Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-oBQ_Zsp022OoaiR8LwrIs88mBw.roa
File: 1-oBQ_Zsp022OoaiR8LwrIs88mBw.roa (raw, json)
Hash identifier: mHYPZnYkx7OzyjP/9Lbzhlt9jLeSpu7Emj2BvtaPAZc=
Subject key identifier: FA:80:50:FD:9B:29:D3:6D:8E:A1:A8:91:F0:BC:2B:22:CF:3C:98:1C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01870E09F78970AF290D7E7AAB9A718354BE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-oBQ_Zsp022OoaiR8LwrIs88mBw.roa
Signing time: Thu 23 Mar 2023 10:35:46 +0000
ROA not before: Thu 23 Mar 2023 10:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 88.209.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:09:f7:89:70:af:29:0d:7e:7a:ab:9a:71:83:54:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 23 10:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa8050fd9b29d36d8ea1a891f0bc2b22cf3c981c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:5b:3f:26:5d:48:a9:8c:05:da:6f:09:ba:
21:e1:69:a2:af:53:c0:85:b3:43:35:11:62:23:fa:
06:c9:20:e6:6f:ff:03:05:d0:21:85:d4:39:de:e3:
84:61:8e:28:8a:a7:04:fa:72:3b:43:8e:1d:2a:66:
c3:9d:65:e9:85:ab:bb:d0:6d:f0:a8:1e:9e:28:c8:
62:0a:ab:59:b3:83:ce:7c:a8:7c:eb:6b:15:4d:1b:
28:be:85:f5:5b:0d:bd:e8:9f:ec:6b:1b:91:34:bc:
ac:93:47:5a:b6:db:51:2e:68:c4:1f:d0:d2:fd:84:
66:ea:81:bf:71:cf:76:c8:4e:de:ba:51:62:78:bb:
6e:74:1c:ee:6f:03:65:64:a1:f7:69:d6:0a:bc:da:
3f:d2:0b:da:f9:4c:54:79:4c:f6:41:8f:82:97:52:
ab:11:e5:3d:79:15:e3:88:05:64:22:2b:ea:c3:3c:
5a:c9:02:e5:93:35:f2:05:a5:31:0a:26:72:9d:7e:
74:3f:0c:96:0b:74:07:77:86:98:74:bd:07:02:21:
31:02:f5:67:44:6b:e8:81:41:da:1d:23:5d:f7:0d:
86:05:ce:64:7f:19:07:bc:c7:d7:6b:f1:41:a8:33:
f1:6e:d8:ff:3a:3d:b2:d2:e2:de:3d:c4:f3:d2:ce:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:50:FD:9B:29:D3:6D:8E:A1:A8:91:F0:BC:2B:22:CF:3C:98:1C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-oBQ_Zsp022OoaiR8LwrIs88mBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ae:ec:0c:7b:e6:23:b7:a4:11:8c:28:1c:7a:f6:14:c3:99:
57:3f:cd:34:7a:d6:72:11:e3:4f:05:c7:63:54:a0:0c:95:04:
9b:9f:ad:47:37:a2:55:9d:37:5b:d5:94:19:b9:e5:ad:3d:54:
18:44:9d:b9:4c:25:4c:b5:6b:30:8e:ae:ef:60:da:24:f8:03:
f0:f5:40:09:ce:1a:ae:81:63:53:b9:b5:b9:11:b3:7e:2b:8c:
dd:37:28:16:ce:4a:22:1c:0f:4b:fa:ee:de:c5:df:78:86:9b:
76:b2:3c:a3:5a:59:09:41:cc:93:b5:63:a9:d2:a5:6a:0f:73:
2b:07:e6:f3:23:d4:5c:cf:d4:1a:03:45:a9:c2:9a:99:b9:b4:
c8:e4:75:4a:b7:1e:51:f9:b7:6a:ed:42:1e:6e:af:f3:6c:9f:
d2:92:aa:7e:26:b5:e9:b4:5f:40:76:04:67:09:ec:81:88:ef:
d5:be:c0:50:85:8f:14:3a:7f:03:17:c0:59:23:17:bf:80:7b:
00:35:71:d6:b6:2e:51:56:2e:10:8f:12:88:37:ed:be:14:c9:
5b:fa:49:50:48:09:81:60:a2:02:0a:35:c6:04:e8:57:bb:70:
ab:68:ff:d2:ae:03:e9:46:2d:5c:61:49:5a:9c:94:2c:fe:10:
03:68:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org