Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/9sXCIwv1-u0wRKTMnu9wT3sFjh8.roa
File: 9sXCIwv1-u0wRKTMnu9wT3sFjh8.roa (raw, json)
Hash identifier: ORDvJbq5oSj2SKuMFCU0dcpi6ZqH/qnoCjjBoz/+SFU=
Subject key identifier: F6:C5:C2:23:0B:F5:FA:ED:30:44:A4:CC:9E:EF:70:4F:7B:05:8E:1F
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018CC80188FFD90B20EC0A63D3C78ECE3C64
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/9sXCIwv1-u0wRKTMnu9wT3sFjh8.roa
Signing time: Tue 02 Jan 2024 02:29:52 +0000
ROA not before: Tue 02 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:88:ff:d9:0b:20:ec:0a:63:d3:c7:8e:ce:3c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 2 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6c5c2230bf5faed3044a4cc9eef704f7b058e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:a9:f7:26:0f:2a:db:8a:4c:14:ba:3f:3a:
5d:cf:33:2e:17:fa:98:cd:85:d5:41:b4:a6:d5:a1:
7f:8b:2f:3e:8b:42:c0:94:18:a4:40:94:71:ee:2b:
68:f8:2e:14:01:f5:f0:1b:70:1b:d3:84:04:e4:90:
47:35:2a:6e:83:37:c4:a0:6f:7e:62:27:6c:9f:56:
55:67:f9:0e:85:3a:a7:f0:24:5b:2a:4b:a0:37:a5:
9c:4c:30:be:e3:c1:c5:7a:1f:6e:8d:8c:71:91:60:
e5:f1:c5:7e:2a:1f:b7:82:d9:cc:be:9a:ec:ff:01:
cf:fc:ba:f9:4f:6c:c0:d5:7c:f1:6a:fe:3d:9e:25:
a3:37:f2:e5:3a:6b:72:72:a4:a2:dc:7e:46:d2:50:
88:cb:a9:e0:ce:fb:10:82:ff:df:46:18:17:b5:53:
0b:0c:81:52:f7:dd:4b:82:a8:00:be:39:c2:38:e1:
a7:47:9e:28:21:bf:b5:0f:93:ca:8a:61:83:9c:5c:
4e:11:d5:20:b3:0b:46:d3:16:b5:48:e8:15:5d:94:
4c:30:e9:1f:9a:1c:b0:23:c9:74:65:13:23:87:4c:
0f:b9:46:24:07:c8:16:18:fd:03:b0:95:0a:80:18:
9d:00:59:24:ba:a9:61:50:4e:04:42:59:87:db:64:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C5:C2:23:0B:F5:FA:ED:30:44:A4:CC:9E:EF:70:4F:7B:05:8E:1F
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/9sXCIwv1-u0wRKTMnu9wT3sFjh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:30:d6:0c:6b:f3:30:9e:92:18:d9:31:61:94:04:ec:1a:68:
55:5a:d6:d6:f3:ab:65:e4:28:28:01:d4:4c:88:d3:ef:6b:b9:
80:bd:0d:0e:07:12:2f:01:66:fb:78:de:d2:c2:9b:e5:59:a8:
c1:e2:c5:fb:ac:54:53:4f:f9:36:cb:a6:35:1b:e1:3a:41:26:
b7:75:a7:5e:15:63:a5:4c:55:68:30:f5:c9:8b:36:fe:23:c1:
3b:95:92:4d:f6:4e:e7:9e:79:f3:94:ad:67:04:df:b6:ad:10:
d9:7a:04:31:0b:39:fc:94:a5:ac:33:70:d0:a5:28:d6:b1:4d:
ef:aa:a4:8a:91:24:d2:49:30:e1:a2:6a:c5:2f:f6:bf:e6:29:
c2:60:3f:28:5b:a4:c5:8b:b5:a4:f7:19:2c:6e:1b:d6:53:9f:
03:20:1d:2f:7b:58:f2:8e:94:48:ce:69:fe:42:18:81:f4:97:
f1:42:6c:f8:67:4d:e3:23:65:5d:b1:91:f3:ac:be:0d:0b:50:
11:31:40:f5:10:40:b4:7e:72:98:e8:c4:dc:9f:a1:9e:e5:e5:
f6:cd:98:d2:a7:94:14:fe:2a:a7:1b:5d:51:15:e2:93:c4:a0:
ae:42:ed:b1:35:7f:30:1e:42:5a:3b:03:2e:52:58:f3:b5:a2:
f5:5f:4f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 13:54:56 2024 by rpki-client on console-ams.rpki-client.org