Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7ocPPpmeqoZkZCy_tWV8PUO-IGA.roa
File: 7ocPPpmeqoZkZCy_tWV8PUO-IGA.roa (raw, json)
Hash identifier: MtXJqoKCFaDzpvS20kQl6wA7usJlkriJPEZCUmJ/Yw4=
Subject key identifier: EE:87:0F:3E:99:9E:AA:86:64:64:2C:BF:B5:65:7C:3D:43:BE:20:60
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187C347ECBE8615FD2EFAF7CED033CBC954
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7ocPPpmeqoZkZCy_tWV8PUO-IGA.roa
Signing time: Thu 27 Apr 2023 15:14:43 +0000
ROA not before: Thu 27 Apr 2023 15:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 88.209.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 May 2023 06:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:47:ec:be:86:15:fd:2e:fa:f7:ce:d0:33:cb:c9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 27 15:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee870f3e999eaa8664642cbfb5657c3d43be2060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:e7:34:04:4c:fa:ad:db:13:cc:54:48:93:
f7:05:c8:a4:3b:05:de:b5:72:18:3a:78:01:a5:de:
46:28:93:57:f1:7a:9d:83:18:30:90:53:84:46:1d:
c2:7c:2d:d9:8b:e2:46:83:48:65:dc:a1:8b:92:86:
d6:e8:ec:f7:92:1b:46:5c:7e:24:1b:71:dc:f0:8d:
27:0c:76:3e:8a:2e:81:8a:1b:04:00:87:98:53:38:
09:51:b7:1e:d6:41:23:d4:c3:59:d3:0b:0a:7e:62:
de:d5:34:b2:48:af:e5:f4:3d:f0:bd:be:16:43:23:
52:66:e7:21:43:61:a0:a1:94:89:bf:b1:4d:12:90:
d0:e9:f6:9f:f5:09:10:b0:9b:52:19:d5:a1:32:b4:
30:2a:92:e1:96:57:f1:47:96:e0:20:76:fa:48:d4:
fe:33:34:c3:ea:c5:13:62:ef:60:d9:8e:ef:7e:20:
03:bc:98:9d:8d:a3:69:22:5d:91:be:3f:7e:ea:d9:
ef:76:de:67:d8:e8:7a:8b:c7:bf:dc:79:be:20:0a:
29:e6:81:2e:4c:4f:d8:29:5b:65:d8:4d:cc:43:cc:
8e:4b:17:56:8d:0c:ec:f5:79:2d:52:3f:fa:a2:63:
44:e8:1b:c7:6e:43:24:d6:7d:b4:a5:fd:4b:fb:32:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:87:0F:3E:99:9E:AA:86:64:64:2C:BF:B5:65:7C:3D:43:BE:20:60
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7ocPPpmeqoZkZCy_tWV8PUO-IGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:76:df:29:ce:f7:c0:70:3c:97:de:26:e1:5e:cc:31:7e:ac:
30:5b:a9:e3:e8:5a:bb:5d:0e:d0:8c:82:ca:6c:d9:5b:af:55:
40:ef:58:6c:5f:f9:ec:ca:03:17:08:07:c7:ea:5c:ac:38:bd:
23:4f:c8:85:46:a1:25:fa:66:4d:c3:15:66:30:dc:2d:f3:d2:
d7:ff:e7:76:e2:03:c8:c2:3e:43:0d:4a:30:8f:e0:18:b8:9a:
0f:79:05:2e:c2:f9:67:5e:a4:18:82:8f:7a:0c:5c:a7:84:97:
ff:8e:87:88:7c:5a:ae:d4:f4:c1:ee:96:f8:d6:28:50:00:98:
f7:aa:37:ed:16:45:c8:d5:7c:52:4d:13:68:e4:dc:fd:de:74:
1b:c3:47:7d:ec:46:a0:26:ec:08:12:6b:cb:30:09:a1:0e:35:
62:79:a6:cb:a6:60:74:7a:da:ea:fc:1c:eb:e2:52:71:60:2d:
f5:ab:32:11:36:8f:e1:f1:83:f8:9a:a7:a8:63:32:b0:26:7a:
59:cb:8f:e1:ff:50:e7:28:88:fc:97:75:db:06:f9:ce:b8:97:
2e:10:50:fd:c2:50:16:1c:e0:90:03:79:00:9e:c5:2f:fe:d0:
89:33:95:bb:f5:a0:10:29:e1:fb:9c:76:8d:33:32:4c:96:3e:
3d:16:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org