Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DAeLDNx3GM2UM-xpsafmzwWFID8.roa
File: DAeLDNx3GM2UM-xpsafmzwWFID8.roa (raw, json)
Hash identifier: qg5m7kngRlccqvXoIB6zXIv4M0GlF3a5LYYs5SAZ0Tg=
Subject key identifier: 0C:07:8B:0C:DC:77:18:CD:94:33:EC:69:B1:A7:E6:CF:05:85:20:3F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0189551E8D3ABD11D1B3BB97F5E726AE6010
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DAeLDNx3GM2UM-xpsafmzwWFID8.roa
Signing time: Fri 14 Jul 2023 15:56:52 +0000
ROA not before: Fri 14 Jul 2023 15:56:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 88.209.230.0/24 maxlen: 24
83.137.152.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:1e:8d:3a:bd:11:d1:b3:bb:97:f5:e7:26:ae:60:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 14 15:56:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c078b0cdc7718cd9433ec69b1a7e6cf0585203f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:27:a8:a6:64:84:45:4d:c2:1c:a5:88:f8:
f4:49:b0:1a:50:a5:85:62:7f:82:50:90:e1:04:59:
91:b4:f3:ad:94:94:6c:8a:f3:a0:a1:fc:02:ae:53:
d9:12:73:50:67:b3:5c:67:a6:56:93:08:de:f6:9e:
b0:b2:25:b7:80:f3:ee:3f:07:d4:f9:53:88:d0:00:
68:70:0d:b2:00:93:c0:81:da:43:ff:b0:11:8a:4e:
7d:0d:62:0c:2c:1a:44:d2:06:5e:f3:23:fc:ca:65:
8c:dc:d0:47:c5:f5:f4:5c:f7:b7:8f:44:0d:e9:a1:
36:b7:eb:e2:fe:2a:e6:ce:76:c7:94:8a:16:a2:97:
29:af:64:15:23:c9:48:9f:b0:55:08:60:12:7a:ef:
a3:10:ce:45:e5:0e:1c:46:8d:59:40:e8:fd:8e:c1:
87:38:33:fe:1f:c7:d8:b4:b0:6e:aa:72:aa:7a:5e:
0e:54:3f:c5:c1:cb:28:6f:6d:34:fb:5a:dd:c9:76:
14:8e:43:da:8a:d5:c4:e2:41:f4:fb:52:8a:0f:d0:
6d:c5:91:73:3d:d7:e7:c3:8a:db:ae:69:4d:59:d7:
03:fd:0b:67:3e:b5:a3:58:cd:2a:7e:1a:aa:1d:12:
ed:18:d1:90:26:fc:06:06:9b:2b:e8:51:54:05:af:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:07:8B:0C:DC:77:18:CD:94:33:EC:69:B1:A7:E6:CF:05:85:20:3F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DAeLDNx3GM2UM-xpsafmzwWFID8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
88.209.230.0/24
88.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7d:68:53:98:82:3f:38:9b:37:3e:c2:1e:b3:a7:1f:84:59:
69:b2:47:cb:ae:8f:f7:6d:06:2a:2f:80:ed:8f:b8:53:60:b5:
be:6b:cf:4d:53:85:6a:6d:34:69:9c:de:48:ae:4d:cb:d1:49:
0c:ad:4a:68:5e:6b:36:d8:71:f5:e1:03:36:eb:cc:67:58:f6:
aa:b3:9c:08:87:5a:e6:20:fb:77:68:bc:a5:a7:da:49:fb:08:
cb:b1:47:7d:1e:85:4e:f1:c2:7c:68:25:b4:f0:7f:8a:6a:2f:
45:b8:f3:c1:b4:1e:b9:a9:3d:eb:b8:ac:50:f7:49:79:e6:89:
50:a6:68:64:fa:80:54:8d:80:30:f4:44:6e:d4:54:73:ae:c4:
8f:24:34:c2:9a:b2:e2:c2:b6:16:07:a2:1c:51:ec:c3:95:d3:
d1:52:fa:4c:49:41:29:74:0f:c8:bd:72:43:f0:d4:b9:27:e1:
68:31:67:cd:f4:c0:8d:64:81:f0:f3:9f:64:41:f7:14:f9:bb:
b8:b5:37:e1:55:b6:65:57:5f:8d:d3:6c:a6:06:a4:bc:8e:a5:
76:cc:01:52:ec:4d:7b:5d:be:42:a3:5a:fa:ed:0d:68:0c:58:
15:c7:f9:ed:b4:81:66:06:17:80:c3:f0:ee:96:11:38:fe:60:
16:52:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:55 2024 by rpki-client on console-ams.rpki-client.org