Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GytjuxtMilmjFMZlHkzAFLewecc.roa
File: GytjuxtMilmjFMZlHkzAFLewecc.roa (raw, json)
Hash identifier: A2KPqfR7bZF9l2o9jComtEUoIMUxLCxDrdWCNby0LHY=
Subject key identifier: 1B:2B:63:BB:1B:4C:8A:59:A3:14:C6:65:1E:4C:C0:14:B7:B0:79:C7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7AE3564A47138F87446EB1972274C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GytjuxtMilmjFMZlHkzAFLewecc.roa
Signing time: Mon 02 Jan 2023 09:54:46 +0000
ROA not before: Mon 02 Jan 2023 09:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207236
IP address blocks: 88.151.56.0/22 maxlen: 22
88.151.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 14:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:ae:35:64:a4:71:38:f8:74:46:eb:19:72:27:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b2b63bb1b4c8a59a314c6651e4cc014b7b079c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:84:cf:80:f5:4f:b9:4a:c0:28:d0:68:b8:
ad:ff:0f:1c:f6:6a:0e:65:72:50:7b:78:43:c8:82:
47:f2:e6:3c:66:c7:75:6f:d1:38:cd:c5:1d:91:e7:
0d:7a:13:3e:26:3c:56:36:70:92:12:9d:e4:17:64:
66:45:47:2b:29:e2:b4:4b:79:ae:de:be:d6:40:7d:
e3:04:85:94:48:35:43:37:40:2c:bf:9a:a4:94:b4:
dd:f7:04:cf:16:e2:5a:78:07:8d:07:f0:dd:09:ff:
87:57:35:31:98:2d:65:72:15:a0:93:40:30:e9:06:
d5:15:e8:20:c3:3e:51:7b:29:ee:b4:4a:6a:8f:97:
8d:7c:bc:3b:11:dd:2b:07:99:b3:98:28:65:e8:91:
3f:86:38:22:13:d8:79:9f:e3:94:d5:24:90:22:55:
fd:3f:7a:a9:c5:88:7e:41:81:54:46:38:f0:72:c2:
70:d1:56:80:49:a6:1f:f0:4e:f1:1b:5d:19:dc:60:
33:b5:4b:ab:7d:41:98:c9:1f:65:d4:a5:85:50:bf:
2e:4f:35:ea:a3:5d:fd:23:d5:08:21:d0:ba:00:67:
ed:41:08:4f:84:03:64:38:ef:74:20:df:90:1f:60:
d7:36:b4:f6:fd:85:24:61:8f:24:ea:6f:9b:d2:6e:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2B:63:BB:1B:4C:8A:59:A3:14:C6:65:1E:4C:C0:14:B7:B0:79:C7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GytjuxtMilmjFMZlHkzAFLewecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0-88.151.60.255
Signature Algorithm: sha256WithRSAEncryption
20:06:a2:84:41:01:27:db:d0:5e:16:cc:d9:bc:91:1d:72:27:
d4:7a:3e:c2:39:b1:ba:81:9c:9d:79:f3:ce:41:b3:60:7d:34:
1d:05:87:ce:34:74:f1:d8:23:7b:b1:be:bc:11:66:55:73:9e:
93:79:65:56:ad:85:47:34:4a:4f:0b:38:4f:38:05:70:75:97:
3f:f6:2e:19:5a:23:4d:08:3e:cf:19:d3:73:82:28:98:24:7f:
ef:c2:f7:89:ba:49:44:30:56:08:fe:7a:8f:89:56:ca:ee:70:
bd:6f:cc:30:35:da:e2:d6:78:63:a9:63:53:4f:83:09:b5:05:
eb:69:06:c7:4a:7b:71:26:27:50:19:0c:4c:30:4e:5a:68:f3:
49:39:08:a4:b9:f8:b3:de:50:06:db:e4:1c:96:20:b6:18:a3:
9c:d8:d3:3b:43:95:df:a7:d0:62:6e:65:ed:c5:65:90:8f:6d:
26:24:3d:a3:fb:41:aa:ed:a5:83:cc:c7:6f:a9:84:49:da:e5:
2e:36:80:e8:74:53:3a:36:c2:5a:cc:00:fc:a9:db:f2:b5:1a:
c6:0e:1d:4b:bd:e9:4b:0f:48:30:ed:9d:0d:35:ff:34:13:97:
fb:58:cc:76:09:7a:dd:ed:ab:14:d3:ab:a3:dd:77:45:13:84:
b8:b4:91:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org