Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I1bss2dkeUyWnfd7Frgf5YkxWpU.roa
File: I1bss2dkeUyWnfd7Frgf5YkxWpU.roa (raw, json)
Hash identifier: Aat0ShNr+ChAvZ1xCQjr564XX0HOxsToCMgiBcBkdT4=
Subject key identifier: 23:56:EC:B3:67:64:79:4C:96:9D:F7:7B:16:B8:1F:E5:89:31:5A:95
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6BA18EC98F200377FF980FC8227BB
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I1bss2dkeUyWnfd7Frgf5YkxWpU.roa
Signing time: Mon 01 Jan 2024 06:29:41 +0000
ROA not before: Mon 01 Jan 2024 06:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 88.209.229.0/24 maxlen: 24
88.209.244.0/24 maxlen: 24
88.209.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ba:18:ec:98:f2:00:37:7f:f9:80:fc:82:27:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2356ecb36764794c969df77b16b81fe589315a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:7d:bb:94:de:09:35:e0:11:dc:70:fb:39:
e6:55:cb:2c:4b:3f:a6:da:3f:70:ef:78:fc:7d:7c:
da:cf:f7:d3:10:32:3a:9d:de:f7:b9:8d:f1:bd:38:
f9:86:4f:d0:80:a6:e5:88:54:57:64:b8:c9:e0:ff:
44:ec:ba:23:2a:3b:8c:e1:db:f3:9d:3d:98:2b:99:
d2:5f:85:b6:73:82:1a:29:24:5b:b8:c8:c3:4c:0e:
88:0e:18:6a:63:0f:ff:0c:25:b3:4d:48:07:11:8d:
30:2d:5a:93:18:4e:af:1b:4b:67:76:92:fb:97:1f:
ec:bc:2d:e9:93:ff:06:0a:ba:79:bd:7f:a8:62:56:
a6:55:b2:5e:b7:49:7e:db:4b:41:28:0f:71:71:e0:
57:40:66:85:e2:64:cb:88:bf:bf:95:bd:63:33:49:
29:33:95:7b:30:d4:c1:c2:b2:47:e7:2c:67:7f:1d:
5a:ed:72:44:cf:00:72:85:9d:78:5f:07:0a:10:d4:
77:55:70:56:06:86:a1:66:8d:6f:0a:f0:80:55:c6:
4b:25:02:51:04:91:08:98:96:da:e3:f8:17:27:ba:
ea:90:39:f8:91:58:e0:c2:4f:f8:5d:17:52:32:c3:
6a:08:32:6a:5b:a7:6b:99:b4:98:43:1c:86:df:85:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:EC:B3:67:64:79:4C:96:9D:F7:7B:16:B8:1F:E5:89:31:5A:95
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I1bss2dkeUyWnfd7Frgf5YkxWpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.229.0/24
88.209.244.0/24
88.209.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:45:c5:12:72:12:3a:31:1d:22:61:93:0f:c1:80:a3:03:84:
d3:5f:74:be:72:9f:f4:35:bd:b6:18:d2:68:6d:70:a7:0f:77:
f0:c6:6c:da:ab:96:e7:8b:b9:5a:e0:c6:8b:26:2c:44:22:d3:
26:a7:8d:7b:15:79:90:57:22:eb:04:b8:6b:a5:56:b3:33:dc:
af:3a:b5:43:1d:df:6b:2d:6c:25:d7:5e:17:ee:1c:62:49:e1:
46:93:90:9b:6a:f2:1b:84:df:5d:13:47:66:9f:17:93:24:bb:
12:01:65:f4:b6:b9:6a:16:8f:ad:f4:c0:f9:f1:db:a8:f4:57:
bb:27:55:12:4b:12:13:8e:9e:b4:c4:29:73:43:3c:c6:1d:e4:
46:c8:6a:32:79:70:d7:08:94:a3:db:92:ba:98:50:86:78:76:
8a:7d:40:b3:2c:4d:0a:5f:6f:c9:c5:c6:23:df:f6:f1:e8:51:
a2:ff:e1:5c:80:18:b9:5b:56:89:ea:cc:bc:0b:7e:64:ed:bc:
e3:54:f3:45:a2:5f:93:30:1b:46:6c:1f:bc:66:60:24:8b:74:
87:30:94:fd:f1:e4:d8:46:50:f5:e9:d6:6f:29:ce:1c:0b:1f:
58:99:f0:22:8f:6b:2b:db:10:d8:43:79:67:74:21:db:bd:ef:
dc:db:db:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org