Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4ae-Xkz01G7rXuTnmMqNKIvCO78.roa
File: 4ae-Xkz01G7rXuTnmMqNKIvCO78.roa (raw, json)
Hash identifier: uUOIHCzyNkW+6iQ3/Bg7ynxzn7mGLvcNnJgqH4jIdeM=
Subject key identifier: E1:A7:BE:5E:4C:F4:D4:6E:EB:5E:E4:E7:98:CA:8D:28:8B:C2:3B:BF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188BF880AB0EEC58B95B98C4EF16171A773
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4ae-Xkz01G7rXuTnmMqNKIvCO78.roa
Signing time: Thu 15 Jun 2023 14:49:03 +0000
ROA not before: Thu 15 Jun 2023 14:49:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198120
IP address blocks: 88.209.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:88:0a:b0:ee:c5:8b:95:b9:8c:4e:f1:61:71:a7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 15 14:49:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1a7be5e4cf4d46eeb5ee4e798ca8d288bc23bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:b1:06:13:d2:83:6c:f0:75:66:b0:1d:3c:
dd:aa:e9:6d:f4:4a:5c:47:81:7c:1b:b6:53:9d:f6:
bf:da:60:ed:dd:21:2e:32:46:c1:a7:91:bc:14:95:
dd:9b:49:b4:e3:84:46:5e:41:4f:59:2a:8d:9a:51:
b4:49:7f:92:d2:05:eb:ce:6e:8d:c4:4a:5e:40:db:
63:3f:11:8e:ce:77:45:cc:7a:15:7e:5e:3c:b5:10:
5a:1f:89:8b:d3:01:75:c9:82:d3:34:0b:b1:e5:d5:
bc:88:05:e3:25:f8:4d:3e:aa:88:f8:14:06:53:ea:
c2:3a:a9:88:c5:fc:52:48:6b:3e:f1:94:72:f6:eb:
26:f5:91:53:a3:99:5d:76:b1:53:d9:15:f3:30:2b:
3e:97:47:e2:80:9d:4f:1e:88:82:c5:51:08:09:4c:
d3:44:4d:67:a4:04:c2:d2:27:5b:92:9f:f7:d6:52:
dd:2c:68:e2:a0:58:3a:25:40:eb:94:52:bd:7f:f9:
61:ad:f8:07:4f:11:83:05:57:ac:09:60:c5:d3:89:
0a:06:08:a7:17:34:2a:7f:b4:c1:88:cb:6c:f1:2e:
99:49:4d:e4:e5:95:43:8a:4c:19:d5:0e:0e:98:5e:
f0:6c:3d:ad:96:94:4f:cb:f6:02:1c:94:ff:79:c1:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A7:BE:5E:4C:F4:D4:6E:EB:5E:E4:E7:98:CA:8D:28:8B:C2:3B:BF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4ae-Xkz01G7rXuTnmMqNKIvCO78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.206.0/24
Signature Algorithm: sha256WithRSAEncryption
86:70:6b:df:da:80:36:8f:55:2a:07:4d:18:99:fe:f0:8e:5e:
cb:3b:cb:74:93:e6:10:a7:7f:6e:a5:99:6f:a4:c7:cc:79:67:
66:d1:a3:7a:bc:58:dd:68:28:91:05:90:49:7a:1c:ab:33:a3:
4e:4a:e2:58:00:17:b2:04:72:6f:de:90:a1:df:15:ff:29:58:
02:d6:aa:83:c3:2f:53:7b:a9:2b:13:27:2a:41:0b:1d:d1:e4:
ee:ba:6d:40:18:9d:1f:04:ae:10:40:86:ea:1d:6e:65:02:51:
9f:35:9a:1f:4a:33:e6:7f:7a:14:7c:56:38:c7:e7:78:fa:26:
1d:ca:1b:1c:3c:ee:dd:9a:be:36:a1:3c:7b:e5:8a:81:35:6b:
28:4d:d4:95:f7:4d:22:3f:68:03:09:90:72:18:2e:a2:f6:bb:
0a:b9:43:62:ff:89:bc:75:45:47:06:2d:98:2d:cb:0a:4d:70:
d5:a9:b7:24:3f:53:e0:d5:9b:1e:cc:d4:a2:52:47:33:e9:02:
ea:85:47:d4:89:c4:ce:d4:24:90:60:3a:3c:aa:8e:6b:be:05:
94:9a:ad:53:08:da:af:e7:b9:2e:31:b5:8c:07:58:03:5a:04:
70:80:b0:63:cf:99:dc:0b:2a:19:3d:74:50:a1:79:6c:2f:d5:
88:c9:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org