Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2-Z6NyuFlPQi_54mOZ_1yWzFYAk.roa
File: 2-Z6NyuFlPQi_54mOZ_1yWzFYAk.roa (raw, json)
Hash identifier: RwULqw0ajPqfrdaglkXavbsj5gQz4StbdEckzFH2a4o=
Subject key identifier: DB:E6:7A:37:2B:85:94:F4:22:FF:9E:26:39:9F:F5:C9:6C:C5:60:09
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01874B269CB6744DF8EBAE5CB2F2C7E0470B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2-Z6NyuFlPQi_54mOZ_1yWzFYAk.roa
Signing time: Tue 04 Apr 2023 07:23:54 +0000
ROA not before: Tue 04 Apr 2023 07:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 06:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:26:9c:b6:74:4d:f8:eb:ae:5c:b2:f2:c7:e0:47:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 4 07:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbe67a372b8594f422ff9e26399ff5c96cc56009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:da:8a:67:69:e2:8a:2c:74:f0:25:4f:8d:
dc:fe:c0:18:b6:4e:bc:49:7b:68:aa:dd:7a:26:d3:
34:ad:a4:c9:bd:23:f2:63:2d:3e:96:de:eb:25:1e:
b8:b6:bd:21:ef:ab:1d:5e:25:07:c1:b8:80:3a:ac:
f0:bb:02:58:ac:86:23:64:45:cb:33:12:92:1a:59:
f9:24:4c:ea:88:75:23:01:86:6f:b2:62:56:2d:26:
29:b5:1d:64:83:fd:36:ad:ef:09:d1:26:8a:6f:e1:
be:a9:12:16:f4:20:79:d2:69:b1:46:6d:00:34:58:
e4:ee:1f:9b:36:a0:5c:75:79:5e:f4:e1:85:0b:9c:
f5:6b:52:80:eb:d2:b7:fc:42:2f:cc:26:b0:c7:4c:
f1:f5:f6:06:28:1e:b2:9f:d3:2f:1b:5f:58:c3:fc:
89:f3:22:ee:3a:77:53:fe:fc:49:1a:46:c6:ab:bc:
1e:a9:ab:11:cc:1f:e4:f4:4b:7d:42:35:93:d6:29:
f4:3e:eb:31:a3:c7:c3:8f:39:44:9b:f9:64:61:c1:
96:a9:08:90:65:09:27:40:7b:59:3b:24:be:c0:32:
e3:fe:ab:3c:6f:52:b3:32:4e:e5:32:a8:2b:23:9e:
be:32:50:c1:d6:c4:f3:65:db:b7:4a:ec:cb:80:0c:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E6:7A:37:2B:85:94:F4:22:FF:9E:26:39:9F:F5:C9:6C:C5:60:09
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2-Z6NyuFlPQi_54mOZ_1yWzFYAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.216.0/24
Signature Algorithm: sha256WithRSAEncryption
77:00:c9:d1:7c:39:0b:07:89:f2:e2:43:c8:ac:f8:79:93:d5:
80:ee:15:0b:b7:ae:1c:22:42:0e:e9:11:58:a9:c1:64:04:bc:
5b:98:84:7f:be:cf:77:0f:7c:07:7f:92:e4:15:34:a2:a8:97:
b2:77:52:ef:6b:63:1a:fd:5a:b1:e7:87:83:47:44:a7:25:cd:
5e:2c:cd:04:25:e2:d0:84:78:6c:e9:20:0f:52:16:0a:95:91:
25:60:f3:b9:56:20:19:01:15:fb:fd:62:33:c1:77:fa:4c:8b:
6e:7c:bd:e4:57:2e:d3:7a:c0:7c:b3:fb:32:46:ed:96:c9:52:
02:a1:94:2f:5d:b0:87:62:0d:04:66:e4:d2:43:69:ec:76:3e:
5b:af:7d:5a:03:9b:6c:6b:74:86:e5:53:e1:56:00:33:0d:2a:
a7:70:38:50:a0:54:f2:79:e6:e5:2b:2e:b5:cd:6a:18:56:13:
22:a9:86:66:a0:69:2c:2a:a5:3a:6d:2f:16:5e:53:36:b0:87:
d1:2d:47:a7:6a:12:d6:b3:75:79:5f:75:16:a6:e7:85:2d:01:
80:65:c0:66:80:45:02:59:66:05:78:32:12:94:d9:b4:1e:24:
b0:4c:45:46:19:99:19:7a:35:d1:8c:0d:41:d5:04:96:72:ed:
49:cd:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:26 2024 by rpki-client on console-fra.rpki-client.org