Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/v09NdrFFW16-3U6kFqsvSoKWUy4.roa
File: v09NdrFFW16-3U6kFqsvSoKWUy4.roa (raw, json)
Hash identifier: 2Wtu6Mc7ZVhw1i+J62bKbJjXZQBYGKbis48g58MFfUY=
Subject key identifier: BF:4F:4D:76:B1:45:5B:5E:BE:DD:4E:A4:16:AB:2F:4A:82:96:53:2E
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF96A589FD7DED86BC3DFF16A9B39BC
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/v09NdrFFW16-3U6kFqsvSoKWUy4.roa
Signing time: Mon 02 Jan 2023 00:54:54 +0000
ROA not before: Mon 02 Jan 2023 00:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33825
IP address blocks: 88.203.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:6a:58:9f:d7:de:d8:6b:c3:df:f1:6a:9b:39:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf4f4d76b1455b5ebedd4ea416ab2f4a8296532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:f9:70:7d:29:43:1a:b1:bc:79:a1:c7:df:
7b:2e:fc:79:00:5c:97:eb:eb:21:3b:4c:e4:99:02:
5f:e2:99:5c:e2:37:62:5c:49:eb:cf:1c:87:8b:72:
5d:c6:8d:56:22:5a:74:fd:5f:93:f4:69:6b:92:b9:
62:29:04:c8:f6:10:33:d0:76:66:2e:4f:c1:83:1e:
36:0a:aa:b7:91:e5:db:72:1e:f3:db:8c:a9:d0:26:
d1:ca:4f:2a:3e:af:bc:8c:ca:3b:59:9c:19:7b:ee:
b4:c3:0a:0c:51:71:fe:eb:d2:0d:63:c2:a9:d2:db:
bd:23:86:91:83:2a:fc:6c:c4:7b:51:bb:b7:b5:a3:
1f:3a:7b:9f:02:5b:81:57:42:fe:29:64:45:ab:98:
e8:4b:47:4b:cd:40:e8:4c:a7:24:0d:02:8b:99:f1:
e9:a2:90:50:56:dc:54:7f:41:6d:c6:49:c2:ae:2c:
10:5f:f3:2a:88:ac:e4:f3:f1:be:39:1b:92:4d:32:
3b:02:99:b8:72:c6:34:cb:db:85:98:11:91:41:63:
2b:a5:70:a3:3b:46:b6:63:a1:35:c9:7d:ff:17:10:
3b:76:d8:cd:3c:00:9f:71:88:9a:90:f8:e7:d2:cd:
87:18:10:d1:ca:6e:93:04:ec:72:1c:46:17:ea:1f:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4F:4D:76:B1:45:5B:5E:BE:DD:4E:A4:16:AB:2F:4A:82:96:53:2E
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/v09NdrFFW16-3U6kFqsvSoKWUy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.238.0/24
Signature Algorithm: sha256WithRSAEncryption
37:74:88:23:de:fa:78:31:fe:87:39:71:29:00:3e:1d:2f:76:
13:23:24:4d:f6:cf:ee:e0:79:5d:8b:82:5f:1f:a2:21:0e:99:
9d:1d:d3:d9:e8:2d:9c:c9:9c:a2:8d:af:90:26:2f:ca:e6:02:
72:5a:cc:45:9a:f7:5e:83:61:52:5e:bf:6d:08:1a:48:e1:cf:
2d:bb:2c:64:3e:13:08:bf:42:60:1b:e9:30:ac:08:b8:d1:36:
95:53:07:cb:f7:10:cf:5b:d8:20:fb:fd:90:6a:69:c8:d5:1e:
4f:f4:6a:e6:8d:c7:42:ed:56:5a:a2:4e:5a:56:aa:ff:b0:6d:
ea:c3:e7:c4:1a:09:c2:70:c4:14:dd:10:65:51:b7:c3:47:1a:
9e:e6:81:d1:7b:9f:e7:07:92:c8:7b:f2:af:90:ab:58:fa:94:
16:0a:1f:b1:c9:4c:69:19:1f:9e:38:1c:af:b0:fe:21:11:37:
85:5f:5e:e4:4b:d6:fe:0d:84:bd:c0:42:36:c7:b0:0c:25:12:
a7:29:0e:ff:d3:39:dd:a7:26:b8:a1:1b:08:b3:80:21:37:5b:
d9:8a:a8:1d:dc:95:69:84:c2:b0:fc:fd:66:5c:a7:b7:d9:2c:
0e:c2:9a:30:c9:e9:54:78:21:ce:30:cc:46:60:ce:27:28:38:
1b:59:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:01 2024 by rpki-client on console-fra.rpki-client.org