Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/njYrPuBUOJqaLYMEzGhOF4X6F8M.roa
File: njYrPuBUOJqaLYMEzGhOF4X6F8M.roa (raw, json)
Hash identifier: VUreRH23gPah3uD4yicV94bBaZlkHRtTiDyNxYKVS8M=
Subject key identifier: 9E:36:2B:3E:E0:54:38:9A:9A:2D:83:04:CC:68:4E:17:85:FA:17:C3
Certificate issuer: /CN=dca0441e5917f9c909f36d55ac2423e124814e2f
Certificate serial: 0188D130EAF480B6A7DED2073F9456B7A248
Authority key identifier: DC:A0:44:1E:59:17:F9:C9:09:F3:6D:55:AC:24:23:E1:24:81:4E:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KBEHlkX-ckJ821VrCQj4SSBTi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/njYrPuBUOJqaLYMEzGhOF4X6F8M.roa
Signing time: Mon 19 Jun 2023 01:07:03 +0000
ROA not before: Mon 19 Jun 2023 01:07:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50214
IP address blocks: 88.151.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d1:30:ea:f4:80:b6:a7:de:d2:07:3f:94:56:b7:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0441e5917f9c909f36d55ac2423e124814e2f
Validity
Not Before: Jun 19 01:07:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e362b3ee054389a9a2d8304cc684e1785fa17c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:51:14:54:0b:ae:0e:8d:52:d6:22:18:58:
a5:bf:0c:e4:94:e2:78:f0:04:65:f5:73:f3:56:f0:
8e:64:27:2e:0c:bc:0c:d2:66:db:cc:ef:af:4e:b7:
c9:e5:d4:83:09:a2:b2:9d:25:a1:23:ef:f0:01:1c:
93:0d:3f:a8:cc:3e:08:10:e4:be:2d:20:1f:90:dd:
c0:29:eb:8c:5b:37:71:40:16:fd:d9:71:2d:54:e7:
9a:f1:ed:a2:44:ed:ae:d2:d7:40:a1:b2:8d:be:8f:
2d:aa:4a:96:33:62:c5:81:ef:55:78:56:d0:cf:69:
bb:0f:0f:f6:0a:08:5a:39:c2:37:d4:1c:45:41:5a:
c3:02:3a:37:a0:93:4a:2e:e6:95:90:f3:4f:d3:2d:
0d:7f:36:27:46:30:f4:f5:97:cb:c9:8c:57:00:6b:
76:47:1c:ee:7b:70:b7:42:76:59:b4:62:d9:f8:be:
b0:c4:a3:45:21:d0:4a:1b:93:2d:b7:31:4d:f8:70:
5b:5c:2b:63:3e:03:b1:fb:cb:17:71:d2:a7:6b:b4:
25:8c:50:c7:b7:6c:1a:33:64:77:e8:69:b8:b5:d4:
77:00:90:6a:fd:19:ae:f8:dc:df:d0:d7:36:1a:96:
5e:cd:66:ee:85:2f:7f:00:79:0b:66:d1:d9:db:e8:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:36:2B:3E:E0:54:38:9A:9A:2D:83:04:CC:68:4E:17:85:FA:17:C3
X509v3 Authority Key Identifier:
keyid:DC:A0:44:1E:59:17:F9:C9:09:F3:6D:55:AC:24:23:E1:24:81:4E:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KBEHlkX-ckJ821VrCQj4SSBTi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/njYrPuBUOJqaLYMEzGhOF4X6F8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/3KBEHlkX-ckJ821VrCQj4SSBTi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.114.0/24
Signature Algorithm: sha256WithRSAEncryption
93:6f:cf:93:40:7f:f7:a4:c7:51:8f:0d:0b:3f:10:c4:5a:60:
a6:63:b7:2a:d5:68:9e:28:27:c1:fd:44:20:67:53:db:24:23:
8b:54:c6:ed:c3:87:4c:33:a5:ee:ec:9f:ee:84:44:c2:a8:5d:
31:80:66:c8:18:c1:c5:11:53:c5:30:8d:c5:95:9f:e6:a2:8d:
df:6f:7d:f2:7c:5c:e1:ba:2a:45:0e:bb:dc:9d:d3:d9:31:d9:
c9:39:84:d1:45:3d:04:7c:17:14:b6:e8:40:f4:51:88:0d:80:
9a:4d:51:87:75:93:17:6a:52:aa:33:87:16:a5:91:db:5a:7f:
53:40:47:e8:7e:cf:97:7a:9a:f1:08:77:49:2f:68:91:e0:b5:
a6:40:dd:f3:b4:1a:00:e9:5e:b1:77:3e:e6:4c:33:55:b6:4a:
b7:8a:cf:11:ea:a8:88:f4:9e:7d:ed:b7:6f:8a:ee:7b:58:49:
0e:c3:5d:0e:29:3b:9c:8e:49:2e:eb:32:cd:b2:f6:11:94:c2:
ac:98:e7:bf:fa:32:6e:cf:97:eb:9f:7e:34:11:ae:a6:fc:43:
fe:68:d9:9e:fb:cc:69:32:c6:92:74:00:79:0d:a1:a4:4b:92:
6f:f5:a3:e4:8b:76:b7:4f:da:0b:ab:7e:3f:f7:fd:61:b1:f8:
fd:72:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:16 2024 by rpki-client on console-fra.rpki-client.org