Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9BTEoejZXVuw01PRXwqrWMg_6Ts.roa
File: 9BTEoejZXVuw01PRXwqrWMg_6Ts.roa (raw, json)
Hash identifier: 5TB3/4PlpY5dPb49ciSWiy4bOjqGKz6T9pKZRHz8a54=
Subject key identifier: F4:14:C4:A1:E8:D9:5D:5B:B0:D3:53:D1:5F:0A:AB:58:C8:3F:E9:3B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0185E32C21770E7058D68C3D3BF48B682CE9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9BTEoejZXVuw01PRXwqrWMg_6Ts.roa
Signing time: Tue 24 Jan 2023 09:46:38 +0000
ROA not before: Tue 24 Jan 2023 09:46:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 88.209.244.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:2c:21:77:0e:70:58:d6:8c:3d:3b:f4:8b:68:2c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 24 09:46:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f414c4a1e8d95d5bb0d353d15f0aab58c83fe93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:b7:a7:5b:ff:93:0e:b7:ce:cb:4c:a7:33:
91:fc:ff:a1:53:6d:ba:a7:4b:cc:41:b8:3e:06:1c:
5a:98:b2:e8:3a:52:fe:a1:f1:d2:64:11:5c:21:59:
99:7e:7c:16:0d:eb:d8:b1:05:35:6b:4b:0e:30:9b:
aa:49:5a:e0:e1:9f:7f:20:c9:fb:ba:27:93:86:5d:
20:75:22:53:b0:42:f2:8b:40:29:41:d5:7a:44:57:
37:3c:c9:2a:0f:9c:2c:8d:d0:08:54:cf:04:79:c3:
f8:fc:82:82:d9:a4:bf:2a:de:09:c7:03:62:56:e6:
1a:a9:0f:57:5a:0d:1b:66:de:ca:7f:e0:23:87:c0:
42:50:b0:59:f5:33:f0:22:c0:5a:a7:df:4a:69:b1:
6a:5b:2c:8c:07:77:ed:8d:2b:ae:fd:3e:57:43:56:
21:ea:f2:a0:b9:94:87:3d:d4:2e:14:3a:cc:56:bc:
c9:ae:41:bf:73:5a:bc:e6:f9:fb:24:d1:58:b4:b8:
08:d3:37:63:bf:ea:7f:98:45:09:9b:29:5a:47:92:
44:1d:5e:0e:3b:af:31:17:4e:44:de:3c:98:00:14:
8e:dc:84:14:7c:25:55:e9:c8:80:4d:66:95:30:e8:
aa:8f:f4:ad:f5:39:e5:55:3c:ba:d5:b8:de:90:30:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:14:C4:A1:E8:D9:5D:5B:B0:D3:53:D1:5F:0A:AB:58:C8:3F:E9:3B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9BTEoejZXVuw01PRXwqrWMg_6Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/24
88.151.58.0/24
88.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1d:69:d7:e2:d1:99:90:ed:8e:41:aa:bc:0d:5b:4e:93:c1:
3e:ca:d6:6a:48:07:51:47:a5:4b:c4:04:b2:f4:30:d8:f0:8d:
e9:12:c8:be:ee:ae:8c:20:94:8f:2f:cd:ca:d9:1d:bb:01:17:
5b:42:e2:e2:c3:bc:2b:89:19:30:15:b1:d1:9b:d3:8e:c1:8b:
e0:fe:fe:d2:90:f8:dc:2d:ff:d5:b9:d8:36:43:1a:a6:87:aa:
f6:a4:b0:05:98:78:ab:88:fa:ca:50:42:65:fb:8c:01:97:a4:
e0:d8:ef:37:1d:23:ba:d1:b3:57:d0:2d:0f:7d:34:69:b7:46:
5a:6a:79:98:99:30:1f:19:94:9c:3d:d8:d7:c7:d3:52:ef:43:
e3:7b:fb:6d:b2:3e:de:bc:4b:f9:d5:da:91:8b:fe:0b:11:f5:
c2:fc:55:35:c7:91:c8:e6:7d:26:5a:ef:1c:09:a5:d3:47:3d:
d8:51:fb:d1:b5:ab:c5:da:06:ad:f5:a2:65:ca:21:e3:45:02:
d4:c2:14:ac:b2:8d:e6:c1:15:96:b1:d7:fb:fb:d1:55:9e:fe:
e4:93:07:e9:ab:4b:87:3e:09:1d:5b:44:31:fb:9d:5f:41:3e:
3c:c1:97:31:c5:9b:ff:2c:51:63:58:db:3a:da:b0:45:fe:f3:
dd:31:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org