Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Jg8BmxIFrNyI7Cmnl5FuJsIqWBQ.roa
File: Jg8BmxIFrNyI7Cmnl5FuJsIqWBQ.roa (raw, json)
Hash identifier: MlAn1+NTuNZ5MX+r35HIAIM9P5iXRsD4oTkQo5jQrq4=
Subject key identifier: 26:0F:01:9B:12:05:AC:DC:88:EC:29:A7:97:91:6E:26:C2:2A:58:14
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 0185C2B01B7E8E0283CACFE22906CA8AF4D8
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Jg8BmxIFrNyI7Cmnl5FuJsIqWBQ.roa
Signing time: Wed 18 Jan 2023 02:23:19 +0000
ROA not before: Wed 18 Jan 2023 02:23:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 88.218.106.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c2:b0:1b:7e:8e:02:83:ca:cf:e2:29:06:ca:8a:f4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 18 02:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=260f019b1205acdc88ec29a797916e26c22a5814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:48:cc:09:98:81:00:04:82:49:39:df:c8:
13:a1:39:f6:3a:27:2f:58:2a:76:28:d7:fa:f3:f8:
c7:9d:c1:2e:29:fb:41:b5:00:68:b2:61:fd:12:3e:
31:60:26:bf:9c:88:0e:e8:84:e4:5d:90:34:55:b1:
3e:29:ed:b2:d3:e6:6e:28:69:40:43:87:28:ef:dc:
54:4e:f5:34:09:d4:ae:b4:2f:64:2d:2c:fe:6a:da:
42:36:b2:9a:94:63:14:10:a1:c2:24:cf:16:fc:d4:
15:c6:18:7a:41:56:53:82:93:8b:9b:5e:e1:d7:77:
e2:17:f2:2e:ca:a1:1a:b2:95:46:b6:e1:ec:41:cc:
c2:7c:d1:e0:98:0a:0c:a3:d9:fb:ba:ad:c3:db:48:
c7:23:44:67:b4:10:d2:84:32:0d:79:05:cf:d3:2c:
15:89:4d:e3:b3:b8:24:6d:e2:3f:bf:d0:8b:1c:c9:
cd:b3:d8:83:af:b2:23:f9:e2:37:56:26:c4:c3:0b:
9c:af:04:96:8a:ff:00:8d:31:8d:1a:3a:c8:88:bd:
0a:12:22:6a:74:39:e1:d9:19:e7:fb:1a:d8:f5:9d:
0d:b8:10:df:f0:f5:9d:ba:80:cb:a1:e6:ab:ea:2d:
d8:ce:85:ba:cb:76:8e:04:ab:5a:5e:37:a1:f1:22:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:01:9B:12:05:AC:DC:88:EC:29:A7:97:91:6E:26:C2:2A:58:14
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Jg8BmxIFrNyI7Cmnl5FuJsIqWBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.106.0/23
Signature Algorithm: sha256WithRSAEncryption
30:82:61:b4:b2:70:c7:23:88:c7:f7:c9:e7:cc:3a:81:26:cf:
9c:17:d4:e9:4f:b3:26:fd:21:9c:6c:d2:10:6c:22:18:61:02:
60:c2:ef:5a:b0:43:ef:aa:ae:e4:3b:e0:7a:ba:1a:89:ea:14:
77:68:67:50:8a:5d:6a:b2:73:03:7d:8d:57:52:22:82:79:5d:
7e:15:c5:fa:73:c4:69:99:19:63:8f:c6:a6:7c:88:b3:b3:53:
8c:95:37:f0:58:15:45:ad:30:39:23:2c:25:27:0c:b6:43:c2:
76:db:5b:21:da:f9:88:17:3d:86:df:ee:b0:e2:8e:8f:d1:76:
9e:14:b2:e8:58:e3:87:13:42:e8:6e:ba:4d:9e:8b:fd:7e:4a:
b8:f7:0f:3b:1b:c4:90:e6:86:09:b4:0b:2a:b0:80:6c:2e:5f:
23:9e:3a:d6:b9:1e:38:37:19:4f:96:ae:bc:36:8a:41:e3:82:
a6:83:3f:c1:2d:37:5a:18:3b:ca:9b:87:92:1a:a2:c0:07:3c:
1c:8c:e6:55:6d:b7:15:9c:b3:ad:d4:de:6b:6a:4c:e8:66:b9:
bc:8b:80:0f:c8:7a:49:13:21:d7:d3:73:dc:a3:4e:4e:1c:fb:
ee:ec:19:72:90:09:4e:9b:36:0a:20:ff:39:ea:0f:2a:84:73:
13:2b:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:21 2024 by rpki-client on console-fra.rpki-client.org