Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4ry_vR6uBDGuXK3lJRR6HcXctTg.roa
File: 4ry_vR6uBDGuXK3lJRR6HcXctTg.roa (raw, json)
Hash identifier: z9IN0XjL1awvGHlBlZLbFJFCEoLMJ4Gk0Lsb8YZD0Nc=
Subject key identifier: E2:BC:BF:BD:1E:AE:04:31:AE:5C:AD:E5:25:14:7A:1D:C5:DC:B5:38
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01928017BB7EC930FA025F9131A6D80C3748
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4ry_vR6uBDGuXK3lJRR6HcXctTg.roa
Signing time: Sat 12 Oct 2024 09:38:11 +0000
ROA not before: Sat 12 Oct 2024 09:38:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 08:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:80:17:bb:7e:c9:30:fa:02:5f:91:31:a6:d8:0c:37:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 12 09:38:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2bcbfbd1eae0431ae5cade525147a1dc5dcb538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:17:a2:0a:fa:10:a5:ca:84:bb:77:19:0b:
95:95:d1:4a:76:e4:48:71:c8:62:6c:cb:2d:8b:2a:
ac:f0:88:7f:16:5c:5f:31:43:a4:75:88:8d:d0:be:
db:e2:40:2c:61:dc:1d:a5:44:65:1e:b2:0c:5a:ac:
e6:b2:14:23:ef:3d:bc:00:06:c0:8b:06:eb:cc:b5:
bc:23:80:51:e5:73:1c:16:30:bc:d9:9b:5a:4f:95:
2b:1c:a6:63:eb:b7:84:41:92:ec:29:3b:e3:e2:77:
71:b9:62:ee:50:d5:71:d7:07:e6:1a:fc:75:fa:6a:
2f:64:87:ca:d4:2f:76:cb:3e:85:f9:ec:d9:5e:26:
ef:92:5a:e6:03:38:ae:b0:ac:e9:36:40:20:99:36:
89:c2:0a:b7:48:b4:94:d0:71:c9:c8:a0:03:c9:70:
29:a0:1b:28:c8:d1:a6:3c:e0:22:79:64:87:3a:66:
b9:88:ba:7b:c6:e8:d6:a2:be:79:b7:5b:84:89:f9:
f3:61:66:bb:7c:c6:00:c7:f0:7a:27:02:40:f0:d3:
1b:b3:ae:a3:8d:fe:0b:b9:e8:02:92:a2:30:48:9b:
c4:3c:45:9e:6a:3a:8e:56:62:05:d9:57:b5:43:15:
a4:96:26:d7:9f:b3:99:de:12:30:9d:5a:7d:0c:f3:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BC:BF:BD:1E:AE:04:31:AE:5C:AD:E5:25:14:7A:1D:C5:DC:B5:38
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4ry_vR6uBDGuXK3lJRR6HcXctTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.195.0/24
88.209.232.0/22
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
40:35:11:71:40:99:cf:80:c1:95:6b:ce:d4:16:c1:ea:89:d6:
ad:43:8c:a1:76:5c:ed:fc:65:4b:a8:7c:2f:83:87:a3:e8:de:
6d:41:91:a8:d6:0e:28:6b:58:4a:fd:6b:12:5f:b4:83:65:f2:
18:81:2a:da:9d:6b:5f:5b:45:97:b4:19:3a:82:c9:38:6a:3b:
ec:93:59:1a:c9:c2:13:26:72:ac:1e:da:2c:e6:d6:bf:35:2b:
ed:dd:7f:53:06:0d:84:36:5b:7f:d7:53:6f:d6:0c:a2:72:7c:
6a:fa:99:be:76:04:bf:1d:c1:6f:d3:09:b7:96:9e:1f:1c:97:
81:be:5c:8f:d1:d4:da:92:a0:71:25:fc:03:c6:b9:73:c8:c0:
da:06:06:e1:ca:be:1a:4b:34:5b:25:0b:ed:46:ec:02:2e:f2:
e0:71:30:f1:0a:54:5c:3f:6b:33:66:f0:bd:ee:d8:d1:68:4b:
78:09:8f:27:02:d8:ee:6a:19:83:c0:a6:2c:25:bd:a1:a1:b4:
f2:1b:25:a2:ad:fa:b3:f3:9f:c2:7b:e4:63:f0:b7:f2:00:8b:
f0:5b:be:b3:7e:8c:3d:db:17:1b:f6:09:6d:60:bb:3d:7f:b1:
f6:26:60:77:54:19:47:95:8e:7e:0e:6f:42:50:45:2e:a9:19:
59:25:14:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 11:30:53 2024 by rpki-client on console-ams.rpki-client.org