Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/TQsCSuOVHQjHzXhPwzH4y8PkMp8.roa
File: TQsCSuOVHQjHzXhPwzH4y8PkMp8.roa (raw, json)
Hash identifier: ao1kuceMGUJ0m+NrY1Uz/MVZuJdPBww/m6KZqgDYZT8=
Subject key identifier: 4D:0B:02:4A:E3:95:1D:08:C7:CD:78:4F:C3:31:F8:CB:C3:E4:32:9F
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 01856FF01DF7C43CB02E1F28D029783D4099
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/TQsCSuOVHQjHzXhPwzH4y8PkMp8.roa
Signing time: Mon 02 Jan 2023 00:44:45 +0000
ROA not before: Mon 02 Jan 2023 00:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210025
IP address blocks: 88.218.206.0/24 maxlen: 24
88.218.204.0/24 maxlen: 24
88.218.205.0/24 maxlen: 24
88.218.207.0/24 maxlen: 24
2a09:b280:ffba::/48 maxlen: 48
2a09:b280:ffb0::/48 maxlen: 48
2a09:b280::/48 maxlen: 48
2a09:b280:ccc0::/48 maxlen: 48
2a09:b280:ffbb::/48 maxlen: 48
2a09:b280:ffbe::/48 maxlen: 48
2a09:b280:ffb9::/48 maxlen: 48
2a09:b280:ffbf::/48 maxlen: 48
2a09:b280:ffb2::/48 maxlen: 48
2a09:b280:ffbd::/48 maxlen: 48
2a09:b280:ccc1::/48 maxlen: 48
2a09:b280:ffb1::/48 maxlen: 48
2a09:b280:ffbc::/48 maxlen: 48
2a09:b280:cccc::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Jun 2023 23:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:1d:f7:c4:3c:b0:2e:1f:28:d0:29:78:3d:40:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jan 2 00:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d0b024ae3951d08c7cd784fc331f8cbc3e4329f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:8c:07:74:00:96:e3:29:d6:d7:4c:e5:b7:
00:4c:d4:55:c5:18:ea:1c:e0:11:4c:e2:a0:68:93:
01:99:7e:94:04:64:60:81:a3:fb:06:14:e3:bb:9c:
7e:d9:4a:7c:2d:f5:75:8c:1e:b8:80:dd:ef:02:42:
38:ba:ef:d2:5b:59:54:6d:32:a0:04:85:a3:a8:d8:
a3:16:13:a7:f1:cb:14:c8:9e:b6:80:38:c2:ab:7d:
a6:98:b0:d8:e4:75:15:85:a4:bb:cd:d7:d6:a1:2b:
24:44:2b:a2:61:f1:db:33:bd:dd:cd:b0:39:d7:40:
f1:d5:ff:85:57:ff:0b:39:81:71:eb:19:c2:8a:5b:
56:67:9c:5d:b0:3b:9b:bd:af:a1:a1:99:13:3c:b3:
5b:46:f9:9f:16:a7:c5:9a:d1:1c:87:1e:49:a9:fe:
9c:db:d5:73:6e:4f:63:f8:f7:f8:25:64:5e:98:cd:
5d:63:f3:74:ac:25:41:2c:b6:d0:d1:e8:0e:8d:7e:
88:3e:45:58:6a:a7:65:80:e7:a9:e6:99:5c:98:35:
65:c5:8a:51:d1:ee:ea:fd:46:8c:f9:1a:41:0b:a2:
ee:1d:1d:6f:51:4f:9a:5b:2c:a0:6e:ad:05:3e:73:
0a:6a:28:01:65:1a:51:2d:89:47:65:1d:a2:c0:f4:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0B:02:4A:E3:95:1D:08:C7:CD:78:4F:C3:31:F8:CB:C3:E4:32:9F
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/TQsCSuOVHQjHzXhPwzH4y8PkMp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.204.0/22
IPv6:
2a09:b280::/48
2a09:b280:ccc0::/47
2a09:b280:cccc::/48
2a09:b280:ffb0::-2a09:b280:ffb2:ffff:ffff:ffff:ffff:ffff
2a09:b280:ffb9::-2a09:b280:ffbf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:fc:e1:0a:29:c9:59:14:e9:74:82:5c:e0:d8:7d:60:b2:16:
f0:ab:b7:66:a3:81:cc:6a:85:a7:53:c8:8f:55:20:83:0c:b5:
aa:f5:20:2a:e2:9c:50:6f:f9:9a:43:c5:2b:5f:ef:45:68:0a:
13:fe:63:c5:99:ff:a0:3c:3f:36:3f:7e:95:9f:26:eb:d3:88:
fe:15:89:a2:f4:4c:ef:53:7e:09:2a:92:cb:e1:9d:03:e2:75:
b4:4e:d9:c0:20:04:8c:78:d3:ad:50:db:d6:85:1d:a9:a1:25:
0a:b2:29:81:eb:0d:a8:34:68:1e:5e:f2:b3:2c:d4:11:10:2e:
a8:bf:c6:0f:91:29:66:39:b4:ca:71:64:10:fa:09:a4:56:b5:
2f:ba:cd:d4:e4:44:bc:6f:d2:9e:b5:e7:be:44:c6:a3:90:e9:
d5:83:17:9d:a9:71:0a:41:ac:2e:1c:ab:ee:ff:c6:2d:9a:23:
66:b7:bd:c3:3b:0c:63:85:2d:c0:6b:0a:a8:1f:75:b5:a9:8a:
83:75:f0:08:25:b0:86:3e:06:ef:7a:20:c3:87:c0:14:02:a9:
06:5e:32:be:c2:79:56:08:2a:17:84:3f:23:8e:f8:b5:c4:b8:
d3:93:eb:a8:93:62:b2:0c:91:47:d4:64:dc:d9:ef:00:f6:2f:
76:a2:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org