Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OU8GPnA2fEE4pfswzLh6Ct8ZaOI.roa
File: OU8GPnA2fEE4pfswzLh6Ct8ZaOI.roa (raw, json)
Hash identifier: QxL/tbS/vQDH3PsEbrJRtgKxihNbmoOppKNpA9Z+Qas=
Subject key identifier: 39:4F:06:3E:70:36:7C:41:38:A5:FB:30:CC:B8:7A:0A:DF:19:68:E2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A842D37C5D07A20329C9D6A9051C1C11E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OU8GPnA2fEE4pfswzLh6Ct8ZaOI.roa
Signing time: Mon 11 Sep 2023 12:17:50 +0000
ROA not before: Mon 11 Sep 2023 12:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 88.209.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:2d:37:c5:d0:7a:20:32:9c:9d:6a:90:51:c1:c1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 11 12:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=394f063e70367c4138a5fb30ccb87a0adf1968e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:9d:9f:9d:79:0e:2d:5a:10:eb:04:5f:a6:
cb:7b:16:ae:e6:67:87:f5:49:a6:88:d7:8c:76:06:
bf:c3:19:57:f2:00:fa:27:dc:52:0b:37:2d:61:a0:
e0:29:e1:ce:ed:df:61:f7:45:d2:2f:37:b0:f4:ea:
a0:48:80:df:96:d9:09:ee:65:ed:88:d1:59:5b:3f:
7e:f6:b5:08:ca:e5:71:04:a3:d7:58:fc:73:07:99:
88:d2:c9:ef:b7:09:1c:b0:e1:3a:f9:89:d4:33:87:
85:7e:bc:af:13:8c:07:1e:bc:e7:d8:08:7c:1d:7b:
75:46:a0:02:3d:9b:63:1e:66:a7:0e:1d:8d:7b:64:
1c:a0:70:6e:85:0b:74:1a:c5:c8:1e:18:c9:5c:ee:
2f:bc:be:43:1e:bb:61:f3:c5:99:01:9c:bc:60:3c:
bf:35:38:78:5c:9f:e2:30:3c:5e:5a:63:50:c4:f6:
57:7d:93:a6:95:b2:4c:e2:24:05:c5:3e:f6:b4:5c:
6f:70:53:80:74:f0:c1:26:e3:6f:0b:93:17:40:69:
9c:0a:56:38:f9:56:e1:9a:8c:44:59:4c:7a:17:73:
b6:bd:16:b1:32:fd:f4:dc:64:31:37:ed:42:24:77:
bb:d6:52:da:21:d4:90:f3:77:60:53:a8:75:44:a5:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4F:06:3E:70:36:7C:41:38:A5:FB:30:CC:B8:7A:0A:DF:19:68:E2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OU8GPnA2fEE4pfswzLh6Ct8ZaOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.201.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2f:1e:da:79:52:0f:68:02:d8:5c:ae:9d:ef:86:39:51:e4:
17:da:8a:82:5f:d6:6e:74:cf:da:da:3f:82:d1:c3:a3:60:d0:
0c:16:52:c0:7a:28:d1:27:dc:94:36:a2:c4:cd:fa:5b:3d:cf:
21:c9:ba:6d:30:aa:2f:33:40:39:ad:aa:77:9e:40:42:df:1c:
41:2c:e6:67:c1:3c:83:f5:89:50:20:ca:27:90:8a:ae:4f:eb:
8f:4b:9f:ec:40:0c:a7:2d:85:cb:f8:2f:20:41:a9:2d:cb:5f:
14:1a:f2:56:76:25:e4:a9:56:1f:88:37:f9:72:85:35:3a:95:
31:53:67:50:7a:69:91:7d:f3:5f:79:0d:5d:3a:f3:6b:e2:4f:
48:7d:37:5d:be:8f:8c:49:ca:e0:7b:25:1c:a1:5e:01:7c:1a:
d2:da:9e:8c:45:08:2f:c5:5c:09:b1:26:cd:58:07:a8:d1:a8:
0a:81:4b:f8:bf:67:b0:df:4e:26:49:d3:d2:bd:38:15:d3:7e:
bf:c0:b9:57:80:e8:e3:2c:12:1f:ff:42:d0:47:d9:80:a8:8a:
9b:59:8c:a7:78:d0:3b:0c:c1:88:97:7b:60:a0:5b:39:04:fa:
58:a1:a9:25:70:de:1b:3b:58:cb:5b:68:43:a5:32:d5:43:ab:
65:bd:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:20 2024 by rpki-client on console-fra.rpki-client.org