Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6XO1sp2jFTTJqM7N8nRm1DwGVzs.roa
File: 6XO1sp2jFTTJqM7N8nRm1DwGVzs.roa (raw, json)
Hash identifier: zzXU4KkzL2+5zjBr4tsL1RnKv/5lpd7MilQsA0lTR+s=
Subject key identifier: E9:73:B5:B2:9D:A3:15:34:C9:A8:CE:CD:F2:74:66:D4:3C:06:57:3B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019251B7BDB8116F716644A091E154ADCBB5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6XO1sp2jFTTJqM7N8nRm1DwGVzs.roa
Signing time: Thu 03 Oct 2024 09:30:49 +0000
ROA not before: Thu 03 Oct 2024 09:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 88.209.194.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 14:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:b7:bd:b8:11:6f:71:66:44:a0:91:e1:54:ad:cb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 3 09:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e973b5b29da31534c9a8cecdf27466d43c06573b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:46:26:24:a0:a2:ad:27:ea:c0:89:60:e9:
0c:37:0b:7f:3d:d9:46:03:3e:76:95:40:66:84:06:
d5:4f:5a:30:e8:38:31:c1:cc:0d:f4:ac:9f:4d:28:
f1:dc:e0:19:05:36:a6:9c:97:b4:b4:df:67:e6:69:
cb:65:df:b1:9f:f2:e6:5d:98:47:fd:74:03:58:7d:
08:e2:c3:d5:b9:e0:d6:e3:87:12:f6:80:87:3c:6b:
d1:4e:4f:03:50:62:26:98:1a:48:93:2e:91:fe:3b:
ec:26:36:11:9b:4d:0e:4e:a4:3f:ed:62:c0:4a:55:
1f:c5:e6:9d:e2:52:41:a1:eb:1f:df:5b:28:02:1c:
d3:44:a9:2f:0b:34:2a:c5:15:50:e0:37:41:06:89:
59:6e:7a:6e:23:91:e1:d5:8c:1a:50:74:7f:93:fb:
14:42:36:82:e9:57:d9:1c:1d:6c:b7:2a:22:b5:98:
b4:8d:e2:78:e0:a1:66:8c:17:df:82:87:3c:09:1d:
6e:58:4d:c2:ab:0d:ec:81:28:98:de:9a:62:0f:3d:
38:81:b4:3a:dc:0b:4f:4f:db:52:33:51:1b:ef:6c:
08:c2:63:01:d9:0c:89:ad:da:d9:86:12:01:42:71:
e3:76:fd:dc:16:20:a7:ca:2e:dd:01:54:a3:22:d8:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:B5:B2:9D:A3:15:34:C9:A8:CE:CD:F2:74:66:D4:3C:06:57:3B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6XO1sp2jFTTJqM7N8nRm1DwGVzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.194.0/24
88.209.211.0/24
Signature Algorithm: sha256WithRSAEncryption
66:13:c5:89:76:97:62:01:cc:1b:96:89:a5:84:3f:17:c0:0a:
c3:a6:fa:b3:0e:6c:6d:6f:b0:da:57:63:95:dc:66:6d:b9:a5:
58:0b:b0:1e:c8:3b:b2:66:f2:43:62:cb:19:1c:e3:83:fd:84:
12:d8:96:60:27:d1:94:ff:c1:bd:3b:48:d8:e8:b4:a7:a5:03:
d2:6d:a5:9c:c4:e8:9b:d6:e8:29:6f:07:3a:3a:d4:12:ec:00:
d2:72:74:c9:f2:9e:d7:ec:d2:75:b4:33:96:e4:8f:f2:b8:64:
88:ff:05:f3:b0:76:1b:74:40:43:24:7c:c6:63:fb:5e:ae:a8:
e6:d3:a8:49:36:f8:aa:37:56:b6:e6:64:0a:94:c6:09:fb:0f:
d0:9b:1c:eb:cd:38:2f:c1:d9:9a:3a:68:63:8a:1f:74:d6:be:
ec:0b:aa:8d:09:10:d7:42:0d:53:c4:f8:bd:f0:f1:74:a5:9b:
68:67:1c:1d:9b:47:4d:0c:66:39:bd:18:6a:30:38:42:fa:61:
eb:4f:5a:d3:b3:c7:76:f5:1b:61:12:36:58:00:f8:ea:5b:d6:
1a:b9:69:7f:1f:e1:9a:21:47:62:32:f4:47:62:68:1e:c2:00:
7e:3c:3e:4b:3f:2f:49:51:76:1e:d2:9d:4f:e8:49:2a:24:4a:
92:bc:45:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 16:43:23 2024 by rpki-client on console-fra.rpki-client.org