Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/2nnSA2bONdSu0jtEZ-o11eLo8wU.roa
File: 2nnSA2bONdSu0jtEZ-o11eLo8wU.roa (raw, json)
Hash identifier: 35uQDk2BTLmyAofcecKLt1QQ6vSvo3CIr7KAdLOvxXI=
Subject key identifier: DA:79:D2:03:66:CE:35:D4:AE:D2:3B:44:67:EA:35:D5:E2:E8:F3:05
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14EF428E597329D5B8D03529125A2F
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/2nnSA2bONdSu0jtEZ-o11eLo8wU.roa
Signing time: Sun 01 Jan 2023 20:45:20 +0000
ROA not before: Sun 01 Jan 2023 20:45:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200176
IP address blocks: 88.199.130.0/24 maxlen: 24
88.199.128.0/23 maxlen: 23
88.199.44.0/24 maxlen: 24
88.199.54.0/23 maxlen: 23
88.199.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ef:42:8e:59:73:29:d5:b8:d0:35:29:12:5a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da79d20366ce35d4aed23b4467ea35d5e2e8f305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:fd:7e:04:9c:54:3f:63:33:e8:72:0f:27:
8a:be:13:77:0c:ee:00:af:10:4f:f4:06:b6:bd:a6:
4a:4d:e2:b9:ad:5b:a5:d1:87:d2:4a:8f:8c:7a:41:
3a:9f:0f:3f:23:b7:be:e5:9f:88:53:f5:4c:68:bf:
b3:a5:b5:a2:60:6f:a0:27:46:93:d4:c7:10:b8:87:
38:a5:8c:da:f9:1a:88:46:00:53:28:e5:6a:42:f3:
1b:e1:8a:c9:98:18:74:65:81:30:f8:29:a3:af:e9:
0d:8b:83:20:5b:38:d6:c6:a4:68:0b:d1:4e:c2:e3:
69:5b:59:e3:54:95:8c:ad:20:da:c8:5f:49:e2:c0:
86:b9:7f:62:69:9b:dd:73:31:d6:d6:95:49:4e:0d:
93:e5:12:ec:66:9c:95:9b:34:51:26:f6:af:45:f1:
29:eb:13:55:ea:6a:c2:30:ee:4f:cc:35:ee:93:8b:
e4:f9:04:03:f8:9f:ab:33:88:ab:92:22:41:e3:fd:
57:f9:69:94:e4:41:6b:a6:81:57:f1:64:ac:6f:72:
65:1b:ad:97:5d:95:b0:04:d5:ac:80:ab:1f:ea:98:
52:ae:5c:98:db:67:26:f9:50:6b:88:a8:fb:60:a6:
c6:12:6d:28:d7:83:33:43:da:66:27:10:63:4c:76:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:D2:03:66:CE:35:D4:AE:D2:3B:44:67:EA:35:D5:E2:E8:F3:05
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/2nnSA2bONdSu0jtEZ-o11eLo8wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.44.0/24
88.199.53.0-88.199.55.255
88.199.128.0-88.199.130.255
Signature Algorithm: sha256WithRSAEncryption
4b:9b:2d:97:cb:c6:ce:a4:01:96:78:81:10:f6:7f:fa:a9:8a:
59:4a:3a:fb:f3:8a:c1:62:13:16:1c:9a:12:e6:e7:6b:85:51:
a2:98:c2:60:69:56:6d:ff:57:cb:86:6f:37:34:2f:b0:96:1d:
60:a4:c0:a8:79:65:d6:5c:48:2f:d4:4c:ed:e8:43:42:68:57:
ef:3a:55:0c:57:91:a1:9a:70:64:46:e5:24:70:60:f1:64:01:
d8:ef:e4:37:8f:bb:61:25:3b:c5:90:31:99:bb:02:30:d3:cc:
0e:6f:c2:be:2a:bd:e7:17:53:a9:da:8e:95:9b:aa:bc:ed:91:
75:4d:e7:6a:0e:38:65:5b:e9:03:3b:1b:99:e9:b3:7f:3e:b2:
a4:51:5f:fe:2a:fd:d5:f4:ef:e7:fc:1e:18:24:ff:c8:f1:74:
84:5d:ec:83:0b:f2:88:89:57:c6:ea:e3:c4:99:25:86:e4:02:
de:bb:eb:ee:a7:ee:11:57:b0:3f:d3:f8:c7:51:60:cb:d4:34:
91:22:31:34:85:9c:e6:cb:16:e0:f3:13:0a:85:2a:0f:7d:8b:
81:a9:00:ba:00:c7:70:2a:91:f4:17:ac:01:6b:64:4b:6b:03:
5d:29:a1:92:c9:98:39:29:4e:8a:d8:b3:d6:23:29:2c:2b:e1:
54:2b:f9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:21 2024 by rpki-client on console-fra.rpki-client.org