Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/JTYPb-ahsud6KTxpPXbvxwWvGeY.roa
File: JTYPb-ahsud6KTxpPXbvxwWvGeY.roa (raw, json)
Hash identifier: Vc5zc3CBcPOqrgwEfqP2qOoVsCb0iqQYvQxl7K1gh4o=
Subject key identifier: 25:36:0F:6F:E6:A1:B2:E7:7A:29:3C:69:3D:76:EF:C7:05:AF:19:E6
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 0187B7E799D92CCA5290C9CA8C15DE58CC31
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/JTYPb-ahsud6KTxpPXbvxwWvGeY.roa
Signing time: Tue 25 Apr 2023 10:13:41 +0000
ROA not before: Tue 25 Apr 2023 10:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57240
IP address blocks: 88.135.46.0/24 maxlen: 24
88.135.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:e7:99:d9:2c:ca:52:90:c9:ca:8c:15:de:58:cc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Apr 25 10:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25360f6fe6a1b2e77a293c693d76efc705af19e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:91:45:63:1d:2f:72:e6:ce:41:b4:d9:97:
d3:22:17:05:1d:3d:0a:b9:3a:16:74:03:e8:a3:45:
23:42:ad:8a:ae:f2:44:60:2b:58:25:0e:97:e2:5f:
6f:5c:1b:af:4c:d5:9a:e9:0d:fd:92:23:ad:a4:d0:
7c:59:71:db:37:5f:f3:1a:cd:36:a8:94:b4:60:92:
d9:4c:e0:b0:98:ba:14:e9:d8:f5:bb:2e:1d:fe:93:
48:36:23:9e:7b:69:fa:1b:c0:66:cc:ae:74:eb:46:
f9:5c:c7:fa:65:28:50:0f:24:bb:e4:ff:8d:7f:2f:
a0:b5:92:f9:88:dc:aa:e4:a5:06:68:7a:fe:8e:71:
5a:c4:89:53:8e:52:87:35:a2:a2:a1:52:b5:d9:01:
9a:c6:65:3c:40:92:fe:5e:fa:af:e1:1a:95:b3:7e:
04:71:d1:bf:62:ec:51:27:9c:30:3a:19:db:71:4e:
cf:21:0d:7f:b4:69:c8:76:99:14:d0:90:08:84:4a:
c2:48:4f:11:a8:a6:39:bf:d7:b3:f7:77:86:30:ea:
30:50:1d:1b:84:a4:e3:75:26:cf:1d:f0:3d:89:fd:
77:16:02:2b:cf:ef:27:69:26:0d:c3:fa:ee:d1:03:
be:4a:fb:a9:e7:51:1a:d4:3a:25:a6:45:bf:d7:cb:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:36:0F:6F:E6:A1:B2:E7:7A:29:3C:69:3D:76:EF:C7:05:AF:19:E6
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/JTYPb-ahsud6KTxpPXbvxwWvGeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.45.0-88.135.46.255
Signature Algorithm: sha256WithRSAEncryption
4d:f3:bc:f1:d8:be:d6:45:2e:fd:c2:b4:b2:a0:d5:63:7f:c4:
02:36:57:ac:5e:8a:2f:b3:98:d9:95:fe:aa:1d:ff:c7:fd:4d:
f9:3d:97:1e:d4:de:e3:74:97:47:3c:4f:e4:ef:bb:5c:0a:cc:
b5:fb:8b:7c:81:1f:84:b8:12:86:b5:b6:63:49:d7:3e:e5:24:
6a:a1:2e:f3:2f:ea:8e:ef:a8:3c:2b:3e:b8:34:5c:3c:37:77:
9f:f9:dd:98:2d:26:88:a7:7a:d7:2d:ef:c8:71:f2:4e:1c:d5:
29:86:49:18:1a:16:9c:f4:48:77:72:a2:8e:ea:fb:04:59:08:
e7:05:3e:0e:cb:f3:bd:37:21:9e:f1:47:c6:93:13:ef:4f:ff:
a0:21:59:1d:e4:86:16:94:7f:11:9b:e8:d8:40:78:33:ce:40:
c8:d4:0f:bc:61:ab:ea:6d:21:0a:83:d1:16:9e:9d:ca:50:67:
bd:85:1b:d2:4f:96:0c:83:c3:b4:ae:3e:ee:c1:ec:b4:c9:9e:
5e:3f:d6:c9:38:97:5a:5e:ad:1c:d8:e6:8c:09:3f:46:d1:e7:
e1:12:df:34:5a:2f:55:6d:e9:d2:67:f1:92:29:ac:4b:13:38:
73:dc:e9:ee:20:bd:82:c2:0a:fb:23:fd:63:24:35:0f:6b:ba:
05:93:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-fra.rpki-client.org