Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/_oChgLLA5zm7z_oRZw4sJS8MEHw.roa
File: _oChgLLA5zm7z_oRZw4sJS8MEHw.roa (raw, json)
Hash identifier: BrNR5TsRPnRGI+F6TGEhKDHfMIlrqwtfrwUmKN0IjnA=
Subject key identifier: FE:80:A1:80:B2:C0:E7:39:BB:CF:FA:11:67:0E:2C:25:2F:0C:10:7C
Certificate issuer: /CN=dca0441e5917f9c909f36d55ac2423e124814e2f
Certificate serial: 018570304027C8AFBDF7E7FD3D8A0CF0E27A
Authority key identifier: DC:A0:44:1E:59:17:F9:C9:09:F3:6D:55:AC:24:23:E1:24:81:4E:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KBEHlkX-ckJ821VrCQj4SSBTi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/_oChgLLA5zm7z_oRZw4sJS8MEHw.roa
Signing time: Mon 02 Jan 2023 01:54:48 +0000
ROA not before: Mon 02 Jan 2023 01:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210993
IP address blocks: 88.151.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:40:27:c8:af:bd:f7:e7:fd:3d:8a:0c:f0:e2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0441e5917f9c909f36d55ac2423e124814e2f
Validity
Not Before: Jan 2 01:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe80a180b2c0e739bbcffa11670e2c252f0c107c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:9f:b2:e1:92:47:c7:34:01:7f:66:e2:2a:
d1:14:a2:ef:40:5e:7e:6f:ef:c2:02:b4:36:8d:c4:
03:b5:b1:a6:e1:82:d7:32:6e:f1:35:53:2a:0d:ba:
c7:da:07:d4:b2:c2:4a:02:e9:f1:75:17:9c:79:41:
00:58:ad:41:a9:00:38:d2:88:a8:8b:5e:64:03:29:
aa:89:7d:2b:fe:2c:cf:59:ce:85:3e:5d:90:0a:be:
6e:4d:e2:56:a8:8a:61:da:64:3c:79:a6:5c:e8:39:
62:bb:ab:fc:23:b9:9f:01:ed:ba:37:a2:49:e0:ea:
b2:3f:5f:7d:e5:be:dc:d0:85:4b:4c:e5:56:54:e7:
ab:ae:36:eb:74:9f:77:77:73:44:28:08:28:86:cb:
f3:62:31:ca:f0:a4:1c:f1:02:93:5a:79:97:a8:0b:
e8:fc:ac:6a:bb:f1:c2:78:d4:41:8f:2e:e2:cd:a2:
24:d5:d1:84:c8:a8:08:25:8c:45:46:08:71:65:ce:
b7:aa:45:a3:5a:c4:36:c8:0b:bb:2c:43:6f:3c:dc:
66:31:d4:96:a9:7b:98:2a:ce:8e:cc:6c:c7:03:c0:
aa:94:77:f8:c4:c2:32:19:f9:25:3f:d4:25:5b:83:
87:2a:f7:3e:62:ff:e1:49:f3:54:dd:e5:2a:e2:4f:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:A1:80:B2:C0:E7:39:BB:CF:FA:11:67:0E:2C:25:2F:0C:10:7C
X509v3 Authority Key Identifier:
keyid:DC:A0:44:1E:59:17:F9:C9:09:F3:6D:55:AC:24:23:E1:24:81:4E:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KBEHlkX-ckJ821VrCQj4SSBTi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/_oChgLLA5zm7z_oRZw4sJS8MEHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/3KBEHlkX-ckJ821VrCQj4SSBTi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.114.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8b:c7:db:cb:19:93:19:db:9a:6b:49:bc:9f:c3:f2:1e:91:
d0:48:8e:fc:f2:8c:d1:dc:a1:1c:05:a1:0c:eb:3a:f7:c8:19:
3c:82:28:c7:95:1b:e3:05:6b:51:39:dd:26:8d:69:94:57:23:
05:8f:fc:cd:b2:e1:e4:0c:e5:48:78:e6:da:a4:b9:f1:d7:74:
74:02:05:08:1f:63:9d:1a:2a:93:b7:dd:3c:b9:49:25:4c:cc:
7a:95:18:d7:ca:e7:f9:48:5a:a0:70:71:fd:70:31:22:ec:58:
b0:ef:85:9e:b1:cc:9b:88:c5:08:c9:9b:09:c1:cf:9b:18:1d:
50:fc:56:f5:25:e1:20:9a:4d:a7:d2:5d:c1:d8:4b:0e:e9:c8:
b7:f0:70:48:eb:c9:e1:ce:9b:b7:ab:a0:e9:1c:c1:4b:ee:44:
36:a3:fe:87:42:b6:d3:43:2d:a9:d7:c0:e1:c4:37:cf:48:7e:
15:24:45:8e:07:86:90:33:8c:a1:dc:6e:75:a5:28:0f:ea:2c:
7b:4f:cd:98:06:72:5c:00:2f:98:ce:45:29:8e:09:fe:41:d1:
c2:c1:c8:c2:6a:ad:3e:d5:2b:35:93:50:33:9f:a3:26:e1:8d:
2e:20:10:f5:a8:bf:10:bf:e4:2a:ee:1b:12:f9:45:e0:a5:94:
fb:c3:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-ams.rpki-client.org