Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/rWVR3dgh5UkX_QUet7iTnUaIiuM.roa
File: rWVR3dgh5UkX_QUet7iTnUaIiuM.roa (raw, json)
Hash identifier: hI+FsN2bWVa2YYNuO1xanvjIYuqLWtx8HjVBxG4Bmuw=
Subject key identifier: AD:65:51:DD:D8:21:E5:49:17:FD:05:1E:B7:B8:93:9D:46:88:8A:E3
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0185E9607EE312CBB868080FE969C04F2D77
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/rWVR3dgh5UkX_QUet7iTnUaIiuM.roa
Signing time: Wed 25 Jan 2023 14:41:33 +0000
ROA not before: Wed 25 Jan 2023 14:41:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:60:7e:e3:12:cb:b8:68:08:0f:e9:69:c0:4f:2d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 25 14:41:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad6551ddd821e54917fd051eb7b8939d46888ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:e7:81:41:1d:01:0b:d8:11:b0:d9:7d:fa:
16:ff:b1:88:55:dc:6b:3d:b9:89:5e:44:d2:36:a8:
7b:62:9a:d5:a5:e4:11:58:d3:a1:f5:f2:96:fa:6a:
56:05:99:88:20:de:16:1d:13:9d:78:6f:90:48:d2:
f8:c6:78:2a:d9:87:92:59:d6:6d:1c:fc:60:df:df:
72:fe:ac:16:e8:03:8b:e4:df:be:e9:d4:c8:87:e2:
97:98:1c:2a:67:fc:11:dd:1e:62:79:72:ab:1c:44:
7b:b1:89:f6:93:3d:81:d5:f5:61:2c:50:ea:5c:31:
48:89:d4:78:0f:12:8a:65:a0:bb:7f:e8:79:37:81:
a4:19:f0:bf:28:4c:70:ab:0e:41:28:f6:e5:64:65:
c6:72:1d:ce:e6:7f:84:5d:69:10:91:aa:a8:6d:46:
2d:d0:6e:17:42:7a:80:ae:3d:2c:c1:97:fd:e5:9c:
83:02:51:f7:2c:d3:29:fa:9d:c6:76:90:77:44:53:
55:0d:88:99:e1:d7:16:d1:c8:4d:4d:df:ac:b6:f5:
3b:02:e3:bf:03:41:a9:48:cc:4a:ab:43:3e:78:d2:
d1:59:65:73:4d:9e:9e:75:6a:96:3d:c0:e1:78:51:
68:7f:0e:d9:c7:a6:74:d6:0d:3f:d2:47:a4:3c:b8:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:65:51:DD:D8:21:E5:49:17:FD:05:1E:B7:B8:93:9D:46:88:8A:E3
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/rWVR3dgh5UkX_QUet7iTnUaIiuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:75:e1:9b:58:fc:85:09:4b:31:41:3c:0f:45:61:90:87:24:
de:10:b8:93:0d:17:60:86:a6:de:d1:de:64:6c:84:33:24:ec:
4c:fa:c7:4c:3f:33:81:15:33:40:22:d1:04:35:c1:cd:d6:ca:
e2:2d:3c:da:ca:26:8a:50:5c:08:58:7d:3b:70:a3:42:bc:69:
cb:11:da:4a:63:74:94:b4:a9:bb:a7:e1:6e:23:59:2f:ec:e3:
d3:1b:cc:84:46:67:15:3f:57:3c:34:7d:1c:55:16:a3:1b:81:
b0:4e:89:e7:c1:ea:b9:ea:65:e3:56:68:26:b7:5b:f0:ff:38:
34:87:20:23:e5:26:ef:c7:c2:dc:71:7f:89:cb:51:1b:0d:79:
76:2e:49:22:54:9b:b9:ac:0f:d4:00:bd:2c:3e:58:43:b1:fc:
31:a4:8b:d1:bb:c7:b2:46:c9:83:93:41:d3:dd:fd:5c:a7:80:
e5:e4:fd:bb:7e:37:72:64:cf:21:32:91:e0:98:9c:12:05:03:
54:2d:01:7a:e5:65:91:e2:4c:c2:c7:0d:96:62:92:20:c1:52:
ee:94:b5:69:6a:a5:b9:5f:ae:1d:0f:13:54:34:82:98:fc:5b:
8c:d8:2d:f3:74:32:88:84:60:62:48:57:f1:08:d0:3d:96:5d:
59:95:5d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org