Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/o8Ix3fuIhl99ps6ibLrQ_0N_7b0.roa
File: o8Ix3fuIhl99ps6ibLrQ_0N_7b0.roa (raw, json)
Hash identifier: +meD+h5U/m/afN/QsNUd1IfmE3m7VsYIhz/yDZ5kUSY=
Subject key identifier: A3:C2:31:DD:FB:88:86:5F:7D:A6:CE:A2:6C:BA:D0:FF:43:7F:ED:BD
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 018570C2AC8C545B97CB61F551F9C0FA57A7
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/o8Ix3fuIhl99ps6ibLrQ_0N_7b0.roa
Signing time: Mon 02 Jan 2023 04:34:44 +0000
ROA not before: Mon 02 Jan 2023 04:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211802
IP address blocks: 88.218.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:ac:8c:54:5b:97:cb:61:f5:51:f9:c0:fa:57:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: Jan 2 04:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3c231ddfb88865f7da6cea26cbad0ff437fedbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:25:21:38:bc:1c:e6:48:c6:3c:17:62:91:39:
98:b7:3d:3b:7a:89:30:30:db:d2:c8:9c:f1:40:af:
b3:ab:48:47:f1:2f:12:c4:32:b9:89:1c:86:7d:7e:
f3:41:24:f0:70:7d:51:eb:66:70:8b:f0:88:d1:8e:
33:88:d4:17:47:08:27:06:ec:6f:9a:f6:e0:bc:42:
47:fd:ac:0f:b3:df:2b:e0:ab:dd:79:03:25:eb:96:
45:dc:32:07:99:57:95:98:04:7e:83:56:e9:0d:6b:
13:b0:b1:27:8d:88:ee:b9:10:54:e1:d4:65:f8:d0:
07:53:e7:f4:4f:dc:a2:69:11:f1:9a:b2:ab:de:8c:
6a:bf:ab:3b:e9:12:b6:11:3a:04:d2:93:54:05:45:
01:3c:51:c2:b5:1e:a0:a5:77:9c:dd:d2:74:aa:a5:
45:59:8c:11:dc:c0:72:02:ef:04:05:8c:99:81:56:
dc:10:ba:99:fd:1e:af:32:2c:91:32:77:a8:43:32:
f2:81:7c:c2:57:f5:5e:e7:d2:ec:4e:b2:5d:58:58:
ba:9e:35:cf:d8:3b:59:a0:8b:ca:20:7b:5a:0c:28:
a6:02:f8:64:32:fa:09:51:a9:58:c9:63:6c:1d:a6:
1e:11:c3:09:48:47:4d:b7:bb:27:a3:78:46:aa:67:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C2:31:DD:FB:88:86:5F:7D:A6:CE:A2:6C:BA:D0:FF:43:7F:ED:BD
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/o8Ix3fuIhl99ps6ibLrQ_0N_7b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3d:83:35:a6:b2:36:3d:7f:81:4d:8e:d1:9e:48:e2:41:1c:
69:64:66:6c:af:07:16:2b:20:2f:75:24:5d:46:4f:15:03:3b:
47:f3:b4:fb:f4:fb:26:df:14:bf:6f:f2:be:98:b0:84:be:3a:
e1:c0:0c:a0:ba:0b:1d:32:f2:aa:2c:49:fa:67:f3:40:ac:88:
b8:46:b1:e0:4d:c4:6a:e9:01:40:58:c6:b9:b0:e4:45:0d:07:
68:28:98:4b:cd:6b:bd:2b:9b:8d:5b:dd:84:ab:c1:c1:91:c2:
23:f2:52:38:9d:90:5f:cc:09:87:e8:c4:4b:f4:c2:19:59:60:
fe:b1:9f:79:ac:84:2b:af:5f:9b:0e:a7:ad:d0:07:85:06:a8:
4b:a7:34:9c:03:a4:76:08:7b:0d:b3:48:9f:d9:28:83:9e:42:
52:c1:70:5c:c1:4d:df:5d:2d:be:68:19:bb:2d:7b:90:e1:b4:
6c:80:13:76:81:c1:d7:20:6a:5d:c3:74:ca:6b:15:9d:00:ab:
1f:e1:49:3e:40:e7:b0:fd:d9:75:95:1b:25:ed:6e:08:f0:7f:
48:d6:c5:b3:70:33:04:a6:45:2f:0a:d8:3f:f2:3c:bc:07:30:
0b:74:3d:e1:23:11:b8:6f:ba:f1:82:2b:90:6b:01:44:8e:1a:
71:1e:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:27 2024 by rpki-client on console-fra.rpki-client.org