Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tLAxnMDFEEfDiAX0-pjajSxLvSY.roa
File: tLAxnMDFEEfDiAX0-pjajSxLvSY.roa (raw, json)
Hash identifier: 9olH7twxgM/fpXmQr/hATzo5hC4rBXa2tJLFUdzSYkQ=
Subject key identifier: B4:B0:31:9C:C0:C5:10:47:C3:88:05:F4:FA:98:DA:8D:2C:4B:BD:26
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C8675CA2A41B99615FF508BEB3B3
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tLAxnMDFEEfDiAX0-pjajSxLvSY.roa
Signing time: Mon 02 Jan 2023 05:25:06 +0000
ROA not before: Mon 02 Jan 2023 05:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207156
IP address blocks: 88.220.45.0/24 maxlen: 24
88.220.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c8:67:5c:a2:a4:1b:99:61:5f:f5:08:be:b3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4b0319cc0c51047c38805f4fa98da8d2c4bbd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:df:63:54:be:32:35:ad:ac:94:e0:f3:60:
e1:d9:62:8b:48:73:ca:a4:cc:f3:af:21:d0:02:0b:
bc:a8:27:cc:e9:a5:cf:4a:30:f7:27:e9:65:a2:73:
ac:f0:19:69:93:8b:b9:4b:1b:7f:ca:13:78:78:6f:
24:5c:13:d0:70:a6:d4:57:06:93:3c:93:e2:ab:30:
02:85:dc:b3:0b:4b:bc:2e:93:cf:5a:fe:32:cb:a7:
63:c2:e6:3e:d5:17:7a:4e:b1:8c:ec:09:37:ee:d6:
c5:52:ec:4c:23:98:79:a4:79:94:dc:e1:ec:81:eb:
22:5b:41:55:6e:ec:e5:48:8f:70:0a:01:ee:f6:8a:
8c:3e:a3:84:c2:3e:c9:f6:34:58:ce:81:fd:07:ed:
ab:62:be:46:5f:b0:b9:d3:df:c4:a3:66:93:6a:3f:
89:2f:82:c5:95:f7:e4:99:19:74:6e:98:06:98:58:
69:08:3c:02:ea:91:07:3e:dd:cf:7a:c7:74:18:c8:
bd:4d:1e:12:ab:30:62:3a:7c:39:94:95:ae:81:8a:
1f:b1:1e:5a:db:99:74:f5:b4:09:11:36:cc:51:5d:
b5:b6:2b:c9:e9:15:f5:75:3b:63:30:8c:d1:61:18:
bf:26:f0:93:09:64:7e:a8:cd:f1:b7:46:b4:5e:ab:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:31:9C:C0:C5:10:47:C3:88:05:F4:FA:98:DA:8D:2C:4B:BD:26
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tLAxnMDFEEfDiAX0-pjajSxLvSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.45.0/24
88.220.51.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b2:4e:67:81:bc:35:2c:2f:be:5b:33:c4:0f:9e:28:98:57:
3e:45:c5:21:b7:dc:16:be:37:14:a8:29:6d:df:96:82:1c:2a:
22:dc:b2:5b:bc:4d:f1:18:66:66:71:01:63:62:65:24:3d:10:
28:ea:a0:e2:e8:62:42:54:79:a8:0e:1c:24:eb:df:6f:97:f2:
8a:f9:40:f5:9f:ce:d1:73:34:fb:56:c5:ec:79:bf:92:f9:32:
4a:81:98:7e:22:74:7f:aa:2d:0b:e7:29:4a:05:a5:51:2a:89:
7b:c4:c9:88:4e:98:a0:d3:a3:2c:fa:f2:aa:ad:ed:c4:97:ae:
ba:a4:3d:e8:44:02:a9:66:a5:2a:e7:66:98:2d:db:aa:e8:6c:
a5:73:1e:3c:39:88:c7:21:16:41:28:00:56:a2:20:ca:ca:2c:
3e:4d:d3:5b:08:89:e7:87:4a:87:d6:8e:8d:d2:0c:f4:20:ae:
42:7e:2b:7f:fb:38:5c:c0:8d:a2:b5:fa:06:9c:69:99:43:0f:
02:0c:bc:cc:f4:7b:05:ad:ad:91:d1:75:1d:45:33:9b:df:9e:
e0:41:1d:23:ce:05:7c:8e:dc:68:22:58:94:c0:26:6e:ec:e3:
36:5c:8c:93:90:1f:40:d1:38:f6:7a:dc:dd:ac:29:01:09:0a:
ce:17:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org