Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/tfpEPin2VLcAyIHB9t5SMIBCyuc.roa
File: tfpEPin2VLcAyIHB9t5SMIBCyuc.roa (raw, json)
Hash identifier: paTCr06n9n0yTxAB6mZEXghIJkR6fNJctTvBvnF7l/o=
Subject key identifier: B5:FA:44:3E:29:F6:54:B7:00:C8:81:C1:F6:DE:52:30:80:42:CA:E7
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0186021E5900FB9CE4C25B41E92FEE18C8D6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/tfpEPin2VLcAyIHB9t5SMIBCyuc.roa
Signing time: Mon 30 Jan 2023 09:59:48 +0000
ROA not before: Mon 30 Jan 2023 09:59:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197897
IP address blocks: 88.203.249.0/24 maxlen: 24
88.203.248.0/24 maxlen: 24
88.203.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:1e:59:00:fb:9c:e4:c2:5b:41:e9:2f:ee:18:c8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 30 09:59:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5fa443e29f654b700c881c1f6de52308042cae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:63:0b:18:b6:20:4a:27:18:ac:b5:d4:22:
02:06:7e:74:f9:b3:29:ca:87:4f:9b:42:22:fe:71:
f0:f2:e6:fa:a6:96:11:42:0a:1d:eb:bc:21:c4:1a:
1e:58:21:d1:b3:05:14:94:a0:de:d7:44:59:78:34:
a3:a2:50:df:65:c3:e5:3f:61:c0:92:3b:89:a5:1a:
fc:dc:52:30:5b:cd:29:97:0c:7b:48:88:ff:5d:84:
cb:cf:cb:80:5f:2a:ac:23:6f:2b:5d:58:2f:e0:a7:
3b:a8:9b:f8:b0:a4:d5:2c:98:ab:4e:77:f3:8e:e9:
3e:54:55:26:22:3b:0f:8c:9c:0f:a5:03:60:be:f0:
b6:82:7e:84:09:43:18:ea:ae:d6:f6:83:f5:29:73:
8c:7d:cb:77:41:37:a0:41:40:22:95:aa:c8:49:0d:
83:55:cf:4b:08:da:10:e7:eb:ca:72:a1:96:31:a4:
13:40:bb:ea:5f:a0:b8:8d:71:b2:a3:35:c5:97:9e:
db:b8:7c:ed:f9:f7:1c:f7:0c:93:4b:8d:e9:b7:10:
27:d5:f5:7a:17:5b:b2:24:ff:98:31:1a:3a:24:01:
71:eb:d3:22:2d:00:b1:80:29:e0:a2:00:fc:50:39:
ee:a5:1f:17:51:2d:7c:b9:b3:c7:d8:48:d9:d9:8b:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FA:44:3E:29:F6:54:B7:00:C8:81:C1:F6:DE:52:30:80:42:CA:E7
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/tfpEPin2VLcAyIHB9t5SMIBCyuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:e7:36:22:39:d1:7a:6d:d6:83:ea:57:9b:25:52:52:db:d8:
36:7c:22:fb:20:74:12:c2:66:a1:8d:cf:0d:d3:9b:a5:e6:26:
b4:26:7b:ae:ab:9c:31:fa:5b:81:96:b1:d9:cc:0c:60:04:2f:
15:a5:f6:9b:03:06:9a:03:96:0c:44:f6:7b:78:4d:9c:ba:0e:
cb:93:b6:4b:ce:41:2a:10:af:8b:1a:29:1f:e8:84:5a:a9:b0:
42:07:be:4e:68:b4:e4:c2:45:bb:5d:73:1f:40:29:cf:40:24:
44:82:b9:ea:b3:c5:97:cc:64:7a:f3:51:d0:a6:b2:d3:4d:93:
d5:88:26:3b:c7:b1:6b:50:28:ee:ff:a1:f4:6c:8c:72:10:59:
a0:aa:49:ba:2c:b1:79:e8:94:02:15:43:c4:f7:af:e7:3c:a0:
32:74:9c:8f:7c:3d:94:36:97:f5:74:4d:4c:56:16:5a:af:9c:
e8:b4:39:5f:bb:38:95:2c:2a:d7:f6:58:f3:26:10:09:27:2a:
ab:86:51:a0:4c:30:8d:7f:dc:6d:60:28:d4:0a:20:c7:e4:f1:
f8:94:db:5b:32:e8:e0:ea:54:0a:21:d7:a2:86:f8:84:3e:33:
99:f0:13:d3:7a:f0:c0:3e:e4:13:ee:7d:ed:20:3a:a7:92:d3:
7f:d4:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:13 2023 by rpki-client on console-ams.rpki-client.org