Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/f9lL16LVLUzI81V5EohmPuwXr5g.roa
File: f9lL16LVLUzI81V5EohmPuwXr5g.roa (raw, json)
Hash identifier: d107LHLwm1VwgI5daBAphOVS6l/AMc0XDD5Is6WbJWs=
Subject key identifier: 7F:D9:4B:D7:A2:D5:2D:4C:C8:F3:55:79:12:88:66:3E:EC:17:AF:98
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0BC1C495A4175C18957DF3AC6C3E9
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/f9lL16LVLUzI81V5EohmPuwXr5g.roa
Signing time: Mon 02 Jan 2023 05:25:03 +0000
ROA not before: Mon 02 Jan 2023 05:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201113
IP address blocks: 195.136.162.0/23 maxlen: 23
88.220.154.0/24 maxlen: 24
88.220.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:bc:1c:49:5a:41:75:c1:89:57:df:3a:c6:c3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fd94bd7a2d52d4cc8f355791288663eec17af98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:73:5d:70:e5:42:10:ad:d4:83:c9:5d:4a:c5:
ad:a1:05:3d:25:1b:1d:2d:1c:a4:bf:c7:af:8f:0b:
d4:44:6f:52:d2:e4:aa:bb:73:0b:23:6a:47:f4:e2:
f8:7d:7b:76:87:f4:b0:ec:7f:3e:a4:20:01:47:7d:
9e:02:08:4e:d4:53:15:dd:1c:5e:0d:de:aa:7e:69:
2e:39:9c:b0:22:25:b2:ef:26:b8:cb:8b:c0:b6:b6:
51:de:88:d9:76:73:7a:db:f2:26:c4:19:02:7f:42:
ac:18:70:d8:2b:97:10:8d:1e:97:d0:e2:bb:d3:15:
10:b0:e1:c3:1c:9a:d2:37:73:35:64:a5:74:d8:e0:
1c:4e:e3:68:a2:c9:14:0b:d4:24:8f:1f:2b:a9:4a:
d3:cf:51:80:f8:ea:4e:3f:27:53:9b:e8:86:78:c7:
e8:24:bc:a7:29:3a:0c:71:8e:bc:6a:fc:19:ae:af:
13:81:9b:2b:61:b3:9c:6e:d7:91:c5:69:8d:a0:2c:
1a:86:5e:ac:75:9a:f7:7e:b6:84:b8:46:d3:7b:f0:
af:35:1e:84:22:dc:92:a7:c0:75:99:a9:70:61:5e:
8e:10:22:69:ca:73:7e:1b:59:57:2f:ef:7c:5d:1a:
6d:16:c3:7a:23:70:63:13:df:6b:91:ba:b7:81:4a:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:4B:D7:A2:D5:2D:4C:C8:F3:55:79:12:88:66:3E:EC:17:AF:98
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/f9lL16LVLUzI81V5EohmPuwXr5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.154.0/24
88.220.167.0/24
195.136.162.0/23
Signature Algorithm: sha256WithRSAEncryption
49:47:88:2c:d7:fd:58:b8:3e:2b:eb:9b:21:bf:c1:51:8a:24:
c7:50:3c:3f:69:53:f6:5f:74:da:17:33:56:b7:0d:df:cc:c8:
8d:2b:e8:1f:88:ca:bf:96:5e:6d:60:e7:16:1f:ab:2c:41:a8:
1d:a9:88:5f:26:80:b5:75:ad:5a:08:a7:16:c8:98:da:94:d5:
d7:96:94:e4:a8:8b:a5:25:80:09:90:92:1f:0a:6b:d4:93:a9:
c9:87:3f:fd:55:99:75:13:54:e0:c8:09:80:1a:ca:e0:03:fa:
b3:95:de:d7:8a:22:34:03:4c:5f:37:d4:22:31:f7:d5:f6:8b:
04:d9:0d:2f:e9:9e:36:53:f6:ba:6d:41:a0:05:c5:30:2c:27:
99:02:4b:19:82:73:40:29:0b:a4:49:ca:83:6d:07:ca:fc:d2:
61:15:a0:5f:47:31:b3:3d:d5:e9:2a:33:ca:3c:77:fa:68:26:
5e:5c:5a:d5:4f:1f:2e:fc:50:94:fe:5e:a1:b2:12:4b:d1:df:
18:02:a4:c9:07:fc:96:51:37:ed:4a:ef:e6:05:47:8c:56:cc:
0e:00:fe:21:64:4e:1a:27:91:1c:0e:2b:7d:7b:2f:d9:a1:6a:
62:03:ca:6a:22:5e:99:5d:1f:76:78:2f:42:a0:78:f9:e8:bd:
ec:c4:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org