Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gVRJ3zl-mMV1toKXkUDamNZzgM4.roa
File: gVRJ3zl-mMV1toKXkUDamNZzgM4.roa (raw, json)
Hash identifier: EbJeEjqQCdcduprZXyRhF7AIWJEMvI3EjZaPpLi7LLE=
Subject key identifier: 81:54:49:DF:39:7E:98:C5:75:B6:82:97:91:40:DA:98:D6:73:80:CE
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0185BEFF49C698988E0862A9FB5A490E66A1
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gVRJ3zl-mMV1toKXkUDamNZzgM4.roa
Signing time: Tue 17 Jan 2023 09:11:19 +0000
ROA not before: Tue 17 Jan 2023 09:11:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209281
IP address blocks: 88.148.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:ff:49:c6:98:98:8e:08:62:a9:fb:5a:49:0e:66:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 17 09:11:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=815449df397e98c575b682979140da98d67380ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:79:e9:b6:c9:7c:fb:c4:fa:76:cf:12:00:
21:09:0d:46:ad:e3:8c:8e:30:d1:07:55:8f:bc:d6:
66:01:a1:85:27:5c:93:9e:f4:a6:70:63:f0:e8:7f:
27:b6:b7:a9:00:8f:bf:c1:8b:e9:59:5e:9b:ea:5f:
47:8e:b5:b6:20:24:19:72:50:0e:93:cf:7f:6a:98:
c1:13:f1:f3:6b:d1:c0:10:ee:e6:e9:ab:e4:a8:81:
d0:c3:b9:6e:58:b6:e9:a5:cd:e4:1c:b3:7e:38:f7:
59:fe:b8:48:15:e4:e0:c5:5d:f0:60:f4:1d:32:e1:
65:f5:ac:26:22:9d:06:7d:43:1f:4b:11:41:e8:cb:
d9:14:b4:69:3e:3a:00:a9:1f:d5:a1:37:59:be:83:
91:99:50:a6:4b:11:90:a9:92:80:11:07:e9:5c:c2:
60:03:07:69:b6:ba:8d:bc:12:7f:c2:c1:b9:ad:38:
08:7e:70:42:ae:56:3c:4a:0d:55:b7:9e:bb:91:3e:
19:49:db:ba:2b:1c:5a:1c:ae:77:49:cc:3e:6e:39:
9d:6a:cf:a1:6a:46:ca:6e:5c:82:6b:a2:97:38:d0:
6b:b6:f3:11:6d:69:e4:7c:b0:d4:87:c5:9a:4a:0b:
69:61:8c:7c:f7:07:a3:29:57:47:10:e0:03:2d:0c:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:54:49:DF:39:7E:98:C5:75:B6:82:97:91:40:DA:98:D6:73:80:CE
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gVRJ3zl-mMV1toKXkUDamNZzgM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.148.49.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:fc:ac:aa:fb:30:b3:a3:25:bf:65:45:a6:bf:d1:ac:e2:47:
e5:dc:5b:68:1e:06:7a:07:3b:e8:a7:9a:1c:52:04:7a:49:94:
59:73:a3:07:5d:24:2d:0b:89:ec:15:74:4a:a8:6b:8b:1e:e8:
4a:4d:2c:5d:48:bf:9a:19:63:db:e1:48:9e:c6:05:e2:a4:c1:
3d:c6:56:b6:cf:53:19:ac:b6:90:18:0f:e6:85:3e:55:d9:3c:
a9:ba:e5:c8:3a:1f:14:31:3f:a3:b3:4a:4f:d0:16:8f:4f:d0:
e2:0c:0b:68:4a:fe:1e:44:3b:11:5b:e7:b5:fb:9e:20:09:c4:
db:aa:a8:53:3b:2d:a0:e1:6a:fe:06:90:4a:15:03:c7:af:3f:
7f:fb:ca:09:0c:74:69:42:f3:ef:39:77:90:0d:7a:94:7b:23:
ac:bf:61:e8:5e:5c:8b:df:27:54:25:91:ff:38:d5:75:7d:1f:
6a:b8:27:e7:5f:59:6c:d2:b8:af:77:25:3b:eb:9f:a5:00:68:
d1:64:01:40:90:b2:c9:92:88:1a:d4:c1:00:d9:1b:9b:e9:0d:
bf:71:32:f4:fd:4c:6b:c7:75:ac:d9:d9:51:d0:92:5d:46:c5:
58:2b:f1:9f:c4:08:18:9b:06:ad:ce:fb:01:75:49:20:e4:90:
92:8a:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:46 2024 by rpki-client on console-ams.rpki-client.org