Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/Mb9QaaVOM45V_UXMEavs6KF2wrQ.roa
File: Mb9QaaVOM45V_UXMEavs6KF2wrQ.roa (raw, json)
Hash identifier: XZnfaAQcdvtJPTiuaLlAoYIJIfJnnNiC+oK4Pi2i0v8=
Subject key identifier: 31:BF:50:69:A5:4E:33:8E:55:FD:45:CC:11:AB:EC:E8:A1:76:C2:B4
Certificate issuer: /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial: 01856D81867EC4C7D50CE666FD367576FCD5
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/Mb9QaaVOM45V_UXMEavs6KF2wrQ.roa
Signing time: Sun 01 Jan 2023 13:24:43 +0000
ROA not before: Sun 01 Jan 2023 13:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209685
IP address blocks: 88.218.140.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:86:7e:c4:c7:d5:0c:e6:66:fd:36:75:76:fc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Validity
Not Before: Jan 1 13:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31bf5069a54e338e55fd45cc11abece8a176c2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:a7:84:2e:a7:b1:fa:c0:91:72:01:37:ca:
ee:91:3c:ca:d0:b3:18:1c:13:21:12:fa:31:13:fc:
4b:1c:2c:8f:17:73:78:d8:40:8f:19:72:15:b5:25:
97:d3:4f:ef:09:98:f2:e0:78:b9:27:dd:c3:94:17:
08:c8:70:fc:e0:6a:13:55:4f:83:8c:a2:62:19:c5:
9c:66:67:3d:50:c0:21:9a:cb:5e:3c:41:3a:c0:77:
40:b1:9e:87:c8:a5:62:2b:5a:6b:07:db:54:80:5b:
f2:a1:cd:90:eb:a4:f4:34:27:99:d6:c6:36:26:31:
4d:39:b0:d3:fc:7e:e3:b0:f2:a2:84:22:18:c1:a7:
36:d7:0e:a0:f9:51:7e:0e:16:92:fb:de:00:6d:09:
e9:34:21:08:82:d1:09:d4:be:68:43:9e:82:97:0e:
2a:a1:03:2b:6d:b1:3d:14:34:28:a3:fb:df:a8:e4:
a4:a5:d9:cd:47:ef:83:ee:0b:73:f2:dc:11:d4:62:
84:34:76:82:24:aa:66:c4:72:0f:ff:3f:40:72:31:
10:40:19:26:ca:27:ce:0d:77:2e:0a:bb:05:e4:6a:
37:b1:0f:ba:62:30:66:0a:05:9b:09:b6:f3:08:2c:
24:63:32:d4:b2:d5:4a:38:3b:c2:3f:4c:47:d6:f6:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BF:50:69:A5:4E:33:8E:55:FD:45:CC:11:AB:EC:E8:A1:76:C2:B4
X509v3 Authority Key Identifier:
keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/Mb9QaaVOM45V_UXMEavs6KF2wrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.140.0/22
Signature Algorithm: sha256WithRSAEncryption
46:b2:69:31:d7:93:8c:3b:5f:a1:0d:d0:7e:32:1a:2a:f6:99:
0a:23:d9:ab:ac:32:ae:ca:aa:33:f5:cb:98:c7:a4:0b:b2:b8:
06:5b:b8:f9:7a:63:57:2b:8b:e2:c4:17:3d:05:c6:a5:65:1c:
4a:45:c2:52:83:fa:59:c4:7f:f8:da:b9:1c:34:76:76:59:b7:
eb:15:92:de:a8:31:ff:27:4f:45:ab:ad:a8:17:74:6c:f2:c7:
3d:61:ef:cd:f8:8a:43:08:01:f3:66:3f:85:6b:ee:20:76:c4:
99:2c:56:a6:f8:22:f2:7f:42:39:23:23:47:da:a7:d5:25:35:
9d:12:91:fa:d8:52:fe:53:15:e2:a2:0e:0c:1b:33:3e:aa:f3:
60:70:1a:3c:4b:ef:b6:d8:1c:9f:b3:7d:44:e7:7f:ae:a6:0c:
71:85:57:d4:91:28:ec:03:41:a4:a7:d5:55:e2:dd:f8:50:a7:
42:10:c2:dc:4b:e9:22:f3:64:c4:a5:7b:9e:53:e0:fd:3d:48:
80:c5:dc:ca:ad:4b:1f:f3:26:6a:00:07:fe:02:76:5c:77:59:
68:54:59:0b:c9:67:e5:e9:72:8b:76:70:37:50:56:e6:85:f8:
91:91:36:c0:b4:af:26:7b:d3:8e:0d:70:89:a0:a8:13:5a:92:
88:e4:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:19 2024 by rpki-client on console-ams.rpki-client.org