Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/CjRI_HLe_UXwLVF8JTmwcflzciA.roa
File: CjRI_HLe_UXwLVF8JTmwcflzciA.roa (raw, json)
Hash identifier: OZuycd0IjTw8arHTYjWjl0kwUD0BNf3VuCkO00HylDU=
Subject key identifier: 0A:34:48:FC:72:DE:FD:45:F0:2D:51:7C:25:39:B0:71:F9:73:72:20
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 018570798220ABE2655DE51643C95055F99B
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/CjRI_HLe_UXwLVF8JTmwcflzciA.roa
Signing time: Mon 02 Jan 2023 03:14:49 +0000
ROA not before: Mon 02 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 88.218.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:82:20:ab:e2:65:5d:e5:16:43:c9:50:55:f9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 2 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a3448fc72defd45f02d517c2539b071f9737220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:14:7d:9d:bc:aa:80:6f:e7:5b:3d:d2:c1:
dc:62:2f:be:ad:f5:3e:b8:e4:a7:93:c6:87:f4:6a:
c9:4c:71:17:70:b2:a9:16:a5:89:84:31:5a:9d:09:
d3:a0:ff:07:c1:2d:27:90:8b:80:2a:7f:f2:7e:66:
63:48:d9:1c:ee:e8:17:12:bd:33:40:7a:81:6c:71:
ab:1d:fe:a9:cd:30:f2:88:cb:71:82:a4:00:c8:6b:
3e:62:2a:4a:a7:70:61:aa:1c:ec:e2:01:4f:39:f4:
03:d0:30:37:c1:a2:5e:83:79:86:bf:5d:94:88:b9:
b6:a1:a9:ed:d2:f8:61:20:1f:5b:6d:1f:ab:f1:eb:
97:6e:dd:0a:5d:49:79:b0:29:27:91:b4:86:df:3d:
39:0e:5d:fe:68:a2:1f:f1:61:7b:98:c4:52:b4:dd:
8d:14:ef:2e:e6:46:46:b7:1e:85:eb:68:60:a2:7e:
e6:a3:c9:d7:d5:32:ab:40:47:2e:67:28:00:d0:cb:
0e:42:24:ba:7e:29:90:db:0f:28:88:f8:c7:a2:b6:
8c:7d:73:4a:e8:11:ff:6d:84:dc:a1:ac:c5:ef:1e:
ad:cb:5f:b8:a0:7e:98:47:69:bf:ed:02:74:08:6e:
72:62:a7:e1:fc:5b:36:e7:9c:fa:fd:12:5c:52:fe:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:34:48:FC:72:DE:FD:45:F0:2D:51:7C:25:39:B0:71:F9:73:72:20
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/CjRI_HLe_UXwLVF8JTmwcflzciA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.17.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:92:6e:18:d7:99:e7:ec:3e:6e:b1:2f:87:58:49:83:33:91:
a8:57:29:4d:8f:c8:96:fd:a1:0f:17:b5:63:d8:a1:b0:78:02:
8c:61:f2:41:f1:eb:7c:b9:10:d6:16:9d:a7:c7:07:0e:43:a9:
9f:72:01:27:af:d4:52:17:c8:92:19:fd:2d:20:90:58:b9:34:
73:53:a3:b5:2e:4e:08:8c:ad:99:c8:9c:8f:01:51:ad:c9:e4:
c3:d1:ec:f0:6e:dd:36:ee:34:df:d0:f9:08:a7:19:75:09:b2:
8b:1f:11:1e:eb:7d:1d:57:d6:c1:94:5c:e4:88:f6:29:5a:02:
a1:32:ae:fc:71:ff:3f:6c:5f:29:91:0a:00:3d:df:1b:74:db:
6f:02:22:c3:0d:a2:f9:f1:59:57:a7:49:85:7d:7b:22:c9:0f:
00:f0:fb:22:ce:81:2d:02:4f:bf:72:1e:6b:84:08:77:ac:b7:
f7:14:20:05:ca:aa:6e:68:5b:26:24:09:2c:0c:a5:c1:24:0b:
6c:ab:d2:44:65:6c:32:80:30:57:6d:4c:9d:2c:48:d9:2a:74:
90:56:7a:b5:8c:4b:c4:f6:c4:db:10:ca:23:cc:b7:cb:3a:9a:
c4:96:f7:f2:c2:36:16:46:17:ba:ec:8b:61:f3:b7:06:c0:10:
c8:66:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:25 2024 by rpki-client on console-ams.rpki-client.org