Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Jz_Z0D8s9QdQfWXdL0xOkK6Klls.roa
File: Jz_Z0D8s9QdQfWXdL0xOkK6Klls.roa (raw, json)
Hash identifier: GaJA2CJlacPA7xcvFpBb8QN0QagKIUgBKLlBKam3zR4=
Subject key identifier: 27:3F:D9:D0:3F:2C:F5:07:50:7D:65:DD:2F:4C:4E:90:AE:8A:96:5B
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01872755863792E7685C16A5C5598CE6358D
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Jz_Z0D8s9QdQfWXdL0xOkK6Klls.roa
Signing time: Tue 28 Mar 2023 08:28:48 +0000
ROA not before: Tue 28 Mar 2023 08:28:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51162
IP address blocks: 88.218.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:55:86:37:92:e7:68:5c:16:a5:c5:59:8c:e6:35:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Mar 28 08:28:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=273fd9d03f2cf507507d65dd2f4c4e90ae8a965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:a4:00:91:0c:e5:be:33:33:dc:21:f1:89:
45:13:4b:0a:31:2d:f5:8b:c2:2f:f4:6a:d9:c4:f4:
91:bc:e1:cf:20:ab:b7:9f:ba:29:e1:ce:62:32:06:
9d:1b:be:98:89:c4:73:68:2c:b5:f5:50:74:6a:50:
fb:9d:10:98:66:3b:2d:46:13:28:8e:01:00:b7:bd:
50:0f:4a:bf:1f:38:4c:d8:2d:62:8a:5a:3b:88:db:
7e:a3:d4:d7:96:63:c3:91:1d:2a:11:64:fc:5e:a6:
ee:b3:ff:51:b1:54:8a:53:f4:cd:0a:8d:2b:b7:90:
50:fb:fc:ad:3c:37:44:6b:78:a8:03:b7:2b:02:43:
5d:06:ef:25:87:c0:81:b4:7a:72:61:f3:4e:d3:1b:
79:bf:a9:f2:ca:0c:56:27:fe:29:b4:af:19:8b:f9:
64:49:44:1b:c2:f0:f6:fc:09:ea:d6:7f:b8:cf:e4:
80:07:27:fc:81:b3:18:16:e9:be:45:fe:4f:d5:1c:
5c:77:f0:44:37:9b:68:1a:08:91:4d:fd:42:33:84:
be:46:4c:29:7a:91:35:1a:5e:de:82:d3:75:28:d2:
d4:9c:54:73:0d:5f:ce:77:ec:62:86:03:fe:f9:ed:
0a:9a:03:7d:10:13:32:46:f5:c6:40:3b:ea:d5:33:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3F:D9:D0:3F:2C:F5:07:50:7D:65:DD:2F:4C:4E:90:AE:8A:96:5B
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Jz_Z0D8s9QdQfWXdL0xOkK6Klls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.250.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a9:11:f6:9e:7d:c2:61:5e:3b:82:fd:fd:dc:da:8d:6b:9b:
77:4a:e8:bd:93:c2:50:59:97:27:f5:e3:0c:8f:1d:9a:8e:e7:
05:4b:46:b5:c4:74:21:30:b4:b2:ae:74:a5:6d:a9:ae:8d:98:
a0:71:fa:e1:99:8e:5f:97:05:d0:8d:72:0d:ee:e1:d9:d7:fd:
36:43:f9:39:51:3c:f4:62:4f:00:be:36:5f:16:ae:4a:c3:2e:
09:d6:97:5f:bb:02:12:8c:94:b0:af:3f:15:64:f1:84:25:bd:
30:59:c8:af:f4:ea:db:67:40:f0:bf:1f:c7:71:69:35:a6:f5:
d7:f4:95:0a:32:44:08:ca:80:12:c5:be:93:97:8c:dc:8b:b1:
26:bc:75:fd:7e:3f:0e:49:82:67:df:67:11:6b:db:f1:07:1b:
ec:e8:8f:61:3d:41:15:13:f2:0b:ef:e4:db:2f:3f:39:d7:1b:
49:7b:f1:f4:3e:84:cc:43:6d:02:df:ce:1d:62:bf:b0:52:c6:
98:f6:9f:a7:0b:a4:cd:71:b3:6b:dc:49:8f:a6:ed:17:ed:4e:
0f:5f:d3:ad:05:44:e1:e6:a0:7b:00:62:a3:18:da:17:f8:f1:
a0:9a:6c:c2:3b:f9:f9:15:93:b2:be:bc:67:ed:91:46:c6:c2:
ef:bc:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org