Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/ROjMczSWzuyF5izn0RoBrJfBG9Y.roa
File: ROjMczSWzuyF5izn0RoBrJfBG9Y.roa (raw, json)
Hash identifier: ZgWpv/KI0T1nVIXVTSgEJANEV1+KmfDsp3AjWO4flW0=
Subject key identifier: 44:E8:CC:73:34:96:CE:EC:85:E6:2C:E7:D1:1A:01:AC:97:C1:1B:D6
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 018B612C9F5171319BFD7244D4F0D2F9C64A
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/ROjMczSWzuyF5izn0RoBrJfBG9Y.roa
Signing time: Tue 24 Oct 2023 10:13:16 +0000
ROA not before: Tue 24 Oct 2023 10:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212345
IP address blocks: 88.218.115.0/24 maxlen: 24
88.218.113.0/24 maxlen: 24
93.179.90.0/23 maxlen: 24
2a0f:52c1:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:2c:9f:51:71:31:9b:fd:72:44:d4:f0:d2:f9:c6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Oct 24 10:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44e8cc733496ceec85e62ce7d11a01ac97c11bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:6d:16:a2:4a:65:9f:a0:f0:05:1b:30:13:
40:eb:da:eb:d1:e4:ef:22:2a:cb:70:29:78:bf:2b:
07:b3:ef:07:44:99:74:95:2f:07:61:47:f3:fd:9d:
2d:5b:29:a4:cf:39:db:39:d4:ed:71:1d:9a:d9:76:
11:87:f8:e6:af:22:03:19:31:c0:b6:e3:43:c1:0c:
39:b7:a6:12:30:8e:7b:3f:e8:12:58:9a:55:66:86:
1b:32:07:b3:a3:53:45:1d:a8:20:0f:72:c5:1c:43:
d7:0e:9b:c1:d1:73:33:2e:ad:dc:4b:b8:ad:d4:34:
66:06:f6:f2:09:8f:35:3c:aa:fc:a8:78:e8:e3:02:
c3:74:3f:ab:e1:e4:7c:5f:8e:0a:a6:f8:08:9b:d3:
cf:cc:95:4b:4d:ec:65:15:14:3a:9c:a6:9c:74:7d:
93:87:4d:9b:34:a2:fd:1b:a7:c2:f0:44:fd:dd:5b:
f3:16:ea:86:de:6b:e7:a4:f4:54:df:c8:20:99:ce:
ec:94:8a:4f:40:87:57:7c:b6:5f:89:54:68:49:90:
49:97:b8:2c:ed:6b:95:3f:0d:ec:6e:52:7f:77:47:
3d:05:35:47:cb:e3:14:bc:85:cc:3a:4d:75:39:bb:
0a:84:0e:38:80:04:87:66:79:41:8e:e9:8a:9e:90:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:CC:73:34:96:CE:EC:85:E6:2C:E7:D1:1A:01:AC:97:C1:1B:D6
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/ROjMczSWzuyF5izn0RoBrJfBG9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.113.0/24
88.218.115.0/24
93.179.90.0/23
IPv6:
2a0f:52c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
27:30:18:70:ff:18:36:03:48:a5:a8:c0:5c:72:b1:80:6c:36:
eb:39:d6:49:9d:15:b7:d3:b3:42:c6:c9:b2:00:a1:0e:7a:99:
73:fe:05:fa:94:aa:25:0c:1a:e5:b4:f3:ed:76:aa:7b:9f:41:
fc:39:d0:d3:33:23:29:95:08:ce:c5:71:a4:87:2e:36:25:2d:
84:8a:eb:d5:a3:fb:16:82:00:15:74:95:d5:42:f3:34:62:86:
60:ac:bd:b9:2a:8d:6c:d4:5e:43:39:67:94:15:af:e3:b3:88:
36:86:3c:a8:ae:1a:93:a8:83:f9:e8:b7:92:6f:3a:6d:bb:13:
2c:57:36:38:0f:e5:af:65:c1:6e:41:57:4a:a8:34:5d:25:7b:
12:44:c4:be:40:d2:31:d4:1c:b4:dc:82:21:58:7d:ac:3c:ab:
8e:52:05:70:ea:3b:ae:f9:f5:19:ee:8b:8a:6b:59:56:83:65:
f8:71:58:a6:4a:62:cf:c5:60:de:1b:3f:51:41:69:f4:df:ad:
92:31:66:97:f6:71:22:61:0f:06:31:9e:7d:b7:fc:c4:c5:0f:
15:9b:05:6b:f3:bd:59:43:eb:8a:a3:1d:b0:70:ca:51:64:30:
d3:6d:0b:57:74:8a:ae:20:51:d5:4a:c5:ec:89:82:73:d5:4d:
41:b7:d0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:00 2024 by rpki-client on console-ams.rpki-client.org