Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/WhMfwqVKzl2P7cm2z2BUw6CRinM.roa
File: WhMfwqVKzl2P7cm2z2BUw6CRinM.roa (raw, json)
Hash identifier: /7J+nUsKIuEM/nHalj+ypSdZ0UIqQ3XKeOz2mh+2+4U=
Subject key identifier: 5A:13:1F:C2:A5:4A:CE:5D:8F:ED:C9:B6:CF:60:54:C3:A0:91:8A:73
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01867A90D4C7997178F3DFC4376E611851CE
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/WhMfwqVKzl2P7cm2z2BUw6CRinM.roa
Signing time: Wed 22 Feb 2023 19:19:17 +0000
ROA not before: Wed 22 Feb 2023 19:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 88.218.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:90:d4:c7:99:71:78:f3:df:c4:37:6e:61:18:51:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Feb 22 19:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a131fc2a54ace5d8fedc9b6cf6054c3a0918a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:4d:e3:8c:60:e3:51:0e:ca:53:6e:3c:02:
c6:c7:57:a1:65:02:04:88:37:8e:52:a2:9b:27:00:
34:ca:e9:d2:3b:76:47:78:13:e1:09:b7:6c:fa:f1:
2a:87:b0:2c:e2:ab:3c:ba:cb:bb:bd:46:85:2f:13:
7e:2a:d2:de:3c:81:66:aa:16:4b:eb:93:4a:86:1e:
fc:66:0b:6e:10:44:04:30:49:76:e2:c0:78:95:d8:
5a:52:f4:6f:7d:9d:53:f1:91:74:d5:df:cb:a5:8e:
4b:df:b0:d1:66:f5:39:c7:6d:8a:e2:2d:af:11:f5:
4f:aa:54:16:df:11:b0:51:c7:0d:28:26:de:21:c5:
36:cb:e5:49:82:c4:b4:c9:b7:75:b1:e7:43:62:83:
bb:57:57:45:83:ac:44:ed:f9:ae:6d:71:28:99:e9:
f9:8f:b2:49:6d:c1:ff:19:78:75:f9:b1:d7:61:89:
48:a9:48:d7:97:0d:ae:a5:c8:52:23:70:8a:32:88:
b7:24:7b:4f:18:cf:e3:31:9a:a8:2d:57:20:3e:47:
9b:c7:9b:88:7d:e8:83:aa:fb:00:59:c4:14:8d:36:
c9:89:86:d4:86:ca:b5:8b:92:41:9e:72:2e:bd:de:
b3:2e:a1:88:b3:14:a3:16:95:c4:d7:93:5b:96:e9:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:1F:C2:A5:4A:CE:5D:8F:ED:C9:B6:CF:60:54:C3:A0:91:8A:73
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/WhMfwqVKzl2P7cm2z2BUw6CRinM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.16.0/24
Signature Algorithm: sha256WithRSAEncryption
59:06:95:ed:c6:91:44:0c:78:6d:8a:7d:c3:3b:86:e3:54:4e:
c4:46:00:58:d7:39:87:78:d4:c6:0a:93:f6:4d:77:73:a1:ba:
82:e6:4b:4e:66:ba:3e:e2:b3:6b:4d:63:7f:c2:64:34:f0:b9:
2d:94:f5:83:45:15:11:97:9a:ef:fc:58:cf:51:7b:9b:d9:90:
37:59:34:7c:00:f9:1d:db:57:4b:39:f2:f0:6a:a8:0c:c3:bd:
53:72:05:0f:bb:49:fd:6d:59:4c:1d:d1:9a:4b:be:54:ac:c4:
22:61:92:86:d2:21:45:b8:40:6d:a6:b4:f9:b7:b7:d8:6f:c0:
8b:3f:8a:cb:3f:8d:b5:8a:c4:80:05:53:5a:c5:04:20:fe:c9:
a4:0b:d5:4d:6c:b3:44:06:3a:25:69:d7:96:1d:03:43:5a:8e:
e8:ed:33:b1:f3:6e:24:7b:00:f2:6b:a7:13:46:2e:63:43:8e:
c5:61:e6:0f:c5:d9:a8:3a:e4:00:aa:6a:b0:f9:5c:4a:5f:fe:
57:4d:92:8b:8f:db:5c:59:8b:8f:13:6b:1b:c8:17:df:c8:57:
1a:d5:eb:ea:94:92:b0:28:38:ab:b5:7f:73:bc:8a:4b:1d:fb:
69:41:80:01:74:d9:09:ec:c5:c4:6c:43:b3:47:c8:e6:d3:1b:
6b:1f:6f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 07:09:20 2023 by rpki-client on console-ams.rpki-client.org