Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Z8t7KFw3a2Jn_YYxSo6V-ZubdlQ.roa
File: Z8t7KFw3a2Jn_YYxSo6V-ZubdlQ.roa (raw, json)
Hash identifier: b9IPbAf64wDigNnfh0z6BEgpJhXySkalO75HE3GpkGg=
Subject key identifier: 67:CB:7B:28:5C:37:6B:62:67:FD:86:31:4A:8E:95:F9:9B:9B:76:54
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E9EEC3FA7F60B1AA13F75E9EB653BF989
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Z8t7KFw3a2Jn_YYxSo6V-ZubdlQ.roa
Signing time: Tue 02 Apr 2024 13:07:46 +0000
ROA not before: Tue 02 Apr 2024 13:07:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 88.214.48.0/23 maxlen: 23
88.214.50.0/24 maxlen: 24
88.214.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 19:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:ec:3f:a7:f6:0b:1a:a1:3f:75:e9:eb:65:3b:f9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 2 13:07:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67cb7b285c376b6267fd86314a8e95f99b9b7654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:25:6b:20:f7:7a:c9:28:b9:30:2b:7e:b2:
e5:bb:06:71:bf:39:22:70:e2:61:d1:a9:d8:3d:a9:
4f:85:2f:44:59:d5:a9:53:0c:7c:d2:c8:77:35:cf:
fd:c8:a7:fe:59:24:3d:62:eb:f5:c2:1b:96:48:24:
63:b6:3d:e4:69:64:d2:4a:fa:94:3d:e1:fe:dd:8f:
fd:13:d6:31:2a:c0:9a:ca:11:51:54:12:b2:23:05:
29:7b:d1:bc:6d:ef:c7:c4:1d:eb:72:4f:30:72:86:
95:1f:10:c7:83:92:e1:ec:0c:c5:b3:61:9a:94:bf:
30:67:a8:9b:48:86:66:95:02:86:62:05:a3:92:fb:
aa:15:81:5c:29:16:92:4d:40:0d:3b:44:bd:28:06:
c2:8e:e1:1b:c9:9f:59:52:e1:dc:7c:f1:81:f9:40:
d7:33:54:1c:17:c9:f0:9c:6d:9a:2f:29:d7:7e:01:
fd:06:57:94:20:15:d3:d7:19:31:be:6b:82:90:13:
63:17:fc:cc:26:29:9b:0c:4f:1b:4e:19:eb:0b:79:
b6:0c:69:f1:ea:33:cd:d0:f3:66:ab:01:25:68:f8:
16:f0:7f:9a:70:51:de:34:fe:b6:34:50:1d:75:ab:
16:31:8d:ad:d8:a7:e6:8d:11:fd:f3:91:0d:48:7e:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:7B:28:5C:37:6B:62:67:FD:86:31:4A:8E:95:F9:9B:9B:76:54
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Z8t7KFw3a2Jn_YYxSo6V-ZubdlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.48.0/22
Signature Algorithm: sha256WithRSAEncryption
34:6d:57:00:ce:58:a2:0c:34:65:e7:21:27:63:97:29:93:fe:
46:21:af:55:0b:7d:19:72:6c:2f:a0:09:84:53:b3:99:96:cc:
da:07:13:24:91:fc:bb:63:7a:ea:c1:43:ee:ae:63:38:f1:66:
aa:db:be:1f:85:0d:82:4c:0b:f5:d3:63:00:b3:92:8d:7d:c0:
f3:12:12:90:6a:da:27:04:70:8e:f9:d2:ed:2f:02:73:42:c2:
2e:b2:01:6f:47:b5:93:d4:67:13:00:cc:54:73:ee:a7:a1:47:
8e:de:50:93:8f:52:4d:a1:64:b5:68:1e:96:7c:3c:cc:b8:f2:
9f:d5:75:0c:b6:c0:5d:53:1a:5e:44:5c:5d:cf:03:87:25:a6:
ad:24:7f:fa:e9:24:a0:76:e0:dd:5b:ee:c5:38:0f:8a:de:81:
77:61:bf:7f:48:bd:d9:fc:42:7d:e7:49:ad:73:4f:1e:6b:ea:
1a:cd:fb:02:97:df:ac:5b:26:08:16:13:50:20:03:55:d4:34:
ea:56:9c:3f:b5:5a:85:d7:e5:9a:03:75:61:8f:f2:e7:24:ff:
87:c3:57:53:73:72:a7:3a:cb:cc:a8:17:57:ff:ad:06:3a:ef:
1c:69:d1:3c:d2:72:e0:6e:60:78:d7:94:c5:17:85:ee:b1:03:
47:71:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 22:46:51 2024 by rpki-client on console-ams.rpki-client.org