Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EKRnKrQ0okCm8dkTL24QlIl18Qc.roa
File: EKRnKrQ0okCm8dkTL24QlIl18Qc.roa (raw, json)
Hash identifier: tQ6IUR5j6f2QZInWWCr6dsq7VFsHXA36/0Fat26fAFk=
Subject key identifier: 10:A4:67:2A:B4:34:A2:40:A6:F1:D9:13:2F:6E:10:94:89:75:F1:07
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6BEA49F9BFCCD552447E566EB853F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EKRnKrQ0okCm8dkTL24QlIl18Qc.roa
Signing time: Mon 01 Jan 2024 06:29:42 +0000
ROA not before: Mon 01 Jan 2024 06:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198427
IP address blocks: 88.209.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:be:a4:9f:9b:fc:cd:55:24:47:e5:66:eb:85:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10a4672ab434a240a6f1d9132f6e10948975f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:19:23:cc:00:7f:6b:37:c4:69:3d:81:3b:
65:a8:18:de:f3:c6:19:ec:5e:a3:4b:37:7e:28:04:
64:20:0c:d4:2e:07:62:0a:04:ee:3b:47:6a:f0:67:
d8:88:b7:83:bb:21:cf:ea:be:ac:60:bd:46:bb:76:
28:2d:52:63:55:6c:f8:37:88:62:69:35:da:b0:d2:
bd:77:b7:5e:44:f1:48:92:9a:41:03:51:61:4e:79:
10:df:57:83:10:e9:ad:e0:94:dd:4b:2a:40:9a:02:
37:12:78:63:ae:fc:c5:17:02:75:52:e0:d8:7c:cf:
1e:9d:8d:4f:65:4f:f9:21:a2:79:9e:33:48:f0:d6:
9b:d9:1c:6e:1e:ee:3d:d5:30:4f:d4:68:81:a8:81:
e7:32:5f:6e:c3:4d:fb:a1:93:3a:f8:0c:d0:18:b5:
41:bf:a8:7f:fc:b0:3f:36:c8:8f:71:e6:57:80:21:
4a:d9:d9:43:35:40:66:4d:06:bc:de:3b:e1:bb:2f:
60:f1:08:29:14:45:87:92:f3:df:a5:1b:b5:36:08:
9f:88:7f:bf:b7:36:7f:ae:0f:06:d4:ea:54:31:b0:
0b:d4:0d:8d:b8:9d:21:71:f6:6d:e5:81:45:0a:c7:
6c:a1:88:22:2d:5b:71:12:3f:13:cf:9b:e2:c7:18:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:67:2A:B4:34:A2:40:A6:F1:D9:13:2F:6E:10:94:89:75:F1:07
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EKRnKrQ0okCm8dkTL24QlIl18Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.205.0/24
Signature Algorithm: sha256WithRSAEncryption
93:09:36:7f:92:42:d7:30:f7:96:09:d7:24:dc:06:6d:64:06:
c5:c0:70:98:dd:40:70:93:73:ae:c0:fa:2d:f3:9d:10:4d:ae:
63:85:1a:c9:c9:b9:47:95:59:b4:4d:ca:8e:68:32:0d:1c:65:
28:9a:00:03:d4:4e:3e:03:f8:b5:d6:ff:84:ab:b7:d7:72:80:
a7:89:21:9c:60:4d:01:c7:85:f7:ee:9d:c7:53:a7:da:26:aa:
42:77:1a:d5:32:66:9e:10:ed:eb:00:eb:e0:a6:c3:67:97:43:
2d:7c:13:20:ad:ea:93:f4:25:38:03:24:f5:b1:a6:41:6b:fd:
9f:2d:ef:9b:c8:b3:99:8d:e9:c5:af:66:fe:a7:8d:f1:4c:4a:
e5:fb:65:35:c7:ac:65:73:b9:0f:cb:eb:b3:19:16:66:29:71:
91:3c:94:ea:6c:45:d4:e0:fa:6b:bd:95:1f:cf:c9:6d:90:0f:
ed:74:ce:76:81:90:b6:11:9b:da:c4:85:79:3a:d4:dd:59:f8:
3a:d8:2e:88:c4:44:7f:df:36:0e:77:61:bd:8b:d3:bd:45:27:
a2:7a:67:10:6e:c0:01:a2:e8:7f:ad:fd:b8:ca:c2:5f:ba:aa:
b0:35:54:27:49:98:6b:2b:0b:71:f2:2b:14:6d:20:ba:53:59:
07:3e:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 18:13:33 2024 by rpki-client on console-ams.rpki-client.org