Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-ty_Tp0F2FD1bMdQABgUZT0fOvU.roa
File: 1-ty_Tp0F2FD1bMdQABgUZT0fOvU.roa (raw, json)
Hash identifier: fSVcOD5PGB5UkIOyXKsT+vTONYi+ZNdC+e+u2C9Z240=
Subject key identifier: FA:DC:BF:4E:9D:05:D8:50:F5:6C:C7:50:00:18:14:65:3D:1F:3A:F5
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01859B8CE08A291A51C13660D85002E5CDCA
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-ty_Tp0F2FD1bMdQABgUZT0fOvU.roa
Signing time: Tue 10 Jan 2023 11:59:39 +0000
ROA not before: Tue 10 Jan 2023 11:59:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202485
IP address blocks: 92.52.217.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:8c:e0:8a:29:1a:51:c1:36:60:d8:50:02:e5:cd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 10 11:59:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fadcbf4e9d05d850f56cc750001814653d1f3af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6d:91:68:6b:cd:ac:a5:da:72:12:e6:5c:8f:
f8:e6:f3:66:0b:a8:21:4d:9c:45:ff:99:92:d5:c4:
42:9e:29:27:af:b0:8b:dd:25:c3:a3:47:c8:a2:2e:
71:6c:c7:b5:0e:bc:e5:11:ee:79:c1:d5:41:0c:05:
ba:e5:50:9e:1a:c0:7e:ff:12:47:71:06:66:70:6d:
01:c4:fd:62:97:0b:3b:17:33:27:af:72:61:6e:b2:
61:67:27:1c:78:3f:a9:3f:56:97:21:f0:67:c0:56:
76:0b:de:4a:5a:5e:04:9f:47:30:c6:b4:97:20:dd:
b2:39:28:8a:4b:62:7d:0b:b1:73:86:ea:4c:23:a5:
8b:c3:4a:8e:7d:01:55:1f:73:2e:0d:2e:29:cb:db:
72:26:3d:7e:a5:ef:99:3b:74:d3:f2:bf:2f:11:15:
4c:76:f3:fd:a3:40:e4:5f:d6:f6:4e:e3:f7:64:8f:
9d:73:8b:28:2c:15:71:98:7d:55:40:f9:94:75:16:
6e:68:cb:25:7f:7a:b6:56:d6:5a:b6:6b:f5:c3:9b:
d9:3a:75:12:cb:cb:f3:fd:3c:cf:31:3e:e2:4f:2a:
96:dd:03:b3:12:d1:4a:9b:be:dd:4c:a0:13:45:b4:
12:4b:80:3e:7d:d9:7e:92:07:41:65:b2:df:4b:ca:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:BF:4E:9D:05:D8:50:F5:6C:C7:50:00:18:14:65:3D:1F:3A:F5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-ty_Tp0F2FD1bMdQABgUZT0fOvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.254.0/24
92.52.217.0/24
Signature Algorithm: sha256WithRSAEncryption
40:90:b9:57:7d:7f:4e:9f:1d:84:80:a7:95:bf:78:8a:6c:61:
78:a5:70:ea:99:82:f6:17:1d:a9:e7:d4:9d:49:e0:29:6c:fc:
2c:6d:a1:c1:ae:3a:4a:cd:71:9c:51:77:6b:3d:61:01:24:0d:
eb:bf:33:7d:99:0e:c3:0a:ce:d6:92:ff:52:73:39:1b:a5:b4:
4b:1d:30:6a:ea:bf:4a:75:bb:1f:92:fd:5a:32:c2:53:8a:c3:
82:8b:4d:a5:57:8e:1b:92:1c:73:9e:e6:92:df:24:9d:f2:63:
0e:ca:20:d3:01:4e:c8:0f:80:db:56:28:92:b6:55:f5:a1:ea:
f1:f4:7a:e1:55:04:f5:47:e3:39:83:6c:22:e6:a6:1b:f0:55:
38:d2:56:86:10:f9:76:e3:67:8a:3a:eb:f8:70:52:b8:f1:47:
de:52:80:81:b6:7e:4f:80:a4:43:b4:4d:40:93:4b:41:b0:f8:
40:ee:b4:06:cf:0f:3c:a8:74:7d:8a:a9:09:9c:1e:c5:b6:03:
a3:bc:03:21:34:40:07:30:e0:17:76:e5:88:54:b3:62:e5:e8:
57:9a:ff:99:0f:91:22:ad:ab:13:21:ba:5e:e7:5c:16:74:c0:
1b:64:00:d0:03:c7:28:ec:4f:83:6a:e9:f0:bc:db:fa:04:8a:
17:fc:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org