Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/29d6iWGCwYXweKq6lvXwr9UrAqg.roa
File: 29d6iWGCwYXweKq6lvXwr9UrAqg.roa (raw, json)
Hash identifier: HMIzDj0NR41sNw5T1rqByMQF20HusL0VOK1qpGn27iM=
Subject key identifier: DB:D7:7A:89:61:82:C1:85:F0:78:AA:BA:96:F5:F0:AF:D5:2B:02:A8
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018880F8D96F02224D79EC4577D4B750AED7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/29d6iWGCwYXweKq6lvXwr9UrAqg.roa
Signing time: Sat 03 Jun 2023 11:16:12 +0000
ROA not before: Sat 03 Jun 2023 11:16:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 88.209.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:f8:d9:6f:02:22:4d:79:ec:45:77:d4:b7:50:ae:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 3 11:16:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbd77a896182c185f078aaba96f5f0afd52b02a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:b2:a6:76:8b:3f:eb:33:6e:69:07:88:87:
ae:21:70:f7:63:d6:b5:68:a6:5c:cf:42:2f:6f:64:
0b:92:b4:d4:94:60:50:bf:f8:7e:28:47:66:97:78:
5a:30:d3:8e:fa:20:ac:6a:cb:b8:c1:ef:cb:5e:81:
0f:84:81:79:7c:8b:6c:c2:89:ea:20:20:1b:b6:ba:
11:04:fe:4c:46:a5:b1:08:f2:0a:ee:db:96:ea:47:
3f:b1:7a:7c:1e:16:55:fa:ea:3a:53:8b:8d:01:b7:
0f:28:15:9b:3d:40:b8:7c:5c:e4:fb:65:13:74:14:
99:bb:84:6a:f4:5f:04:1b:47:a7:09:6e:51:86:24:
f6:e9:d4:82:e7:d5:43:4e:3a:7c:c5:7d:a0:30:b6:
a7:22:e2:42:59:7f:70:71:10:d5:03:50:1d:4e:72:
58:d4:78:9e:e2:83:71:18:92:0f:58:72:8e:eb:6a:
8a:67:60:58:01:31:bd:0c:4b:7b:03:91:a9:5c:39:
7a:f4:f6:f7:6e:07:fc:72:8e:d7:51:46:31:cd:18:
87:e8:e6:17:53:72:c7:61:7e:91:f1:3d:61:30:64:
92:05:b6:c4:04:a1:b0:da:d6:62:04:99:35:af:cd:
cd:17:c7:8a:0a:7a:21:58:71:99:ca:06:35:ab:e4:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D7:7A:89:61:82:C1:85:F0:78:AA:BA:96:F5:F0:AF:D5:2B:02:A8
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/29d6iWGCwYXweKq6lvXwr9UrAqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.248.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a4:a0:4a:7c:1a:29:94:d1:cf:58:b1:5b:3c:94:69:20:43:
3c:3f:03:68:ad:5b:22:4b:81:ca:66:95:2e:0d:4b:35:dc:87:
5d:4b:b4:09:9e:1b:74:b7:2d:86:b6:d0:cb:94:0a:ba:7a:c9:
0c:25:3e:cd:b0:18:83:2c:84:32:1c:15:01:b9:7e:05:56:3a:
66:09:ff:50:83:e6:65:70:94:33:61:ed:64:1e:bf:7d:6a:56:
62:a5:59:a9:d8:28:bc:83:bd:b3:12:ba:5a:13:53:44:76:67:
5f:43:8e:21:e0:9e:81:87:e6:15:08:63:ce:09:2c:43:fe:61:
bc:8d:12:33:34:94:d2:bb:db:ca:21:c4:d0:97:c2:83:bc:24:
3f:cf:32:94:99:db:90:ff:e3:2a:82:ad:fb:a5:1f:a3:5d:a4:
0e:b2:c9:cf:98:6a:44:46:36:43:89:3d:79:f6:3b:b1:da:a9:
50:d4:69:9a:96:32:41:c9:d1:b6:f4:a7:dc:d2:96:0d:89:a2:
da:04:ce:02:67:60:82:ac:77:b9:6c:fd:38:2d:7e:2a:8c:c1:
6c:cb:04:fc:d7:62:b4:e3:62:be:47:48:52:ca:40:c7:9a:b9:
21:2d:5a:be:dc:e8:9b:23:fa:b2:be:31:02:fe:60:64:9a:e4:
87:0b:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org