Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/62t2yTycnmuaj3JdzP7kShJjHow.roa
File: 62t2yTycnmuaj3JdzP7kShJjHow.roa (raw, json)
Hash identifier: eF323wy+V1AJW8Pw+k9vLd86kzEEUZlwcHadtUbTcHI=
Subject key identifier: EB:6B:76:C9:3C:9C:9E:6B:9A:8F:72:5D:CC:FE:E4:4A:12:63:1E:8C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0192908BC50B43840F7CC9013CA084CA3019
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/62t2yTycnmuaj3JdzP7kShJjHow.roa
Signing time: Tue 15 Oct 2024 14:18:51 +0000
ROA not before: Tue 15 Oct 2024 14:18:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 06:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:8b:c5:0b:43:84:0f:7c:c9:01:3c:a0:84:ca:30:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 15 14:18:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb6b76c93c9c9e6b9a8f725dccfee44a12631e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:23:49:8a:d0:d5:6b:e8:7b:85:8f:48:6d:
66:bc:7e:fd:66:4e:22:ac:08:83:c9:db:c7:6c:22:
c5:c7:15:ab:20:4b:d6:1f:a7:1f:3c:3e:1c:c5:08:
57:23:34:90:7c:ac:fe:de:79:28:74:b5:8f:7f:bd:
6d:0e:f2:11:6e:10:c7:51:18:22:11:71:2e:50:55:
4b:4a:a5:36:6d:98:0d:e8:b9:1c:4a:65:f4:d5:e6:
ba:8b:a4:02:2c:05:43:43:9b:40:24:af:ff:29:41:
a9:53:62:c9:1f:ad:b7:41:46:f2:6f:9f:21:ee:d4:
3e:b5:bb:39:77:12:ab:c4:de:c7:a3:61:87:cd:5d:
31:01:35:03:af:05:99:46:dc:40:a0:ea:65:da:16:
03:5b:e2:97:22:30:19:79:10:54:0b:e3:76:2d:9e:
81:a6:11:59:eb:34:ea:33:62:9e:b3:62:61:a6:fa:
72:b9:57:89:35:64:85:39:15:c5:70:88:25:f9:51:
41:cb:32:da:e8:d1:9f:a0:2e:96:cd:5f:58:58:38:
85:23:47:20:af:2d:f7:d9:17:f8:4a:06:a1:d7:d4:
68:f1:f2:b6:55:1e:d6:6d:a9:33:54:09:b2:a7:16:
15:0e:81:8f:04:66:a5:c2:f0:c8:a2:62:bc:2b:f0:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:76:C9:3C:9C:9E:6B:9A:8F:72:5D:CC:FE:E4:4A:12:63:1E:8C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/62t2yTycnmuaj3JdzP7kShJjHow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
26:b2:c6:90:c5:8e:6d:7f:e2:b2:11:28:87:4b:24:96:4b:dd:
7d:7d:01:53:c1:56:e8:dc:c7:9d:b2:99:55:76:68:3c:49:c5:
7c:af:67:24:e1:86:19:99:03:d0:9c:a5:0a:fe:0b:fc:ca:ba:
a2:61:86:52:ee:da:40:0f:51:4b:0f:c3:44:28:40:b7:b6:cb:
b1:7f:e8:d4:89:6a:01:77:de:28:8d:10:6a:7c:ff:41:8b:03:
c6:7b:8a:65:9e:73:b0:6e:11:99:a2:ab:54:bd:aa:a7:91:60:
d3:2b:04:d1:66:b7:b3:a0:dd:fc:2a:97:9b:bf:a1:3e:af:81:
39:8b:84:61:e3:e3:52:89:ce:1d:a4:49:4d:4b:95:ee:72:dd:
68:56:88:96:23:78:1d:8d:53:5d:c0:42:e4:e5:17:3a:b9:4f:
76:70:77:cc:39:2f:de:4e:fc:52:a7:11:3c:e2:09:3a:fe:a8:
e0:3d:3f:12:55:ff:6e:3e:91:69:c1:3f:7a:3f:61:c4:02:6e:
13:ad:0f:69:ba:ac:b7:d3:0f:83:71:01:9f:1f:47:67:71:40:
71:8e:12:78:4c:96:0d:95:92:ff:5e:4e:ac:d3:a7:f5:a6:bd:
67:7a:44:5f:a6:fd:69:8e:19:de:14:ad:9f:86:ed:7a:99:2c:
93:0a:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 07:15:03 2024 by rpki-client on console-fra.rpki-client.org