Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0_wj_i-9CDBpLItbHQUxOYZ98iU.roa
File: 0_wj_i-9CDBpLItbHQUxOYZ98iU.roa (raw, json)
Hash identifier: G/IBuaRQ42MXIfAlDCto8xj+ezwtRsByNwULsokoJgQ=
Subject key identifier: D3:FC:23:FE:2F:BD:08:30:69:2C:8B:5B:1D:05:31:39:86:7D:F2:25
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7A87860FD5D1AF0CF680E8F22A187
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0_wj_i-9CDBpLItbHQUxOYZ98iU.roa
Signing time: Mon 02 Jan 2023 09:54:45 +0000
ROA not before: Mon 02 Jan 2023 09:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 88.209.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:a8:78:60:fd:5d:1a:f0:cf:68:0e:8f:22:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3fc23fe2fbd0830692c8b5b1d053139867df225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:fe:79:db:b6:a7:95:cb:97:b7:5d:11:4f:
00:e1:90:29:65:12:5f:14:f4:2f:25:ed:b9:9e:ff:
79:a7:03:95:17:6b:83:33:85:4f:b2:eb:3c:39:bd:
32:25:ef:33:4c:f2:43:0d:e2:32:6e:e1:d8:50:eb:
3d:d4:11:d5:76:4c:2e:1d:29:fa:ed:7c:f3:e7:81:
58:3e:82:d8:1f:66:ad:d6:b2:92:43:e6:67:c2:fc:
cb:10:25:6c:2b:bc:12:bd:ea:2f:8f:a4:2a:51:85:
ee:09:e6:12:f2:a7:0f:89:50:6b:9a:f5:00:83:83:
7b:85:cd:f0:0e:b3:0a:79:28:c1:b0:3e:6d:eb:5e:
a8:cd:21:eb:f2:66:18:62:54:aa:19:c5:49:d9:ec:
d0:98:bc:5a:b9:d0:e1:eb:a5:d9:a5:30:b6:80:dc:
9a:67:3d:ad:ed:94:30:b3:54:e4:43:3d:4b:8c:71:
85:ab:21:95:0e:46:a8:0a:02:2a:31:4a:a1:7b:ca:
94:30:c1:a8:f3:3d:d3:8e:c5:58:af:cb:94:5d:34:
ef:0b:40:10:5f:a9:13:50:57:f1:d5:f3:75:c5:f9:
51:72:a0:73:5c:86:f0:29:a7:e6:f9:4d:fb:b0:de:
5c:ee:7e:47:f1:95:6c:e5:9f:35:eb:75:a6:be:fa:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:23:FE:2F:BD:08:30:69:2C:8B:5B:1D:05:31:39:86:7D:F2:25
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0_wj_i-9CDBpLItbHQUxOYZ98iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:21:00:08:07:81:27:fd:78:84:44:cc:9d:62:22:35:bc:02:
a1:3c:71:4f:dd:42:a1:51:b4:80:ef:09:08:ea:e4:06:3a:79:
bd:17:eb:cc:68:05:a6:df:fa:a7:06:0d:5c:60:cb:c3:9c:55:
59:a6:27:dd:4c:f8:cd:58:ee:98:4e:11:10:b5:74:cd:7a:92:
23:5f:06:07:ef:00:d0:b0:88:c6:9a:98:d9:4b:e3:38:c9:9f:
02:87:af:17:49:4a:ff:6f:70:c3:a9:cc:09:c3:f3:fb:8e:b5:
fb:b8:45:3a:2f:a7:ba:ad:56:45:05:ab:59:dd:08:92:2d:75:
f4:68:f0:4a:ed:0c:d4:63:49:d7:5b:6c:54:ee:82:a4:7f:b6:
08:b5:78:ad:b7:a2:a2:2a:eb:f5:bc:dc:19:f3:35:b4:4f:b8:
eb:3d:bf:0f:b0:b8:f3:38:d3:a7:c9:dd:e1:4f:74:73:69:17:
9c:45:21:7e:9a:d8:4b:ec:46:f8:e7:f5:c7:da:08:4e:f4:68:
76:31:2f:30:26:0a:f0:5c:cc:b8:3d:da:ee:e2:49:92:7c:a1:
fc:a7:0d:87:64:11:88:00:af:b5:63:49:8c:37:ea:bc:fd:c5:
5c:c1:e3:3f:45:d2:1c:03:60:29:7b:2e:54:a3:51:18:57:47:
ce:49:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org