Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/D_ZMetTXRxpngtWhw8uppIfrFqg.roa
File: D_ZMetTXRxpngtWhw8uppIfrFqg.roa (raw, json)
Hash identifier: jJjRHwyRTN80tUtXE/GgGUvXzQI++gqyybAtzuwGQYE=
Subject key identifier: 0F:F6:4C:7A:D4:D7:47:1A:67:82:D5:A1:C3:CB:A9:A4:87:EB:16:A8
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018AFCB46EE934FF95C73EC12E91C6A66DA5
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/D_ZMetTXRxpngtWhw8uppIfrFqg.roa
Signing time: Wed 04 Oct 2023 21:59:57 +0000
ROA not before: Wed 04 Oct 2023 21:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 88.218.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:b4:6e:e9:34:ff:95:c7:3e:c1:2e:91:c6:a6:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 4 21:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ff64c7ad4d7471a6782d5a1c3cba9a487eb16a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:1f:80:fb:fb:e9:51:10:cf:f9:a1:76:c3:
4f:6e:8f:12:6a:6a:84:b7:18:9d:46:5c:fb:da:54:
0a:9a:6f:64:85:7c:74:d0:e5:07:39:06:a3:96:61:
35:b3:10:22:49:ab:c5:94:87:58:af:3a:e1:1e:1b:
fb:19:cf:ff:95:b2:75:dc:a5:a2:00:d1:1e:2f:48:
82:cd:4c:ca:0d:6a:e9:d5:1a:7a:42:c5:67:c9:4f:
ae:f6:30:5a:87:1f:77:01:13:e2:2b:5e:22:b5:73:
6d:57:88:8a:2e:5e:f1:20:8b:0f:b9:02:30:6a:98:
6e:18:9b:b6:40:d0:25:8d:20:d6:2c:c6:2b:38:b7:
0c:bb:79:a9:79:89:88:98:28:cf:34:ee:8c:28:e3:
e3:f8:df:fa:e1:b1:84:54:07:02:e3:c1:7a:da:38:
a5:6f:ce:d8:d5:55:c8:38:48:98:f7:09:4d:e8:2a:
96:0b:f3:7a:5b:ba:27:8c:06:76:ad:2a:37:92:5f:
94:6b:dd:11:22:b8:c2:b4:52:9b:88:24:90:fa:be:
ca:b9:d4:be:dd:3f:70:ce:27:c7:94:e6:ca:89:16:
21:ab:b1:8d:75:95:22:21:f3:dc:a0:aa:f7:cf:c6:
0e:f7:6a:f1:ed:4c:e4:af:6b:a6:19:2d:67:2e:55:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:4C:7A:D4:D7:47:1A:67:82:D5:A1:C3:CB:A9:A4:87:EB:16:A8
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/D_ZMetTXRxpngtWhw8uppIfrFqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d2:50:6f:7e:8e:5c:82:c7:44:d0:ef:e6:fd:64:b5:07:c1:
03:be:ec:28:b3:b9:0b:2a:a9:02:6a:cb:3f:c2:ce:2a:54:87:
58:0b:cd:29:fa:60:d0:8d:78:fd:94:e6:e8:ee:a2:49:77:84:
c0:12:51:bd:8a:9b:32:cf:bb:6c:b6:7c:e4:24:95:f2:15:65:
b6:5e:fb:7c:8c:47:b2:34:ad:bd:3d:23:ef:80:a9:3b:a6:a4:
bd:8b:b4:01:ef:91:3a:a8:cd:fc:fe:cf:7c:23:d7:9b:77:29:
f1:9b:af:ac:6f:05:09:2e:f9:88:0e:ae:d1:fe:c2:6c:06:9a:
7e:a1:2b:e1:cd:2a:95:4e:fd:ac:52:8a:0e:19:5f:b5:cc:47:
0d:0d:7d:78:b1:06:e0:c1:72:46:ca:99:ea:d0:58:56:8c:fd:
42:40:f8:8e:5f:a7:2b:a8:36:88:2e:4c:b9:a0:6c:b1:ef:a6:
9f:d1:11:5b:51:53:02:9b:b5:ef:66:f4:9f:8b:32:d8:5a:f9:
eb:35:84:4f:3e:b5:1a:d4:fa:9a:e0:40:f8:e0:e4:1f:9b:9e:
10:d0:43:ec:2a:49:ba:75:b5:a5:6a:2d:9f:e6:96:60:e3:47:
db:4f:29:1e:88:77:75:91:79:29:e5:6f:be:f0:24:24:17:4c:
c2:af:45:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 10:14:50 2023 by rpki-client on console-fra.rpki-client.org