Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/B1dh44nlMmFrSIoeLkaZvJTUm4k.roa
File: B1dh44nlMmFrSIoeLkaZvJTUm4k.roa (raw, json)
Hash identifier: h0gfsQ0Iqk3MNydftIcUgV4aTBlnayCy+kVSYj6gmPs=
Subject key identifier: 07:57:61:E3:89:E5:32:61:6B:48:8A:1E:2E:46:99:BC:94:D4:9B:89
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018866AE14C37D8CFF1220B56A7C75943204
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/B1dh44nlMmFrSIoeLkaZvJTUm4k.roa
Signing time: Mon 29 May 2023 08:44:24 +0000
ROA not before: Mon 29 May 2023 08:44:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198427
IP address blocks: 88.209.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:ae:14:c3:7d:8c:ff:12:20:b5:6a:7c:75:94:32:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 29 08:44:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=075761e389e532616b488a1e2e4699bc94d49b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:8f:60:79:0e:16:81:c6:81:52:9d:4c:7f:
1a:10:19:a8:5e:ce:0d:aa:50:47:8b:d7:d0:bb:41:
48:05:34:b7:a0:d7:24:eb:a8:06:a3:c1:9d:59:ca:
b5:8f:fb:e9:c1:ee:a5:f7:8a:44:da:d0:66:5f:b7:
7c:38:d4:f7:fc:7c:ca:9a:63:2c:39:ff:68:92:6c:
d6:30:8b:73:64:18:75:35:1c:f7:c3:b1:96:56:3e:
f9:9c:50:1b:9b:66:96:74:b2:2b:ec:b4:30:e9:c4:
fc:a7:96:40:9e:07:20:8f:c7:e6:08:7d:45:4f:38:
9a:ef:ab:a1:38:4a:c8:33:89:44:34:2d:97:9c:ef:
14:5e:8d:75:ad:55:37:18:cb:05:6e:c6:64:f6:bf:
05:e7:4d:4e:63:86:83:50:c5:98:36:d2:af:18:a2:
a6:be:8e:23:67:8f:1a:97:d5:f8:e1:37:04:a4:c1:
e3:3b:04:9b:87:d4:e2:50:f8:3b:46:ea:2c:52:79:
67:ed:67:b2:f5:13:06:bd:6e:18:b2:1a:84:fb:a2:
27:29:4c:cb:e5:2e:d0:e4:1f:86:f1:19:dd:fd:6a:
da:42:aa:f3:8b:1a:50:d8:0d:9c:be:cb:ff:1c:42:
be:32:0b:6d:be:67:ee:85:30:16:74:96:86:cf:7c:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:61:E3:89:E5:32:61:6B:48:8A:1E:2E:46:99:BC:94:D4:9B:89
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/B1dh44nlMmFrSIoeLkaZvJTUm4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bf:a9:c4:c1:df:2a:33:92:ce:2b:b0:3f:55:00:83:e6:38:
b9:b5:0f:25:f4:66:72:20:a0:1b:f5:e4:3c:e5:51:43:b9:d3:
05:fb:26:e5:b3:12:8b:e6:e5:80:b7:f8:c5:e2:8f:69:7d:b3:
57:95:00:66:dd:cf:d6:2e:49:84:a4:39:92:8c:ed:13:a4:46:
ae:75:e6:3a:eb:41:db:9b:67:f9:1a:0b:2b:1c:1a:55:ed:ab:
2f:16:6e:ff:19:a5:af:00:28:6f:71:86:c7:e2:69:42:28:6c:
6b:6e:e5:cb:14:52:f6:56:22:5c:73:a1:74:b1:b7:c2:b7:b8:
35:89:b7:e6:2f:5e:ec:ec:52:dd:9f:ac:42:5a:7d:5b:1d:2d:
9d:7f:91:65:1e:33:5f:54:29:51:3a:e6:64:d7:61:84:57:44:
6c:1b:81:17:d0:83:ef:89:18:21:a7:6b:39:07:32:ce:fd:a9:
5a:13:53:9c:60:7a:93:83:89:5c:ff:78:62:ee:41:07:20:d8:
24:2c:38:61:01:37:95:58:a0:0f:97:6f:ec:b9:84:3b:e3:b0:
b7:ce:bb:b7:5c:46:81:2b:d5:97:70:6d:3f:52:97:39:20:67:
fb:55:7b:18:54:04:7c:87:99:7e:ae:b5:82:3b:a5:ea:28:c7:
28:93:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:55 2024 by rpki-client on console-ams.rpki-client.org