Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/C9blz0_p_NMrvq08MaEqn6Qf_UU.roa
File: C9blz0_p_NMrvq08MaEqn6Qf_UU.roa (raw, json)
Hash identifier: PSwL/fZjlKz8Wo1jKRxhtyUxxjc2RYFE3C+nct3Lhjw=
Subject key identifier: 0B:D6:E5:CF:4F:E9:FC:D3:2B:BE:AD:3C:31:A1:2A:9F:A4:1F:FD:45
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01864ABDB128D57DE578D48D57A2516C58F6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/C9blz0_p_NMrvq08MaEqn6Qf_UU.roa
Signing time: Mon 13 Feb 2023 12:26:30 +0000
ROA not before: Mon 13 Feb 2023 12:26:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 88.209.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 10:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:bd:b1:28:d5:7d:e5:78:d4:8d:57:a2:51:6c:58:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 13 12:26:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bd6e5cf4fe9fcd32bbead3c31a12a9fa41ffd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1a:1a:9a:7e:08:9b:94:96:80:0d:17:89:d7:
42:8d:0f:61:a0:87:6a:1f:3b:fc:85:e5:71:29:3c:
01:f4:78:12:88:45:71:4b:f7:e7:b9:3f:d8:17:ca:
67:ff:10:9c:65:8a:15:b9:d7:be:cd:dd:c5:76:3a:
86:e3:ee:f8:1b:ac:cf:b5:d9:22:7c:ec:0a:60:94:
fe:21:13:43:f9:1f:5b:91:62:8c:fb:cb:53:c0:28:
39:fb:66:cc:e8:c4:db:dd:55:ba:60:62:e7:f6:b7:
98:a2:e4:f8:aa:81:47:8f:57:40:0c:3e:12:d8:41:
c2:a6:d6:1f:9a:b3:2e:7c:48:1c:5e:9d:b0:fb:29:
63:e3:e1:54:df:35:36:ea:99:d8:03:70:d2:4b:89:
07:29:46:85:63:af:96:92:6e:a5:ed:01:2a:51:d9:
0d:c4:c2:49:1e:f3:5c:bb:fb:d3:12:0b:55:5e:ef:
80:38:f1:11:9e:41:77:5f:57:42:06:6f:27:5e:4d:
f6:b9:0e:b2:bc:2d:18:9b:00:18:7c:48:98:de:73:
77:69:cf:0f:c0:95:fd:5c:25:c4:0d:a7:0b:b6:5a:
4a:6e:0a:e3:a4:cd:74:d4:66:bf:16:5f:b4:47:48:
3e:20:5b:0f:c5:69:1f:ba:4f:30:82:c1:96:fb:76:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D6:E5:CF:4F:E9:FC:D3:2B:BE:AD:3C:31:A1:2A:9F:A4:1F:FD:45
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/C9blz0_p_NMrvq08MaEqn6Qf_UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.223.0/24
Signature Algorithm: sha256WithRSAEncryption
72:47:86:a4:63:09:f2:a2:a4:cd:5e:18:ad:d5:a2:3a:c2:ce:
50:b6:02:44:81:af:75:41:3b:f3:de:a8:72:9a:a1:3c:3c:0b:
cd:f6:e4:39:e0:70:0c:9e:28:27:59:18:ef:31:bd:58:a0:53:
3f:56:7c:ff:f1:81:cf:d0:54:2c:5a:fc:12:91:71:d9:2a:a9:
c3:da:cf:25:c9:8d:b4:28:05:b7:0f:e4:45:f1:c8:aa:bc:d8:
26:34:8b:9e:87:2a:b9:c4:68:65:01:1e:8e:65:0a:98:bd:c6:
48:ac:e9:84:66:42:a8:0f:5d:f9:71:cf:d4:77:c6:39:ce:19:
90:df:4a:0b:62:0a:9c:e3:8f:38:2a:fa:77:41:99:80:0b:eb:
fe:e4:42:89:6c:4f:68:e9:95:c4:8d:44:21:4f:ab:e0:7f:f3:
7b:f9:ea:72:45:49:83:1b:b9:bf:6c:f9:c3:64:6c:39:07:48:
fa:94:96:48:86:b0:6c:7a:88:0d:80:71:57:97:a7:a3:49:c6:
12:69:6c:4b:ca:c6:e8:6c:5e:ee:9a:bc:ac:a8:39:35:52:e7:
c5:87:e1:97:48:e6:c6:18:fa:2f:15:f1:7d:a5:84:6c:45:65:
27:d6:03:fc:74:86:3e:5b:1d:bb:7a:67:45:a4:a4:e7:20:2d:
72:e3:3f:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZKvbEo1X3leNSNV6JRbFj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwMjEzMTIyNjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmQ2ZTVjZjRmZTlmY2QzMmJiZWFkM2MzMWExMmE5ZmE0MWZmZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxoamn4Im5SWgA0XiddCjQ9hoIdq
Hzv8heVxKTwB9HgSiEVxS/fnuT/YF8pn/xCcZYoVude+zd3FdjqG4+74G6zPtdki
fOwKYJT+IRND+R9bkWKM+8tTwCg5+2bM6MTb3VW6YGLn9reYouT4qoFHj1dADD4S
2EHCptYfmrMufEgcXp2w+ylj4+FU3zU26pnYA3DSS4kHKUaFY6+Wkm6l7QEqUdkN
xMJJHvNcu/vTEgtVXu+AOPERnkF3X1dCBm8nXk32uQ6yvC0YmwAYfEiY3nN3ac8P
wJX9XCXEDacLtlpKbgrjpM101Ga/Fl+0R0g+IFsPxWkfuk8wgsGW+3ZyCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvW5c9P6fzTK76tPDGhKp+kH/1FMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvQzlibHowX3BfTk1ydnEwOE1hRXFuNlFmX1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHfMA0G
CSqGSIb3DQEBCwUAA4IBAQByR4akYwnyoqTNXhit1aI6ws5QtgJEga91QTvz3qhy
mqE8PAvN9uQ54HAMnignWRjvMb1YoFM/Vnz/8YHP0FQsWvwSkXHZKqnD2s8lyY20
KAW3D+RF8ciqvNgmNIuehyq5xGhlAR6OZQqYvcZIrOmEZkKoD135cc/Ud8Y5zhmQ
30oLYgqc4484Kvp3QZmAC+v+5EKJbE9o6ZXEjUQhT6vgf/N7+epyRUmDG7m/bPnD
ZGw5B0j6lJZIhrBseogNgHFXl6ejScYSaWxLysbobF7umrysqDk1UufFh+GXSObG
GPovFfF9pYRsRWUn1gP8dIY+Wx27emdFpKTnIC1y4z/0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org