Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/eXD26n-kGQFyKjR4BCzhOoM5ClA.roa
File: eXD26n-kGQFyKjR4BCzhOoM5ClA.roa (raw, json)
Hash identifier: j6ETG2FOzKyZUJMEh1i+t+/TZRd21NiMiUmYrPvV/gI=
Subject key identifier: 79:70:F6:EA:7F:A4:19:01:72:2A:34:78:04:2C:E1:3A:83:39:0A:50
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BB34E55A81F69DAD4DA6F8AFC47BF48E0
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/eXD26n-kGQFyKjR4BCzhOoM5ClA.roa
Signing time: Thu 09 Nov 2023 08:58:57 +0000
ROA not before: Thu 09 Nov 2023 08:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400402
IP address blocks: 88.214.52.0/24 maxlen: 24
88.214.53.0/24 maxlen: 24
88.214.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:4e:55:a8:1f:69:da:d4:da:6f:8a:fc:47:bf:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 9 08:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7970f6ea7fa41901722a3478042ce13a83390a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:4e:49:75:fc:ac:8b:e8:aa:aa:da:5a:37:
c8:3a:8b:16:b1:52:87:bd:bc:bc:47:67:9a:f1:02:
c0:90:ff:69:f0:3a:fd:99:d9:95:32:9b:63:f1:47:
10:67:4f:65:d9:ee:6a:15:1c:19:33:77:b3:8c:5a:
92:d8:e7:2a:2c:9a:97:0c:30:d6:32:45:97:4d:d5:
85:d8:fc:f4:10:c3:ac:71:0f:58:90:f8:26:72:5d:
f8:9a:f2:40:07:5f:da:1c:e8:dd:c0:84:93:01:ae:
6e:52:d2:0b:d9:d7:47:d8:8c:2b:00:b8:f4:c2:33:
6f:09:da:72:c3:e9:9e:fc:e5:8b:a2:61:a8:50:4e:
80:1b:f7:1c:24:b3:2d:85:5b:41:9c:b8:4a:b1:4b:
bd:72:be:d4:d5:76:73:bf:39:15:50:ad:2c:4c:00:
b4:28:37:a5:31:5a:ce:c8:17:53:71:f8:6b:59:2d:
6e:45:7d:ba:27:6c:b3:a9:70:54:51:76:42:da:e0:
17:32:00:79:cf:c7:cb:95:27:ee:ea:7b:f1:ba:cb:
0e:76:66:35:fe:07:f9:c2:f6:70:2d:ea:cc:7b:47:
7c:a8:80:7c:29:b6:16:83:65:88:90:98:9c:66:c8:
41:72:c0:da:7f:ee:a8:23:e9:e7:1d:4c:30:00:ca:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:F6:EA:7F:A4:19:01:72:2A:34:78:04:2C:E1:3A:83:39:0A:50
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/eXD26n-kGQFyKjR4BCzhOoM5ClA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.52.0-88.214.54.255
Signature Algorithm: sha256WithRSAEncryption
2f:88:8a:49:c4:3f:7e:d4:de:75:d0:bd:dd:ee:06:91:5b:49:
df:be:e3:88:80:ed:e8:84:52:3d:28:43:cc:91:31:d4:7e:d3:
66:68:39:d7:5b:40:f0:84:d1:90:15:00:ce:ff:16:c8:37:25:
d8:38:00:5a:8d:07:da:d7:e0:a5:dd:1a:3d:18:74:01:d8:f3:
83:45:76:96:f4:95:b5:fd:79:ed:f0:86:59:f6:af:c7:82:9b:
87:70:9b:5f:cf:9a:77:0a:49:fc:c4:8b:f4:d2:e8:94:a6:35:
6b:c1:99:81:a5:43:f0:76:16:b4:b0:48:27:3f:fc:8c:54:00:
0a:6a:2d:b5:fa:44:11:86:46:ce:54:9e:e8:0f:4f:b1:90:71:
1e:77:79:c1:53:b6:6f:9d:92:45:09:a2:68:cb:2f:a8:da:f6:
34:0a:0c:a6:04:07:ca:05:f7:3b:63:39:57:4d:36:bc:63:b3:
07:78:c2:36:30:8f:b1:df:c1:68:40:cd:de:5c:93:76:92:e5:
4b:f6:b1:77:3a:83:d7:f4:86:3c:56:d3:4c:5c:78:b6:81:12:
0a:f9:0f:cc:4a:1e:4e:4c:93:9c:16:37:91:aa:64:59:ac:cd:
1f:20:48:60:e2:e9:d7:cf:52:75:17:e0:97:ac:15:64:eb:56:
8b:57:f5:c2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYuzTlWoH2na1NpvivxHv0jgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjMxMTA5MDg1ODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTcwZjZlYTdmYTQxOTAxNzIyYTM0NzgwNDJjZTEzYTgzMzkwYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuixOSXX8rIvoqqraWjfIOosWsVKH
vby8R2ea8QLAkP9p8Dr9mdmVMptj8UcQZ09l2e5qFRwZM3ezjFqS2OcqLJqXDDDW
MkWXTdWF2Pz0EMOscQ9YkPgmcl34mvJAB1/aHOjdwISTAa5uUtIL2ddH2IwrALj0
wjNvCdpyw+me/OWLomGoUE6AG/ccJLMthVtBnLhKsUu9cr7U1XZzvzkVUK0sTAC0
KDelMVrOyBdTcfhrWS1uRX26J2yzqXBUUXZC2uAXMgB5z8fLlSfu6nvxussOdmY1
/gf5wvZwLerMe0d8qIB8KbYWg2WIkJicZshBcsDaf+6oI+nnHUwwAMpf9QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHlw9up/pBkBcio0eAQs4TqDOQpQMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvZVhEMjZuLWtHUUZ5S2pSNEJDemhPb001Q2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJY1jQD
BABY1jYwDQYJKoZIhvcNAQELBQADggEBAC+IiknEP37U3nXQvd3uBpFbSd++44iA
7eiEUj0oQ8yRMdR+02ZoOddbQPCE0ZAVAM7/Fsg3Jdg4AFqNB9rX4KXdGj0YdAHY
84NFdpb0lbX9ee3whln2r8eCm4dwm1/PmncKSfzEi/TS6JSmNWvBmYGlQ/B2FrSw
SCc//IxUAApqLbX6RBGGRs5UnugPT7GQcR53ecFTtm+dkkUJomjLL6ja9jQKDKYE
B8oF9ztjOVdNNrxjswd4wjYwj7HfwWhAzd5ck3aS5Uv2sXc6g9f0hjxW00xceLaB
Egr5D8xKHk5Mk5wWN5GqZFmszR8gSGDi6dfPUnUX4JesFWTrVotX9cI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org