Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BPT1fggtJTxzUMdbwkHOio5Vh2Q.roa
File: BPT1fggtJTxzUMdbwkHOio5Vh2Q.roa (raw, json)
Hash identifier: npSUfpZNSBs3Zwd9QYuRoI0uE2o6IGuVnhTgSLZlGLQ=
Subject key identifier: 04:F4:F5:7E:08:2D:25:3C:73:50:C7:5B:C2:41:CE:8A:8E:55:87:64
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018B38FE8747ACD2ED56E232BC6F0EA7A058
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BPT1fggtJTxzUMdbwkHOio5Vh2Q.roa
Signing time: Mon 16 Oct 2023 14:58:06 +0000
ROA not before: Mon 16 Oct 2023 14:58:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 88.209.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:fe:87:47:ac:d2:ed:56:e2:32:bc:6f:0e:a7:a0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 16 14:58:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04f4f57e082d253c7350c75bc241ce8a8e558764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:19:e8:b1:dc:e1:da:40:d7:00:3b:cb:26:
d8:1d:08:98:47:c0:75:c1:8a:e7:34:7e:27:54:7e:
0b:75:16:37:2e:4e:81:4b:15:ff:8a:04:96:4a:5f:
e9:67:44:9c:9c:59:e3:95:b6:35:ea:59:f3:b7:32:
67:8f:2d:94:32:d3:57:ed:10:f5:af:95:d5:f7:98:
0c:6b:a2:50:23:fa:27:ac:67:53:65:89:26:69:eb:
6c:bc:0d:27:6b:59:98:75:94:37:ec:19:7d:2e:f6:
98:06:8f:5d:0f:09:4b:e9:05:eb:00:12:19:25:0a:
fb:5f:d7:a5:1c:fa:3e:9f:47:bd:07:a9:7e:51:b7:
4a:82:4b:13:95:c8:b2:9f:d5:b9:54:6c:e3:d6:af:
27:a0:15:74:37:95:29:dc:20:4d:a0:59:19:89:10:
fb:14:f9:6d:b9:65:98:8c:72:21:9e:45:f4:bc:de:
eb:c8:7e:cd:95:bb:b7:4d:6a:10:38:37:ae:61:63:
2c:df:40:f7:33:f5:43:22:b4:14:3d:71:94:29:44:
f0:46:00:4d:ba:a0:30:39:86:6e:48:56:a4:b1:e0:
c7:57:c3:db:23:4f:05:7e:a6:61:ab:aa:61:5a:3c:
35:a2:ff:27:42:db:81:ba:47:7a:a0:c1:cd:0b:5f:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:F5:7E:08:2D:25:3C:73:50:C7:5B:C2:41:CE:8A:8E:55:87:64
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BPT1fggtJTxzUMdbwkHOio5Vh2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2e:cd:b7:e7:ab:de:f8:99:84:87:6f:b1:4e:f3:b5:52:7e:
03:cd:d2:28:cd:4b:0b:04:99:54:2e:d8:b3:87:bc:e6:2e:2d:
97:e8:61:d3:ff:8c:58:03:33:4c:03:17:6f:a9:b1:ac:35:cb:
2b:9b:b4:4c:01:84:cb:46:f8:11:2e:65:65:80:7e:50:1d:8a:
00:51:c2:76:92:24:23:06:c3:bd:4b:14:57:bc:25:4e:0c:38:
75:3a:e8:a6:0d:58:99:4d:da:43:6b:27:3a:f3:e3:52:ae:b1:
57:60:64:ed:52:09:87:6a:0a:9f:10:e9:7d:13:e8:ad:a8:31:
71:02:d8:2d:bd:38:ab:43:fd:f7:ee:54:d1:bf:ac:b2:85:20:
b1:20:79:81:58:cd:9d:c1:f0:7b:64:ae:78:a9:60:59:a6:ef:
b4:94:13:98:83:c4:fa:c4:88:b2:11:02:76:1c:e1:0e:f0:85:
2a:2f:07:68:9c:91:8a:f1:50:cd:56:5e:cd:49:75:4e:dd:3f:
7f:5d:8c:ce:ed:a6:2e:85:e7:23:46:ee:b1:fe:fc:f1:dd:de:
74:56:81:78:05:f2:5a:e2:ea:fb:7e:09:55:2f:79:91:0c:f7:
2f:4a:74:c5:0c:a0:c6:4f:37:5e:5e:f5:fd:16:cb:28:04:f9:
f3:62:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:55 2024 by rpki-client on console-ams.rpki-client.org