Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/5oGs4iSBuTJv52rsTcgGhstUlTc.roa
File: 5oGs4iSBuTJv52rsTcgGhstUlTc.roa (raw, json)
Hash identifier: QP92Lt5KGBh6NngKS5Y8IV7aUic0fgnQd/Y6qBRgnUw=
Subject key identifier: E6:81:AC:E2:24:81:B9:32:6F:E7:6A:EC:4D:C8:06:86:CB:54:95:37
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0186C07779A4E83E3B659320D388E5B5BAD6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/5oGs4iSBuTJv52rsTcgGhstUlTc.roa
Signing time: Wed 08 Mar 2023 09:05:00 +0000
ROA not before: Wed 08 Mar 2023 09:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 88.151.57.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Mar 2023 07:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:77:79:a4:e8:3e:3b:65:93:20:d3:88:e5:b5:ba:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 8 09:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e681ace22481b9326fe76aec4dc80686cb549537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:79:a9:43:a3:fd:10:ea:b6:b7:5f:9c:59:
7f:d7:47:41:32:b5:fc:4a:f9:75:c4:a8:2a:f1:d3:
79:3f:b5:56:81:41:11:ed:8b:88:c3:db:05:de:d0:
9d:f8:49:ea:e2:d2:ec:a2:85:0b:f4:12:87:79:ca:
c2:0e:0b:68:ce:17:80:1b:2a:84:31:1c:73:f3:91:
fc:ec:f2:9d:04:e0:ea:0b:5a:b5:4c:5c:fc:0b:59:
ae:96:94:41:bb:68:8f:ad:55:db:7c:ff:c2:31:88:
b7:9e:d9:8f:3f:d8:16:29:d6:87:ad:06:a9:a0:22:
cf:bd:26:b0:08:5a:a9:0d:52:39:7b:cb:eb:2b:84:
30:4e:a3:81:af:92:5d:9e:62:4c:0f:d5:ec:39:da:
de:dc:9f:0a:d1:e0:f4:1c:89:5b:7a:9c:fd:88:78:
16:ac:56:69:46:10:14:5c:6e:1d:61:9a:af:31:f9:
a3:01:f2:b3:44:dd:96:7b:d6:fe:46:30:62:3f:8f:
97:00:c6:57:3e:77:17:be:ef:38:59:e5:0e:b2:0c:
92:79:39:29:43:b7:e2:37:4a:be:be:27:13:69:35:
45:ba:7d:29:37:c7:b3:af:6e:c2:c9:b8:9c:ee:ca:
10:f4:8e:e1:15:a4:f8:17:d4:63:78:91:a9:c2:89:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:81:AC:E2:24:81:B9:32:6F:E7:6A:EC:4D:C8:06:86:CB:54:95:37
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/5oGs4iSBuTJv52rsTcgGhstUlTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.57.0/24
88.209.194.0/24
88.209.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:55:e8:b5:9d:e7:64:4c:d9:a7:82:b9:57:03:1b:d6:16:29:
74:86:9d:1f:26:a3:3c:5f:b0:a5:68:24:1c:75:b7:0a:c4:e2:
db:42:e8:0c:2c:d2:9b:b4:21:c4:ec:a9:47:fe:43:eb:d7:39:
7d:ca:de:f9:fb:0f:06:03:0c:5e:89:29:d7:a5:3b:11:91:69:
21:2e:15:97:48:76:1a:ad:d3:ad:78:92:7d:94:9c:a5:0e:e4:
07:6c:71:09:6a:3d:3d:85:94:bd:34:57:57:56:1e:77:b9:ad:
ec:19:3f:b6:59:5e:32:61:7e:10:9e:a2:86:f9:3f:62:7d:39:
8a:55:79:69:63:d6:cc:f2:dc:d0:d9:cc:3a:a0:a8:9b:7f:58:
8f:31:e8:51:7b:81:f8:7e:a7:f0:86:fc:1b:4d:c5:44:d9:af:
c4:60:67:d5:9d:83:2a:dd:bb:95:9c:8e:e5:49:0a:3a:f6:4e:
8d:1a:3b:54:29:f0:70:b4:d3:60:11:cb:a4:48:c5:3d:6b:9f:
7b:3c:38:f2:cf:76:e0:01:68:f4:06:8d:b9:74:7e:0d:21:d9:
46:6e:d8:ba:b7:29:96:5c:59:98:fe:c3:e3:25:7e:0a:72:fc:
65:ac:0e:d6:c3:15:18:11:7b:55:6f:d3:d5:d9:a8:16:e4:cc:
9d:7a:67:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org