Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/zH5DfmkbRTzwprdWq8R8KeKCFus.roa
File: zH5DfmkbRTzwprdWq8R8KeKCFus.roa (raw, json)
Hash identifier: th0DFHj90v/ZmtJqCLXM6+091o1LloKhn48afAWbAc4=
Subject key identifier: CC:7E:43:7E:69:1B:45:3C:F0:A6:B7:56:AB:C4:7C:29:E2:82:16:EB
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 01856EAFEBD249E7220042ADAFCB499C70E0
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/zH5DfmkbRTzwprdWq8R8KeKCFus.roa
Signing time: Sun 01 Jan 2023 18:55:01 +0000
ROA not before: Sun 01 Jan 2023 18:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 88.214.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:eb:d2:49:e7:22:00:42:ad:af:cb:49:9c:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Jan 1 18:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc7e437e691b453cf0a6b756abc47c29e28216eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:02:f0:10:3a:f0:43:37:05:a1:42:cf:16:
a8:c2:ca:38:c3:76:9d:92:50:c5:23:34:32:c2:52:
92:0b:d1:6d:07:12:43:bb:13:75:1e:61:80:af:b9:
bb:ae:d0:f6:f3:c7:31:43:64:01:dd:37:5c:57:29:
85:6a:01:63:d4:f9:22:11:c5:b5:b0:b8:b3:86:1c:
82:df:94:95:1a:5c:70:fe:dc:73:54:79:c3:bf:c7:
8e:26:a2:26:a2:96:d3:19:4e:57:39:76:96:cb:88:
8a:d9:b9:3c:33:62:c9:ce:01:d3:35:d6:c4:cf:b6:
50:f6:9d:3e:31:2f:98:91:b4:1b:1b:24:1f:d2:13:
3a:dd:43:6e:9a:30:2c:d7:a5:f5:53:73:cd:8f:75:
f6:44:10:cc:0f:8b:09:9b:02:dc:10:eb:56:94:e8:
7c:80:16:40:c5:ca:88:1d:92:68:47:51:ac:78:fe:
b0:69:2e:12:1b:3b:07:34:c1:8f:7c:41:d7:43:ac:
88:35:6b:f6:e5:e0:47:16:23:fb:8e:cd:97:be:68:
c2:d7:ea:18:8a:4d:5c:63:2a:0b:03:7d:8d:da:91:
31:7d:c7:3c:c3:d6:9e:98:a0:a0:5d:91:d8:db:bd:
1f:35:83:5a:34:a2:9b:57:a9:9c:3d:db:ea:64:3e:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7E:43:7E:69:1B:45:3C:F0:A6:B7:56:AB:C4:7C:29:E2:82:16:EB
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/zH5DfmkbRTzwprdWq8R8KeKCFus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.43.0/24
Signature Algorithm: sha256WithRSAEncryption
26:01:69:fe:e8:8d:ea:17:8e:db:96:c4:6d:20:9e:75:c3:4b:
ce:5e:6c:a5:f8:c0:c5:d3:bc:fd:11:a3:aa:0b:2d:d7:a7:12:
15:ea:ea:59:f7:02:c3:b9:96:26:0e:e9:8b:14:73:74:04:4b:
3d:bd:fb:e8:fb:f1:78:95:4d:5e:51:69:ae:24:29:4c:7e:27:
9c:9c:3a:d1:10:30:f6:90:63:96:6a:2e:3a:db:4e:03:8c:76:
0f:5e:ce:5f:ce:d7:ba:fc:89:a5:cb:54:44:7f:54:e1:52:7a:
75:ec:8e:76:6c:de:f0:9e:0b:a1:21:52:b3:0c:44:69:50:eb:
25:af:26:6e:65:7e:68:d2:97:89:af:18:39:e9:db:f2:b0:33:
4c:31:93:96:34:bd:4f:a1:30:e9:90:fb:20:7d:31:aa:23:9a:
c3:42:b5:bb:71:68:fa:34:eb:d6:34:f5:73:64:0e:e3:d5:22:
54:6d:a9:56:7d:4d:43:f4:8c:bf:d2:f8:4f:c4:fe:69:e6:83:
48:be:6e:1c:54:ca:54:ea:84:6c:4a:aa:63:99:92:22:41:8d:
8f:1c:eb:03:dd:9f:5d:4f:8a:55:d3:de:90:2b:16:0e:1d:fd:
f9:17:f5:03:f1:97:ba:f1:dd:9d:0d:f0:90:c6:28:c7:3b:81:
12:62:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org