Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7kNvaLw-X8JVL7c0DRdDftA9osM.roa
File: 7kNvaLw-X8JVL7c0DRdDftA9osM.roa (raw, json)
Hash identifier: aQ0f/MgO3mFf8munVg6o+Iz3z3XluFC9UI5tEk54OhM=
Subject key identifier: EE:43:6F:68:BC:3E:5F:C2:55:2F:B7:34:0D:17:43:7E:D0:3D:A2:C3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7B1A73F30A564533B8DFECFCB372C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7kNvaLw-X8JVL7c0DRdDftA9osM.roa
Signing time: Mon 02 Jan 2023 09:54:47 +0000
ROA not before: Mon 02 Jan 2023 09:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 88.209.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:b1:a7:3f:30:a5:64:53:3b:8d:fe:cf:cb:37:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee436f68bc3e5fc2552fb7340d17437ed03da2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:36:ed:48:85:4e:1e:e4:81:d9:c1:69:9c:
a3:5c:3c:05:a3:e8:3a:14:f4:8f:ff:83:38:94:9b:
4a:10:9a:06:59:f9:2f:43:53:e8:f9:9f:6d:7d:8a:
3e:f1:ea:1f:d2:c8:f0:f4:bd:17:d4:16:d9:a3:10:
5e:dd:02:3d:dc:a4:d8:c6:43:8f:58:12:0a:97:07:
55:18:73:36:fa:bd:f6:e8:c4:cc:7d:47:8a:41:d5:
76:dc:e1:0e:6d:2c:9f:46:1a:26:f1:d1:05:04:1d:
8f:81:52:5f:f2:40:3d:f6:03:61:5e:37:58:58:4a:
bc:52:51:94:09:8a:a2:50:b7:d0:c5:46:90:26:57:
7f:b0:dc:09:17:06:33:14:81:88:88:41:fa:95:c7:
4b:cf:b2:19:37:67:5f:12:95:26:60:77:c6:fc:11:
a6:1a:e2:d5:27:fc:0e:98:ad:8b:0c:1a:11:0b:05:
a9:05:57:57:e6:00:f0:9c:ad:9f:59:b3:02:d5:42:
b8:a7:82:fa:29:66:8a:97:7d:d5:a0:68:92:60:79:
ac:44:b1:16:0e:51:75:46:6b:cd:fc:9c:20:f7:5b:
97:b6:b9:00:66:6a:07:0c:f9:b1:aa:70:f4:83:69:
f1:95:4f:ff:24:ed:f3:5b:0d:19:b1:42:aa:64:f9:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:6F:68:BC:3E:5F:C2:55:2F:B7:34:0D:17:43:7E:D0:3D:A2:C3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7kNvaLw-X8JVL7c0DRdDftA9osM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
64:07:e5:58:8a:df:78:ba:7f:52:72:67:77:86:64:e0:68:b0:
2b:c4:34:8a:a3:30:03:d1:39:59:01:6e:d7:c8:11:f8:60:48:
71:4b:02:8d:cb:b8:f7:4b:4c:0e:3c:92:7f:55:d9:9c:ee:45:
47:05:b2:ab:1b:53:f8:fc:73:f9:b3:c3:9c:23:04:0b:a9:0e:
68:cd:c3:49:ec:ae:b9:34:7e:84:94:80:99:17:0d:a9:88:46:
30:1d:67:ac:2b:03:38:89:03:90:9a:09:9f:46:e6:d5:f4:b4:
3d:b3:d3:79:1e:b2:3f:5c:9a:b7:9d:46:f3:cc:f1:40:f7:22:
6e:c1:76:b1:8c:39:21:33:36:9e:8a:1d:ae:3a:0e:02:73:54:
12:c3:05:c9:ed:ed:d4:a1:0d:48:de:95:c3:6d:7e:11:77:62:
ec:29:32:7c:30:48:95:80:33:96:69:a1:82:7b:b9:d2:34:4c:
1d:af:d5:5a:1d:d4:5d:1f:bc:08:ad:db:dd:39:6a:af:3d:07:
68:bb:44:9b:22:ee:55:46:bf:06:df:75:c3:d2:d3:84:ed:a3:
42:7e:9c:c7:d5:77:a0:7e:12:78:ce:d7:9b:ce:20:74:c3:2a:
16:70:4f:fd:32:28:f9:13:67:ac:b4:86:16:8c:d5:b2:81:cf:
06:4b:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:20 2024 by rpki-client on console-fra.rpki-client.org