Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Fr29O40qXb-9fc8ydOhJBieV2aI.roa
File: Fr29O40qXb-9fc8ydOhJBieV2aI.roa (raw, json)
Hash identifier: 15GmRfm8uV2BFL4Msmu3knAbpswcvUSGD42rn8KEKtA=
Subject key identifier: 16:BD:BD:3B:8D:2A:5D:BF:BD:7D:CF:32:74:E8:49:06:27:95:D9:A2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188A0C5BB300ECFC728C64DA269BABA3EE4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Fr29O40qXb-9fc8ydOhJBieV2aI.roa
Signing time: Fri 09 Jun 2023 15:28:12 +0000
ROA not before: Fri 09 Jun 2023 15:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 88.209.203.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:c5:bb:30:0e:cf:c7:28:c6:4d:a2:69:ba:ba:3e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 9 15:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16bdbd3b8d2a5dbfbd7dcf3274e849062795d9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:f0:0a:9d:62:b6:44:8f:88:29:94:d4:0f:
18:82:1d:cf:41:3c:90:3d:9f:4a:e6:a5:7e:bb:54:
47:7b:e2:11:21:e1:a5:d2:a0:bc:35:2b:ca:9c:64:
86:67:3b:a6:63:c6:32:fb:0f:7d:b2:f3:85:aa:46:
61:ea:00:b3:3a:fe:30:d3:f8:4f:74:c6:e1:df:4c:
05:c2:a4:3c:5a:5b:00:4b:04:58:96:d8:a1:e3:01:
57:fb:e5:a7:b2:d1:88:7a:ca:90:b2:6c:50:0c:12:
47:23:6d:59:d1:13:c2:03:d2:fa:c2:09:2f:e8:fc:
62:37:6e:8c:cd:6d:9c:e5:a0:cc:e1:45:11:17:e3:
ae:c8:79:a7:18:9b:33:d9:fe:3d:c7:e6:53:fa:05:
70:de:78:9d:a4:cf:af:3b:64:a0:0a:02:04:65:a2:
a9:e4:e2:b0:b0:48:61:46:ba:77:4c:20:c1:63:a6:
19:df:96:25:67:dc:be:36:3b:ba:30:b2:1a:b8:88:
4c:98:70:f9:44:ba:64:c3:05:b9:e0:7b:09:20:9a:
1f:72:af:bf:03:ba:9d:c1:2e:cc:37:9d:28:ab:60:
1d:eb:3e:7c:86:34:d7:f6:98:a4:a8:51:85:1f:3a:
7f:ec:35:84:5f:d5:00:00:2e:88:e8:fd:8b:cc:6b:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BD:BD:3B:8D:2A:5D:BF:BD:7D:CF:32:74:E8:49:06:27:95:D9:A2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Fr29O40qXb-9fc8ydOhJBieV2aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.203.0/24
88.209.216.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d1:b3:e0:52:fb:98:7b:95:80:30:d9:31:a2:1f:f5:7e:78:
e9:88:a3:e5:8e:71:11:e9:1f:df:82:c1:1b:71:10:ca:50:2f:
ed:a8:a3:a8:cd:df:23:a3:7b:05:32:d1:42:0f:4f:61:f9:14:
61:70:3a:31:bf:83:b5:06:0f:b2:64:e4:65:62:c8:20:6c:0a:
21:a1:70:df:ce:f4:d3:cc:66:00:60:b6:6c:dd:0d:1e:10:12:
89:48:43:8e:8b:fe:89:cd:d8:b6:33:2f:8b:fb:8b:c2:26:1c:
43:15:39:cc:6c:a3:43:0e:d9:3b:9f:90:ec:37:7d:e0:6d:0f:
b6:e6:9c:11:9e:94:f9:cf:fe:07:30:ff:68:39:2f:69:1c:76:
3f:b3:25:27:b7:5f:4a:8e:90:73:d5:fc:53:0e:58:c3:69:3b:
d2:9e:74:6f:d4:4a:de:08:66:79:1a:0d:01:5c:8a:d4:62:80:
de:16:91:d2:cd:b2:1d:03:3b:e7:59:1c:2a:99:78:20:49:35:
a5:88:f7:d8:45:ab:4a:88:1d:9e:16:db:77:3a:96:9e:ee:e3:
65:2f:85:ed:91:a9:9a:90:1d:fb:0c:54:17:3d:38:9a:c3:f1:
d7:c2:cb:d8:a8:5d:52:4d:9c:c4:28:53:b2:53:6f:fc:be:3a:
96:49:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org