Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xk6kGJVbKlrEHdFmWJbKkQ3m9rY.roa
File: xk6kGJVbKlrEHdFmWJbKkQ3m9rY.roa (raw, json)
Hash identifier: Q1wES3jSewZgRBkBJVEValTaH0qINN94UL2UTJ+h9hE=
Subject key identifier: C6:4E:A4:18:95:5B:2A:5A:C4:1D:D1:66:58:96:CA:91:0D:E6:F6:B6
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA26FFE73D7A6350946A08A0414468C4
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xk6kGJVbKlrEHdFmWJbKkQ3m9rY.roa
Signing time: Fri 10 Nov 2023 16:53:19 +0000
ROA not before: Fri 10 Nov 2023 16:53:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 88.151.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:26:ff:e7:3d:7a:63:50:94:6a:08:a0:41:44:68:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:53:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c64ea418955b2a5ac41dd1665896ca910de6f6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:16:ff:b7:5a:92:d9:86:c3:85:fd:1d:41:
8e:4c:f3:a1:9d:d2:db:b2:97:a2:a8:1d:10:6c:05:
c1:4e:0f:6e:8f:2a:d0:0b:a1:09:69:20:2f:ba:cb:
b1:5a:3f:87:fe:a0:b5:36:e0:f2:36:e0:bf:b9:a0:
95:75:d7:3b:fd:9e:91:71:37:a5:84:06:24:5a:6b:
d0:54:a8:86:e9:ad:e6:b7:12:76:d4:7a:9b:0e:33:
58:6c:7b:39:93:85:b2:bd:6e:49:40:70:70:6f:58:
ab:0b:31:59:c0:18:ae:b7:c5:0f:be:19:16:51:e0:
9b:4c:49:e8:89:9d:a6:6c:c3:47:ae:bb:fb:ab:fa:
58:78:ff:a6:26:6d:ce:ed:03:17:20:44:fe:1d:51:
cb:6f:36:7f:18:08:04:6f:1c:9d:ae:96:8e:6b:39:
c5:e9:8c:fd:a8:3d:75:f7:0f:90:03:6f:04:20:3b:
d4:73:dc:4f:73:3e:12:91:8c:9c:b5:e7:55:f9:a2:
d6:2f:b3:4e:fa:fb:f9:ce:4d:6b:fa:8b:59:1d:8c:
de:11:ec:a7:d0:c1:c5:55:c1:4e:44:6c:de:64:2a:
92:08:2b:3b:7f:15:94:f6:3d:a2:de:d8:6d:48:3a:
3a:89:ae:b1:3d:d9:09:98:01:ac:7a:7d:fd:79:78:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:A4:18:95:5B:2A:5A:C4:1D:D1:66:58:96:CA:91:0D:E6:F6:B6
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xk6kGJVbKlrEHdFmWJbKkQ3m9rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.10.0/24
Signature Algorithm: sha256WithRSAEncryption
84:af:55:2d:45:38:2d:9f:44:c9:b3:ca:7b:ec:02:a9:47:ec:
27:50:60:8a:62:db:28:64:76:42:3c:03:02:ce:fa:ee:b5:14:
fe:12:d8:50:f3:c8:8d:6e:c6:59:3d:18:04:96:f8:5d:52:73:
4d:23:87:a3:38:a7:65:de:c9:47:a5:e8:a6:2d:4b:14:ff:f4:
0f:b5:76:99:2b:f6:c7:41:25:1d:83:c3:53:04:b2:02:97:e4:
23:26:0b:f3:a2:37:a5:69:d0:5d:12:59:9b:ac:37:ce:aa:e5:
45:7e:98:04:95:3f:ee:02:0b:bd:45:ba:5b:95:98:ef:2f:75:
8a:bf:7a:ed:0a:c2:21:9e:f8:13:11:71:34:fe:4e:9e:f0:19:
49:68:e5:71:35:d9:95:14:db:74:36:45:0d:a7:44:46:da:bf:
ad:b7:d9:14:ed:66:10:94:a1:36:e9:e7:b1:10:81:04:85:0c:
79:fc:ff:40:4f:c6:f2:80:1b:13:73:fe:0a:a4:29:00:f9:4a:
9d:f9:85:71:d9:95:10:d0:3e:15:7a:61:28:ed:ab:e4:e9:56:
4a:53:d6:db:19:59:b4:1f:dd:1a:d5:5b:6a:fe:ac:ea:26:e1:
06:70:1f:6d:28:83:70:a5:26:4f:e8:3c:6d:84:3c:ad:a5:88:
d9:fd:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org