Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/80faCrOAuN166C2lHAuMUAaBt4g.roa
File: 80faCrOAuN166C2lHAuMUAaBt4g.roa (raw, json)
Hash identifier: KV5ofQMabQUv89E/meu3hMjKPrvATpdlcNDIHb1U/hM=
Subject key identifier: F3:47:DA:0A:B3:80:B8:DD:7A:E8:2D:A5:1C:0B:8C:50:06:81:B7:88
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018B6BFA6D8F02C2D29D70A6DB645FC79BDA
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/80faCrOAuN166C2lHAuMUAaBt4g.roa
Signing time: Thu 26 Oct 2023 12:34:16 +0000
ROA not before: Thu 26 Oct 2023 12:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400402
IP address blocks: 88.214.52.0/24 maxlen: 24
88.214.53.0/24 maxlen: 24
88.214.54.0/24 maxlen: 24
88.214.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 08:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:fa:6d:8f:02:c2:d2:9d:70:a6:db:64:5f:c7:9b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 26 12:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f347da0ab380b8dd7ae82da51c0b8c500681b788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:c1:09:3e:fc:10:10:a9:f5:a1:f4:e7:ff:
69:18:f3:d9:75:0f:90:ef:52:26:60:dc:73:b5:0c:
ed:91:7f:e2:5e:c1:f8:58:92:2d:2c:c4:1b:41:bc:
f4:d6:9d:7b:ac:14:80:aa:c8:d2:cb:b0:59:90:32:
a7:24:13:3c:32:18:ab:e7:1d:92:95:4a:28:3d:0e:
e7:34:8c:50:cb:9c:ae:8e:b8:08:de:b0:f2:73:2e:
97:aa:31:1c:3f:0a:e7:68:d7:6c:24:af:b2:2e:0b:
41:ef:f9:5c:f0:a7:a2:35:bc:b0:11:e0:84:6d:ee:
4b:e4:1b:e6:de:2d:30:15:3c:77:5c:13:9b:d7:0e:
92:50:bc:aa:98:f7:ff:f7:10:6e:48:4e:00:8b:59:
a1:a3:25:fa:ee:98:5e:81:ae:1e:02:21:96:6a:52:
19:ec:b8:2a:7f:d4:77:6e:01:da:86:8f:6a:2f:35:
50:c8:25:2c:ee:ab:9e:97:33:71:70:ec:aa:10:b6:
48:9a:52:9f:3c:6f:eb:b8:03:3b:6d:a6:77:5e:a2:
c2:d3:59:06:f2:ce:b9:5c:2c:ad:7e:7c:53:fd:6a:
c6:18:4e:2c:48:c0:49:13:97:9c:8a:52:cd:39:80:
1c:dc:3b:41:b3:bb:60:af:59:12:6e:92:af:c6:e2:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:DA:0A:B3:80:B8:DD:7A:E8:2D:A5:1C:0B:8C:50:06:81:B7:88
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/80faCrOAuN166C2lHAuMUAaBt4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.52.0/22
Signature Algorithm: sha256WithRSAEncryption
01:1c:af:7b:64:02:54:00:91:2c:3f:db:f7:6e:c7:1b:95:f3:
d3:a8:66:72:c8:82:27:c0:74:68:94:9c:16:1a:06:0a:85:b3:
af:2e:76:3b:0c:2f:58:d0:12:a9:3d:27:38:7a:21:0d:f7:48:
8f:e4:96:f1:eb:35:d1:42:c2:93:31:5f:e8:db:20:45:44:7a:
d1:cd:25:f7:81:f8:80:a5:aa:7f:8b:90:42:68:e6:2d:85:32:
69:6c:6c:64:21:e6:a9:0c:19:75:3a:f9:17:d7:40:e7:f6:54:
77:d0:bc:fb:f6:4a:6d:b9:66:9c:a2:94:d1:ce:a0:8d:60:63:
59:bc:8b:59:87:14:2e:b7:e5:55:4c:8e:74:12:05:ef:c1:d3:
3e:e8:48:b6:79:be:7a:53:be:4c:1d:32:f5:79:c8:8b:e8:07:
70:c6:38:5c:20:68:c1:20:33:34:ed:34:1e:8d:7c:37:f6:41:
3b:43:05:5e:39:70:50:e4:15:6c:67:a0:8d:8b:93:1e:8b:e0:
66:c6:b0:53:07:dd:71:1a:0a:74:31:cc:a0:35:43:5a:25:50:
51:dc:90:e3:e0:21:5e:55:6a:50:fc:88:ea:83:e8:cc:82:5e:
f9:53:38:e0:21:22:c7:be:70:11:e1:35:04:7d:50:ab:a8:8e:
0d:93:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org