Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/unDmU4LMZkQ7TPVOo_kAmetzsas.roa
File: unDmU4LMZkQ7TPVOo_kAmetzsas.roa (raw, json)
Hash identifier: pQWbEbsTGwqOo9Bp1d+A8HZYocwf6AdASsA2a6j+ByQ=
Subject key identifier: BA:70:E6:53:82:CC:66:44:3B:4C:F5:4E:A3:F9:00:99:EB:73:B1:AB
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018570E758FFFC9768D116D2DB16182D4820
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/unDmU4LMZkQ7TPVOo_kAmetzsas.roa
Signing time: Mon 02 Jan 2023 05:14:47 +0000
ROA not before: Mon 02 Jan 2023 05:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206224
IP address blocks: 88.119.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:58:ff:fc:97:68:d1:16:d2:db:16:18:2d:48:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 05:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba70e65382cc66443b4cf54ea3f90099eb73b1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:17:6c:0a:fb:88:88:ce:ff:18:b9:f6:ec:
08:a6:c8:91:36:f2:ba:77:69:76:91:da:58:50:66:
da:ea:3e:24:73:20:15:ed:f5:3c:83:f5:fa:87:bf:
0e:62:75:bb:9a:db:74:40:96:91:24:e8:51:af:55:
06:7e:31:44:c3:6e:5f:ce:93:b0:b3:54:a5:73:ed:
84:00:9e:6e:61:a6:47:e4:03:04:4e:1c:30:e9:f2:
4f:1c:b6:5c:18:2e:8f:1e:e6:b9:83:05:83:13:b4:
73:87:ed:5a:e5:28:78:c8:08:fe:dd:08:b1:2b:f7:
5e:d6:88:15:fc:87:69:6e:44:11:e9:f7:1c:f9:81:
e1:0a:5c:b2:87:c4:05:20:65:8b:69:eb:55:bf:2c:
aa:5c:7c:0b:64:dd:1a:55:2a:ec:cd:aa:e6:1c:8a:
0c:6a:6c:9c:d8:f6:e4:82:e8:ff:0f:eb:fc:b8:d6:
68:e5:e3:0a:81:fa:87:e7:2d:36:f0:48:40:b0:ec:
1a:4b:80:7b:ca:d9:7f:9b:58:dc:0c:90:7d:11:dd:
95:06:8b:3b:58:5e:13:09:78:88:ec:96:f1:43:a1:
c3:70:bf:83:37:27:5b:01:e5:7c:83:49:cb:f0:a7:
41:a6:05:49:df:94:36:d5:7a:5c:62:08:53:73:23:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:70:E6:53:82:CC:66:44:3B:4C:F5:4E:A3:F9:00:99:EB:73:B1:AB
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/unDmU4LMZkQ7TPVOo_kAmetzsas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.119.181.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5b:28:bc:ed:81:fd:29:df:cc:ad:4f:87:70:41:79:21:b1:
3e:c8:5f:21:ed:6a:a0:6e:74:28:4a:85:36:a2:8f:21:1e:ee:
f8:e8:de:46:e3:0b:8e:b1:94:70:34:df:84:94:60:de:ae:f8:
bc:73:d0:77:c4:d5:7a:f4:38:be:e4:01:1c:44:68:87:24:8f:
01:ce:e3:ed:be:2f:1d:75:f2:ce:35:e9:59:c9:84:78:8f:42:
f3:ab:02:97:eb:40:7f:f5:57:7a:22:6d:2f:4b:b4:0f:95:a4:
ff:49:2d:b9:2d:bb:68:aa:66:75:35:21:4c:05:4f:01:1c:0e:
78:03:ad:f2:d0:b7:d8:4e:b6:d9:2f:9a:52:5d:a0:b6:05:5a:
1f:c1:92:c3:08:36:74:85:dc:d4:4f:cd:8d:51:be:85:6d:25:
75:f6:43:a8:10:f2:61:1f:fa:14:a8:92:76:52:c1:96:16:2a:
4c:a6:3c:bd:1c:10:4c:00:c4:55:8b:0e:ee:7d:2a:dd:be:ef:
ea:30:94:3c:57:30:69:c6:91:ba:64:12:2a:79:69:65:91:fb:
bd:45:eb:ea:76:fc:f9:94:90:bb:c3:a4:68:cc:cb:84:3c:2b:
89:6d:71:d5:45:79:98:c7:09:fc:24:fd:47:41:68:f2:63:88:
bd:48:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:43 2024 by rpki-client on console-ams.rpki-client.org