Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9W6ZvGJchE4meMoe6ewVAxTi__M.roa
File: 9W6ZvGJchE4meMoe6ewVAxTi__M.roa (raw, json)
Hash identifier: 3G2El9TxOFrDKDblkQUxv3mWqLlNoTUOOeURpZs4/S0=
Subject key identifier: F5:6E:99:BC:62:5C:84:4E:26:78:CA:1E:E9:EC:15:03:14:E2:FF:F3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0185ED6F9E18BB18AD2967E6ACA67364892D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9W6ZvGJchE4meMoe6ewVAxTi__M.roa
Signing time: Thu 26 Jan 2023 09:36:33 +0000
ROA not before: Thu 26 Jan 2023 09:36:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:6f:9e:18:bb:18:ad:29:67:e6:ac:a6:73:64:89:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 26 09:36:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f56e99bc625c844e2678ca1ee9ec150314e2fff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:c3:72:dd:5d:18:a5:de:2d:fb:59:09:3c:
d2:30:56:48:9d:36:84:51:ff:bd:b4:9e:70:f3:3a:
c5:35:49:00:fc:3c:0d:8d:5e:0c:d1:14:2a:ba:33:
11:bc:4c:6d:c2:b3:83:4e:06:42:49:78:4f:c1:62:
34:12:9c:4c:ff:4c:01:66:d7:6d:de:ce:a0:13:a7:
24:bf:a6:3c:36:3c:35:75:b3:12:5d:72:2e:1a:bf:
4e:f3:07:8f:c3:4a:2f:11:80:36:4f:32:1e:60:8c:
79:03:8a:39:34:80:c0:76:7f:7e:1e:48:c6:80:42:
0d:ab:c0:e7:90:01:5f:6b:ad:05:8d:8d:71:c9:68:
c5:7b:9b:25:62:7b:85:99:e2:7d:70:49:fd:64:4a:
82:92:0f:50:67:de:e8:2d:e4:e1:6a:d5:2d:f1:4c:
65:a4:a2:f0:da:00:29:be:f1:ba:94:a5:59:a7:8b:
38:94:77:1e:cf:7e:04:ec:c1:45:ef:d6:2e:55:ad:
30:66:51:a1:c1:e4:83:63:c3:d0:88:43:46:60:45:
79:63:c2:7c:c0:e6:40:1c:44:eb:a9:a1:57:4e:e5:
9e:36:57:63:62:1a:e8:f2:b8:b4:40:c4:d2:19:7e:
6d:71:e7:31:f0:78:43:50:05:d3:61:64:3e:dc:d5:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:99:BC:62:5C:84:4E:26:78:CA:1E:E9:EC:15:03:14:E2:FF:F3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9W6ZvGJchE4meMoe6ewVAxTi__M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:8f:f7:9b:19:6b:2d:1e:63:be:df:4d:23:05:58:48:69:7c:
e6:ca:03:9c:7d:b6:4f:44:a4:7b:4c:ed:11:59:20:5e:08:4f:
43:76:1b:f0:78:09:9b:26:13:b9:63:96:54:9f:2d:7e:36:75:
4d:ea:03:75:7e:1f:e7:1d:ac:1e:11:50:bf:f7:6e:08:13:00:
82:0b:4e:e5:76:5a:7e:04:4b:70:87:67:f4:e6:63:c7:68:0b:
ee:59:3e:56:42:7a:78:14:fc:f1:01:6b:d3:4c:96:82:4c:3a:
6e:36:1d:b2:51:b8:2d:00:76:f5:a9:e9:16:77:73:77:39:c5:
2a:c6:31:99:52:69:1c:7a:65:c5:cc:dd:f3:c0:d4:44:24:d3:
6b:f4:e7:d8:0a:71:7e:13:b5:4f:4e:f8:17:23:05:0f:37:1c:
cf:a5:65:f4:ad:e6:f0:35:5a:54:01:95:b1:ad:70:f0:a5:17:
a4:c7:89:fd:d8:1e:1f:16:4d:67:46:f2:45:0b:39:ce:89:67:
c5:64:33:7c:66:9a:53:1b:42:6a:2f:e4:59:be:18:7f:65:87:
cf:8d:1d:b8:03:84:22:98:6c:9e:f7:88:33:b7:43:19:aa:f0:
46:f9:fb:b5:c5:1e:93:2d:8f:70:00:2f:4f:06:c4:da:60:83:
e3:ec:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org