Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/75L7a_DJIBhkLvUZiBHTdc3S-kg.roa
File: 75L7a_DJIBhkLvUZiBHTdc3S-kg.roa (raw, json)
Hash identifier: ytXRBnKJesItDitbZpMzNoIKe4UUowhutSEFJbdc2GI=
Subject key identifier: EF:92:FB:6B:F0:C9:20:18:64:2E:F5:19:88:11:D3:75:CD:D2:FA:48
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018AB2F1FDE3B3C7A0D05FD877D71623A98E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/75L7a_DJIBhkLvUZiBHTdc3S-kg.roa
Signing time: Wed 20 Sep 2023 14:15:18 +0000
ROA not before: Wed 20 Sep 2023 14:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61046
IP address blocks: 88.209.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 06:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:f1:fd:e3:b3:c7:a0:d0:5f:d8:77:d7:16:23:a9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 20 14:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef92fb6bf0c92018642ef5198811d375cdd2fa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:73:dd:12:c1:f0:fa:2e:67:cf:8b:be:ce:
16:60:f9:0f:7a:28:d0:bc:ad:50:9b:f4:b0:ce:ca:
5a:42:60:b6:b2:c7:28:f4:32:d0:26:58:bb:d7:db:
5e:e5:7b:27:b7:d4:f8:6f:b8:84:01:f5:cd:d5:e0:
51:e3:e0:61:60:b0:89:87:19:cd:a7:0d:c1:0f:db:
81:cb:40:dd:47:79:e2:5b:ba:85:c1:06:40:0b:5c:
00:eb:b5:6d:26:37:97:3c:6e:53:0c:7e:f8:c8:88:
8c:30:f2:4d:c0:f0:9c:87:ec:25:c2:19:31:5e:73:
98:9d:1c:2f:26:d7:8b:cb:e6:54:03:9a:11:9d:aa:
84:2a:ee:08:04:1b:f6:d8:1c:74:1d:cd:59:b9:9a:
5d:81:38:00:cf:fc:a5:c4:a4:9c:21:80:3f:54:1a:
70:87:d8:8c:7d:81:45:9b:a4:98:6c:c6:02:c2:66:
94:ae:b4:b1:d5:ee:a5:18:af:cc:32:02:89:4b:fd:
f3:2e:7d:e6:d3:c9:09:c0:6f:0f:e5:ba:62:83:04:
0d:b8:c9:27:61:e4:cc:e3:c0:4f:76:63:18:3d:7d:
f3:8c:54:ab:2a:9e:5d:5b:96:02:2a:a3:08:a6:66:
62:7d:84:9e:a4:d3:f1:6e:39:6d:8c:f4:88:d4:a9:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:92:FB:6B:F0:C9:20:18:64:2E:F5:19:88:11:D3:75:CD:D2:FA:48
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/75L7a_DJIBhkLvUZiBHTdc3S-kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.245.0/24
Signature Algorithm: sha256WithRSAEncryption
36:65:f3:ed:10:f7:76:f9:c5:30:1e:7e:3a:63:67:3b:29:e4:
9d:e5:11:18:fd:c7:71:10:05:f4:cf:ff:7b:ba:b9:47:74:10:
53:42:19:89:74:57:d9:0f:40:66:c1:8d:f7:af:54:f8:0c:86:
f9:e4:41:36:73:0e:db:78:9d:ef:ce:3c:2e:71:f8:30:54:06:
5d:9d:b1:06:b7:80:fa:f9:22:ae:7b:f3:11:15:64:70:73:fd:
20:5f:ef:31:dc:97:5e:f6:c4:1b:31:47:3a:50:77:5e:e2:85:
ef:92:33:07:16:36:4e:f7:82:9e:76:6e:80:52:c7:80:1d:00:
f0:aa:65:95:a4:cf:2a:9a:b8:fa:03:8a:59:69:ae:8f:ee:08:
58:2c:5c:d0:e8:f8:5f:e9:93:83:9d:af:8a:9d:02:2a:f1:b4:
63:cb:93:02:7f:ed:66:7e:9a:ec:7c:de:dd:91:d0:2b:dd:65:
55:9f:e6:cb:14:bb:0b:1d:e2:54:72:72:70:cb:01:39:1c:60:
a7:16:20:13:bf:49:2b:7e:1c:65:7d:61:f5:d3:55:06:b8:c1:
43:b7:13:02:57:a8:c1:66:21:43:d1:d2:19:ac:5c:25:9a:b1:
7e:f2:44:be:d2:e5:4a:84:7b:86:ab:35:29:ad:9d:6e:f7:4b:
b8:c8:8c:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqy8f3js8eg0F/Yd9cWI6mOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwOTIwMTQxNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjkyZmI2YmYwYzkyMDE4NjQyZWY1MTk4ODExZDM3NWNkZDJmYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqepz3RLB8PouZ8+Lvs4WYPkPeijQ
vK1Qm/SwzspaQmC2ssco9DLQJli719te5Xsnt9T4b7iEAfXN1eBR4+BhYLCJhxnN
pw3BD9uBy0DdR3niW7qFwQZAC1wA67VtJjeXPG5TDH74yIiMMPJNwPCch+wlwhkx
XnOYnRwvJteLy+ZUA5oRnaqEKu4IBBv22Bx0Hc1ZuZpdgTgAz/ylxKScIYA/VBpw
h9iMfYFFm6SYbMYCwmaUrrSx1e6lGK/MMgKJS/3zLn3m08kJwG8P5bpigwQNuMkn
YeTM48BPdmMYPX3zjFSrKp5dW5YCKqMIpmZifYSepNPxbjltjPSI1KnaNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+S+2vwySAYZC71GYgR03XN0vpIMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvNzVMN2FfREpJQmhrTHZVWmlCSFRkYzNTLWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH1MA0G
CSqGSIb3DQEBCwUAA4IBAQA2ZfPtEPd2+cUwHn46Y2c7KeSd5REY/cdxEAX0z/97
urlHdBBTQhmJdFfZD0BmwY33r1T4DIb55EE2cw7beJ3vzjwucfgwVAZdnbEGt4D6
+SKue/MRFWRwc/0gX+8x3Jde9sQbMUc6UHde4oXvkjMHFjZO94Kedm6AUseAHQDw
qmWVpM8qmrj6A4pZaa6P7ghYLFzQ6Phf6ZODna+KnQIq8bRjy5MCf+1mfprsfN7d
kdAr3WVVn+bLFLsLHeJUcnJwywE5HGCnFiATv0krfhxlfWH101UGuMFDtxMCV6jB
ZiFD0dIZrFwlmrF+8kS+0uVKhHuGqzUprZ1u90u4yIzh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org