Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1N-XvsLWI16H-4G-MRW2KVMks6s.roa
File: 1N-XvsLWI16H-4G-MRW2KVMks6s.roa (raw, json)
Hash identifier: z2TDJ63XOfSmYHyY18fBemRLsSNdIJnlu/2umwAG03o=
Subject key identifier: D4:DF:97:BE:C2:D6:23:5E:87:FB:81:BE:31:15:B6:29:53:24:B3:AB
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0186BAFCE2C542311589195AB566F3F1B7EE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1N-XvsLWI16H-4G-MRW2KVMks6s.roa
Signing time: Tue 07 Mar 2023 07:33:00 +0000
ROA not before: Tue 07 Mar 2023 07:33:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 88.209.192.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 15:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:fc:e2:c5:42:31:15:89:19:5a:b5:66:f3:f1:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 7 07:33:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4df97bec2d6235e87fb81be3115b6295324b3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:14:92:d5:70:68:4a:b0:19:26:4a:aa:38:
7b:9b:f6:35:8f:06:83:fb:f7:79:14:5f:e7:75:97:
07:56:96:3f:7c:c7:da:dd:c9:87:21:57:7c:28:20:
f4:f0:92:0f:e2:5a:19:f6:73:d9:e6:58:bc:72:be:
92:e3:e2:70:f7:bf:2f:35:91:57:9e:b9:a7:aa:ba:
b8:77:14:42:6a:b0:5f:c5:fc:5f:d6:12:ff:5f:30:
0d:9b:0b:a1:93:a6:ae:c7:7b:61:c6:51:bf:bf:53:
b3:29:ca:6e:8e:2c:76:69:cd:25:58:87:bd:60:14:
41:e6:77:55:46:f2:09:54:c4:ce:52:2b:d4:69:64:
75:84:ea:e9:be:5c:ca:57:d5:4e:3b:47:18:5c:ba:
3d:d5:f3:b3:2d:5f:d2:f3:77:29:fa:89:25:aa:90:
05:b0:6c:6e:74:81:39:eb:81:74:01:98:e9:3f:84:
ac:d0:ed:f6:cf:53:65:54:51:71:6e:58:2b:33:fb:
ff:a3:48:1e:0e:37:ee:a5:43:a3:a3:35:4b:66:57:
92:69:53:aa:4c:61:81:12:0e:c1:1c:ca:46:3e:55:
ee:e9:c6:05:3c:d4:0e:f8:ab:28:05:59:9f:8d:1a:
95:13:7a:51:b2:7a:16:da:ea:a6:eb:16:f3:fc:ea:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:97:BE:C2:D6:23:5E:87:FB:81:BE:31:15:B6:29:53:24:B3:AB
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1N-XvsLWI16H-4G-MRW2KVMks6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.192.0/24
88.209.195.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1a:90:c8:d4:0b:13:4d:70:b2:41:f4:1a:57:89:c0:2a:0b:
81:9b:67:53:af:e2:df:8c:7c:40:0d:e2:14:20:28:d0:1b:20:
97:1e:59:04:2c:f2:08:39:e5:85:a5:56:60:f4:06:e3:6b:f7:
80:4a:9a:36:97:fe:0d:20:90:15:94:7b:83:bf:07:97:ce:ec:
fa:a7:1e:99:e6:5d:92:43:db:7e:bf:1e:6c:2b:d8:6e:28:17:
f0:d4:8a:00:6d:4c:b9:4d:70:65:03:4d:41:ce:e7:57:10:8f:
b8:40:b1:b9:7d:a6:fd:7e:c2:17:cd:32:cc:85:c9:37:df:04:
aa:26:86:11:07:31:28:f5:c7:cb:a8:be:f2:26:b5:37:af:43:
0b:68:99:b6:6f:c5:9f:c1:67:bb:bc:06:02:1d:63:2c:0f:8a:
18:62:80:0c:04:c9:62:5b:94:77:f6:fc:09:65:8e:4d:24:ba:
8a:db:00:99:cf:c6:d7:85:71:8c:4e:0f:51:1e:f2:90:62:e9:
c5:f8:b2:e6:ec:10:c3:30:a1:9a:cd:27:b9:be:3e:8e:f2:4d:
f3:7f:d3:18:8c:48:de:14:fa:be:a5:27:e0:7d:82:98:b9:43:
e3:5b:98:34:97:d8:ea:2e:12:06:f8:63:63:95:ac:80:ae:f1:
88:c3:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org