Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/TscwzvZEZGPTtTjybv5VybnoJBs.roa
File: TscwzvZEZGPTtTjybv5VybnoJBs.roa (raw, json)
Hash identifier: BBlJNQJyJ8NdM1hM7OQ3UI9MMUREDLchjClLfPXAQzk=
Subject key identifier: 4E:C7:30:CE:F6:44:64:63:D3:B5:38:F2:6E:FE:55:C9:B9:E8:24:1B
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14E9B8A9E2B901D4649EE657F45412
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/TscwzvZEZGPTtTjybv5VybnoJBs.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42923
IP address blocks: 88.199.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e9:b8:a9:e2:b9:01:d4:64:9e:e6:57:f4:54:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ec730cef6446463d3b538f26efe55c9b9e8241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:01:05:e7:cf:e5:f1:76:26:82:09:3f:0e:
fc:2c:d6:a1:82:db:23:83:ad:76:8b:b7:7d:88:b3:
12:46:a4:a4:74:d5:ba:e3:59:03:db:4a:c4:ee:55:
d7:86:0d:f6:36:ed:19:8a:1a:ea:c6:ff:fe:a8:31:
d3:ce:84:4b:ae:cd:9e:1c:b8:37:db:e9:d4:87:41:
c3:7a:c7:14:34:c8:7b:3b:a4:3f:5c:50:e7:04:cf:
4b:01:18:5e:4b:ba:e6:28:09:8d:4a:37:56:6f:e6:
74:cd:f4:16:92:8d:b2:9a:2d:32:85:49:e8:8c:69:
a4:98:70:13:fa:d5:2a:29:33:7f:63:98:c4:b2:98:
9b:c1:7b:b1:36:e8:09:2b:a2:bc:a1:a4:9a:99:bc:
e4:b7:2d:fa:9d:92:c1:c4:b3:5a:3c:a3:13:f7:9f:
91:45:99:cd:8c:95:f4:02:f6:f0:e1:81:92:23:ac:
00:53:34:f9:fc:bd:73:f3:80:d6:ca:c6:77:20:e1:
17:2e:d6:5e:d2:eb:70:04:cf:b3:32:b2:ce:e1:9f:
22:e0:fa:56:97:e7:7a:93:67:0b:de:59:b2:11:c2:
08:2a:0e:78:eb:fa:4d:a3:85:d4:9e:09:7a:71:2c:
ee:0f:27:82:c1:9a:a2:7c:a7:4b:77:b9:01:25:28:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:30:CE:F6:44:64:63:D3:B5:38:F2:6E:FE:55:C9:B9:E8:24:1B
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/TscwzvZEZGPTtTjybv5VybnoJBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.162.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d3:35:36:5b:6a:fd:df:f3:c1:1e:c4:6f:7e:61:39:0d:e2:
91:3b:b9:5a:1a:90:e8:a2:45:80:e9:b4:6f:9a:40:f9:f3:94:
b1:07:2d:13:28:8b:57:e9:1d:2e:bd:f2:8e:a0:94:84:ef:8a:
ab:88:8c:8d:5c:65:1c:3f:8e:7e:43:9d:06:22:32:5a:76:ec:
fa:b8:81:1a:51:5b:e0:3a:ef:72:ef:fb:b5:a6:14:c2:a7:8c:
10:f7:e9:a9:03:ed:c3:ab:91:d9:41:3e:e4:f9:29:cc:2e:18:
ef:fd:04:9c:54:1a:36:bd:7a:2a:33:c1:a8:70:54:1f:83:a5:
25:0b:f6:5a:f9:e6:cc:f5:87:94:8a:62:12:d6:e7:98:ce:ae:
b6:77:43:17:6c:e2:74:96:64:5c:c7:5c:03:f1:55:45:33:fb:
e4:6b:19:92:a0:20:e7:a6:d6:5d:5c:60:19:39:25:e5:0a:99:
86:18:56:7b:78:4b:03:d3:3a:a5:b2:7f:7f:dd:01:04:bd:46:
64:fc:8d:1e:bc:05:ed:46:70:17:bb:e3:2f:58:33:ed:48:2c:
43:90:2a:e1:aa:2e:18:8b:ab:9a:fc:a7:12:8f:70:7d:b4:c8:
65:42:b4:c7:5a:5a:01:00:1a:60:05:64:05:71:c6:7d:35:30:
95:02:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:21 2024 by rpki-client on console-fra.rpki-client.org