Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/51sq95UOkYVG2hWDsMP9_WNu4Zw.roa
File: 51sq95UOkYVG2hWDsMP9_WNu4Zw.roa (raw, json)
Hash identifier: SI8sa0dDjKLN7sMzUOB69vqtfmVfE/j5iklB7G2LH5A=
Subject key identifier: E7:5B:2A:F7:95:0E:91:85:46:DA:15:83:B0:C3:FD:FD:63:6E:E1:9C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7AF02D7D0F3F19A2BF717CF194EB4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/51sq95UOkYVG2hWDsMP9_WNu4Zw.roa
Signing time: Mon 02 Jan 2023 09:54:47 +0000
ROA not before: Mon 02 Jan 2023 09:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 88.209.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:af:02:d7:d0:f3:f1:9a:2b:f7:17:cf:19:4e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e75b2af7950e918546da1583b0c3fdfd636ee19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:fd:57:41:7c:61:bd:f4:cf:76:9e:af:ab:
44:3e:f5:8b:95:56:9a:c0:50:ee:7c:6e:ac:1a:26:
00:8c:03:33:81:85:23:db:b1:45:77:c3:94:d6:0e:
c6:aa:0e:3b:f4:66:51:34:2f:5d:31:f5:7e:e5:94:
70:58:7f:71:0b:db:09:6b:70:3a:a2:34:85:1e:99:
c9:bf:a2:4c:25:d6:cf:20:47:e9:c3:3f:13:db:20:
9c:63:73:9f:70:83:ad:3c:87:1f:97:bb:1a:b7:46:
ef:f1:1e:3a:7d:0e:92:b6:02:2d:fd:41:3d:81:ce:
24:14:57:b9:4f:bb:09:3e:e7:4b:64:4d:fb:ec:99:
e4:74:00:e1:36:f8:a3:4f:80:21:b4:b5:9b:ad:dd:
0a:6f:f3:d3:cf:e2:64:9e:e0:cb:56:9a:5a:2a:87:
a5:44:1a:ff:c9:fb:02:b9:61:78:07:0f:27:65:e4:
eb:eb:07:ca:e2:00:98:d8:6b:71:8f:a4:21:24:f9:
40:9d:15:c4:6f:ee:30:c7:92:3b:ed:ce:ed:43:e0:
a1:be:20:3e:6a:2c:41:5d:e4:a7:e7:60:0c:a7:a2:
b9:f2:8d:e7:21:f5:32:a5:c9:44:bf:53:b0:98:e0:
0c:4c:22:7f:63:49:14:6f:8b:96:c2:4f:4f:f1:1b:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:2A:F7:95:0E:91:85:46:DA:15:83:B0:C3:FD:FD:63:6E:E1:9C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/51sq95UOkYVG2hWDsMP9_WNu4Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.239.0/24
Signature Algorithm: sha256WithRSAEncryption
14:50:74:b0:93:15:29:a0:de:37:f6:98:85:eb:b7:2e:34:5b:
4b:11:0a:0c:64:73:b4:b2:52:aa:92:41:b3:b8:a7:f9:12:58:
a0:76:d3:94:77:72:59:0b:d1:41:aa:96:17:12:34:ab:1b:a4:
c3:96:f7:fb:01:5c:32:f3:7a:8d:9c:c5:f2:04:5b:34:56:78:
53:ff:ce:6a:45:d7:70:2f:26:19:76:cc:a0:00:ce:f3:55:a4:
93:47:81:ea:16:e1:28:9e:c5:03:e9:ee:d9:23:23:d8:29:6c:
8f:ca:ed:65:0e:7c:61:da:d6:3a:c5:6d:12:98:a1:80:f9:85:
38:8c:2a:ec:8c:7b:53:8e:fe:0a:3d:2b:db:19:17:1c:8a:ee:
08:1e:c9:bf:22:d9:00:0d:95:72:ed:0b:4d:f8:41:d4:97:67:
85:7b:87:47:77:36:46:56:6f:40:53:ae:a4:a8:00:1c:8b:2e:
1d:c0:da:a9:b8:5c:94:c0:e5:fa:9f:8d:d7:3e:0b:8d:05:9a:
45:8e:3f:a4:68:ef:0f:ba:46:f3:46:11:62:c5:e3:21:9b:5b:
c6:ad:d0:e4:95:5c:68:85:56:01:6e:bf:89:84:d3:5e:a1:87:
b0:73:09:73:54:dd:a9:78:2c:32:36:84:75:e3:29:ea:e3:6a:
b8:1c:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org