Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8vT52rBF3D9C-yIVd4i6TjxXjEY.roa
File: 8vT52rBF3D9C-yIVd4i6TjxXjEY.roa (raw, json)
Hash identifier: 4pRNy5Kuka5kg88+5Lsb91lJmvfiBJN1qjtObQijixU=
Subject key identifier: F2:F4:F9:DA:B0:45:DC:3F:42:FB:22:15:77:88:BA:4E:3C:57:8C:46
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0185A11631D0C1182D318B478E92A6B0A6F9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8vT52rBF3D9C-yIVd4i6TjxXjEY.roa
Signing time: Wed 11 Jan 2023 13:47:44 +0000
ROA not before: Wed 11 Jan 2023 13:47:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:16:31:d0:c1:18:2d:31:8b:47:8e:92:a6:b0:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 11 13:47:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2f4f9dab045dc3f42fb22157788ba4e3c578c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:a9:ca:ed:8f:c0:7d:90:76:da:62:a2:bc:
11:51:f8:d7:7a:46:e1:a7:03:3c:cd:5a:53:09:28:
e0:87:6b:bc:ba:57:91:65:29:e6:ab:f4:0a:b0:66:
85:7b:80:68:92:36:c3:d9:5b:32:06:91:af:d2:f6:
48:9d:d5:c0:84:1c:77:de:c7:97:31:0f:e0:34:0a:
a0:a4:a8:14:11:e2:6a:23:c4:d3:3c:dc:37:d3:63:
02:cb:d1:f3:7d:8b:8a:df:1d:6d:85:da:6c:bc:ea:
31:a3:1f:22:12:4d:70:75:a5:98:ef:07:de:d9:79:
58:67:4a:99:fd:7d:b4:b6:35:53:d5:32:3e:89:1e:
aa:cc:6d:53:ac:36:71:11:9a:83:ea:30:75:aa:7f:
a9:4e:85:a0:8f:ce:ab:7d:39:bb:a0:1d:fb:f3:e8:
6f:7f:01:2f:02:02:e5:ec:c7:ba:d1:f3:a8:bc:73:
9e:48:80:03:2c:f4:3e:63:a2:28:18:1b:29:ad:42:
ba:0b:5e:80:9d:a6:2c:5a:97:7d:40:ca:c5:0f:e5:
91:46:02:1e:ef:08:e3:ba:ac:a4:fa:e3:4c:74:18:
96:1b:7f:90:b7:86:06:1a:a0:6b:e1:22:70:eb:d3:
9c:1a:4b:7a:76:33:82:e8:91:6c:54:71:f2:5e:ec:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F4:F9:DA:B0:45:DC:3F:42:FB:22:15:77:88:BA:4E:3C:57:8C:46
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8vT52rBF3D9C-yIVd4i6TjxXjEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.249.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c6:f8:49:b0:f1:87:6f:82:43:73:8a:a7:3c:81:e7:ce:77:
de:e9:83:53:16:67:4b:ee:37:98:a8:fc:49:35:47:e3:c4:2f:
94:8b:57:3f:13:58:8a:29:e8:fa:ad:aa:c2:ce:76:6f:de:86:
a0:6f:3a:d3:04:bc:6d:72:13:c1:99:4d:89:93:2d:f4:16:6a:
08:bc:9a:21:3f:fb:a7:27:a4:11:9f:e5:e4:90:1c:a5:89:12:
2f:10:dc:ad:21:fb:19:b9:d1:08:f9:99:47:44:f1:eb:01:78:
ae:19:5d:fb:8c:3a:94:bd:ae:17:2e:e3:ed:73:b5:c4:15:83:
e5:86:07:3f:c7:c4:46:25:fd:1f:48:dc:72:81:21:54:a1:42:
77:71:d3:09:b0:70:47:f2:1f:91:aa:c8:9f:73:40:48:17:9d:
a6:70:ad:3d:16:f4:01:90:0f:90:f8:54:55:5b:a3:fd:b6:01:
13:7e:76:4c:49:5f:68:5a:f1:e2:cd:3c:fb:ed:7d:39:6a:c3:
c3:9b:a5:d5:e5:94:41:1d:7e:6e:2d:7f:3f:7c:98:99:88:8c:
33:3b:be:90:81:63:b8:4c:f9:61:51:87:74:8a:3d:5b:0c:98:
bc:23:ef:4b:8c:6f:22:f0:35:d5:76:b0:32:3e:57:4d:8c:f0:
21:ff:79:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWhFjHQwRgtMYtHjpKmsKb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwMTExMTM0NzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmY0ZjlkYWIwNDVkYzNmNDJmYjIyMTU3Nzg4YmE0ZTNjNTc4YzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuqpyu2PwH2QdtpiorwRUfjXekbh
pwM8zVpTCSjgh2u8uleRZSnmq/QKsGaFe4BokjbD2VsyBpGv0vZIndXAhBx33seX
MQ/gNAqgpKgUEeJqI8TTPNw302MCy9HzfYuK3x1thdpsvOoxox8iEk1wdaWY7wfe
2XlYZ0qZ/X20tjVT1TI+iR6qzG1TrDZxEZqD6jB1qn+pToWgj86rfTm7oB378+hv
fwEvAgLl7Me60fOovHOeSIADLPQ+Y6IoGBsprUK6C16AnaYsWpd9QMrFD+WRRgIe
7wjjuqyk+uNMdBiWG3+Qt4YGGqBr4SJw69OcGkt6djOC6JFsVHHyXuwQdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPL0+dqwRdw/QvsiFXeIuk48V4xGMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvOHZUNTJyQkYzRDlDLXlJVmQ0aTZUanhYakVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH5MA0G
CSqGSIb3DQEBCwUAA4IBAQA3xvhJsPGHb4JDc4qnPIHnznfe6YNTFmdL7jeYqPxJ
NUfjxC+Ui1c/E1iKKej6rarCznZv3oagbzrTBLxtchPBmU2Jky30FmoIvJohP/un
J6QRn+XkkByliRIvENytIfsZudEI+ZlHRPHrAXiuGV37jDqUva4XLuPtc7XEFYPl
hgc/x8RGJf0fSNxygSFUoUJ3cdMJsHBH8h+Rqsifc0BIF52mcK09FvQBkA+Q+FRV
W6P9tgETfnZMSV9oWvHizTz77X05asPDm6XV5ZRBHX5uLX8/fJiZiIwzO76QgWO4
TPlhUYd0ij1bDJi8I+9LjG8i8DXVdrAyPldNjPAh/3mr
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org