF:78:B3:B7:6F:6F:6F:0C:20:FB:A0:1A:0D:C4:95:1C:EB:8A:88
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/q994s7dvb28MIPugGg3ElRzriog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:11:36:63:8e:5e:1a:32:1e:dc:f4:ac:7e:8f:74:18:c4:d5:
b7:e8:cd:c9:7e:27:b7:ec:81:3e:ee:fd:99:2c:85:12:33:ce:
24:5c:19:a6:6e:e9:58:52:60:f8:0f:eb:ce:89:11:4e:2a:a5:
35:97:75:b4:e1:b7:dd:e7:7b:60:7b:f7:44:e5:2e:f1:5f:99:
89:ab:c7:55:62:7c:87:8c:f8:2d:55:34:4c:a3:8a:d9:59:0e:
5b:77:33:8b:2d:a4:5e:e0:ec:b4:52:1b:e9:35:b6:82:6b:14:
4d:f8:0f:1a:36:c2:3a:38:31:bc:3b:54:7f:9a:62:be:47:ee:
d4:5c:6f:39:7a:d6:65:b7:ba:c3:84:29:6a:28:a7:ba:50:6f:
8d:47:20:67:fc:68:06:fa:b2:58:94:6c:b4:71:a7:65:fb:d2:
e9:57:3a:c5:65:40:d1:05:2d:c5:e1:91:4f:16:fc:59:d7:62:
1a:14:c9:ff:d0:46:0c:0a:b8:17:93:4e:f4:22:d0:6d:e1:69:
b4:d7:f1:fb:2d:13:1d:50:9c:84:b0:b4:31:37:20:2a:d4:57:
17:40:a6:92:bc:ca:cc:45:b6:b5:c7:a3:35:25:c3:ef:dc:a9:
8a:01:16:d5:ac:4c:e4:f8:ee:31:e3:d7:b1:b5:7f:e2:53:55:
d3:4a:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:21 2024 by rpki-client on console-ams.rpki-client.org