Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/1-tLALUjBZINOH-6J1XWxfE_D__M.roa
File: 1-tLALUjBZINOH-6J1XWxfE_D__M.roa (raw, json)
Hash identifier: 5C9pdH1kSd6eN74TA2aIk5lOYn5Lj6h9pYuRMhiSIs0=
Subject key identifier: FA:D2:C0:2D:48:C1:64:83:4E:1F:EE:89:D5:75:B1:7C:4F:C3:FF:F3
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018B62E7BC878773D4F905CEFDAB9EFA2269
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/1-tLALUjBZINOH-6J1XWxfE_D__M.roa
Signing time: Tue 24 Oct 2023 18:17:15 +0000
ROA not before: Tue 24 Oct 2023 18:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210558
IP address blocks: 45.88.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:e7:bc:87:87:73:d4:f9:05:ce:fd:ab:9e:fa:22:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 24 18:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fad2c02d48c164834e1fee89d575b17c4fc3fff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:88:23:76:a4:60:ef:33:f8:cf:0e:dc:9e:
a2:98:6c:4e:dd:31:d6:dc:a1:6d:18:88:44:82:ae:
f8:d6:73:ca:7f:2b:2f:32:8e:8d:ec:e5:f4:a3:fd:
07:6e:f3:82:72:69:0c:9f:aa:55:36:ab:4e:bb:0e:
7b:ce:86:ae:67:e4:2d:bb:7a:c8:6a:74:c8:d5:86:
47:2c:85:d9:a7:59:eb:55:d0:25:ef:77:bf:ec:6b:
d1:aa:98:50:26:c9:b6:40:7e:db:13:2d:94:d5:01:
ab:38:24:fd:47:8e:e4:f5:d3:ca:1e:16:5f:ac:6f:
58:7e:0a:cd:c1:a9:41:ea:2c:d0:f0:4b:1b:3a:4d:
af:38:70:16:9b:7e:0f:bf:b3:22:48:fd:49:a0:7c:
07:a8:88:ca:97:bd:64:df:79:ae:b1:4e:10:fb:71:
3e:50:26:bd:ad:2a:3c:17:1e:85:84:3d:4a:67:21:
4b:bc:0e:4f:36:17:f2:3c:dc:5d:1c:69:b0:4e:04:
dd:4d:7d:1e:30:b4:76:5a:e2:04:2c:e6:40:ce:47:
01:08:de:2a:f7:8f:5b:ae:f7:e9:90:9b:cb:8d:e9:
45:a7:e8:8a:ed:b7:8c:f5:32:27:b0:ca:0d:1a:17:
93:a9:b9:69:f3:42:33:4e:93:2b:6e:b2:06:5d:da:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D2:C0:2D:48:C1:64:83:4E:1F:EE:89:D5:75:B1:7C:4F:C3:FF:F3
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/1-tLALUjBZINOH-6J1XWxfE_D__M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
25:db:c8:32:3e:3f:2d:bb:d7:77:d3:2f:24:1b:a8:a7:a4:ac:
9e:d3:93:67:30:0f:5e:a7:db:5b:0b:90:2f:60:a3:58:20:a8:
22:d2:33:fd:aa:b5:7f:62:25:ba:b7:3e:10:b2:af:06:3b:c3:
8c:d9:2e:96:7a:93:24:2a:a4:eb:fc:fc:ca:4f:3f:40:a1:ce:
42:d7:42:8d:06:47:15:a5:ae:48:ce:ab:d5:bc:82:ce:2f:9a:
45:ed:51:8b:b6:3a:b3:81:b2:f3:66:81:99:42:53:31:ac:d1:
8a:a0:71:07:09:ce:b9:69:9e:20:02:0a:6e:4c:d3:37:fd:9b:
b6:1a:71:8d:92:1d:7b:7d:cf:75:d6:b5:7c:21:d9:c8:ec:c4:
c6:eb:28:60:d4:e3:b2:43:37:e3:7a:63:2e:34:72:2f:da:6c:
6c:71:5b:c6:64:95:f6:65:7c:92:b5:c5:91:5a:37:7b:41:7a:
a7:c1:e0:52:ca:f2:66:a3:44:ac:18:25:5c:7e:91:69:92:fd:
d4:31:8e:e0:53:77:55:00:40:05:e6:bf:ad:42:6c:f2:2d:e8:
cf:59:58:bc:4b:2d:6c:c4:72:05:2d:4f:a0:e6:ce:b0:e6:1f:
29:e3:73:a5:b6:a2:9e:e5:44:a9:d1:d2:25:09:89:c7:2d:e5:
d7:fd:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 07:28:50 2023 by rpki-client on console-fra.rpki-client.org