Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OiK-mG93-o6roOD2J397_VB4FRg.roa
File: OiK-mG93-o6roOD2J397_VB4FRg.roa (raw, json)
Hash identifier: nWH6MzL36CTtyXkKkFRMyF99WlXdF6wwlTADoD5lWP8=
Subject key identifier: 3A:22:BE:98:6F:77:FA:8E:AB:A0:E0:F6:27:7F:7B:FD:50:78:15:18
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01881E07D52FB04388842E62E119B82205D1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OiK-mG93-o6roOD2J397_VB4FRg.roa
Signing time: Mon 15 May 2023 06:10:09 +0000
ROA not before: Mon 15 May 2023 06:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 88.209.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 07:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:07:d5:2f:b0:43:88:84:2e:62:e1:19:b8:22:05:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 15 06:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a22be986f77fa8eaba0e0f6277f7bfd50781518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:8b:65:25:0b:82:c0:ec:7d:76:62:05:eb:
b5:a6:13:2a:68:c3:c7:20:35:ee:5f:fd:62:4d:44:
7f:0f:1a:21:13:59:c2:73:22:7d:2f:ad:80:b7:87:
2d:fd:79:ce:81:f4:e1:ad:a8:76:c1:79:cc:ea:92:
6d:b2:f1:5b:ee:b6:27:0f:25:bc:47:eb:7e:16:52:
fd:b1:4e:a2:a6:42:cf:76:be:ea:01:ac:45:b1:e3:
43:12:b7:fb:60:57:01:ea:d9:f0:1e:9c:59:b0:37:
9d:1f:67:b5:cb:73:e4:e5:3a:a0:93:50:17:de:d8:
c7:f8:fd:54:8a:c4:56:7c:52:5f:2a:f9:41:1e:58:
0f:3e:50:eb:7d:0e:73:0c:8e:6a:f6:2c:45:e3:74:
74:9c:bd:5f:d3:44:32:fd:b9:ce:88:3f:8f:32:2d:
98:4a:7d:ac:02:2c:a7:07:e4:4d:0b:bc:46:d4:47:
9c:78:24:06:3f:31:57:ea:5e:91:4a:6d:3e:f3:2c:
ff:eb:a6:13:58:92:1c:47:4c:51:52:0e:0b:6d:cc:
90:c8:92:9f:79:16:4c:4d:0a:07:e2:0b:fa:d2:4d:
ca:4a:f2:9c:a1:e6:73:2c:cb:19:74:7c:b3:e7:8b:
ae:b7:18:4b:8d:90:76:77:b3:e7:6a:51:60:f6:34:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:BE:98:6F:77:FA:8E:AB:A0:E0:F6:27:7F:7B:FD:50:78:15:18
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OiK-mG93-o6roOD2J397_VB4FRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4c:4b:dd:dc:c9:b7:63:b3:8b:9d:f6:7a:de:59:29:db:64:
27:04:6d:23:f4:72:ff:95:b0:8a:4a:dc:51:09:f3:31:23:9d:
68:e5:38:1d:1c:b1:73:75:45:ff:44:45:64:cc:b8:b0:54:d5:
0f:d0:30:18:e2:44:0c:9d:6c:ab:14:7d:ea:00:c7:18:9e:62:
ac:b0:ff:7b:8d:94:bc:bd:19:21:35:7e:77:f0:6d:54:f5:b3:
92:c1:66:a6:09:1b:e6:ff:6c:82:a1:dc:bf:70:a0:cc:45:13:
fb:7e:b0:27:88:2e:eb:0e:c9:19:da:69:3b:20:6a:87:92:fd:
a8:4f:ce:26:d3:0e:ac:3f:c7:16:2f:2e:30:54:2b:3d:8b:a2:
6e:a6:63:d0:f8:5c:8a:98:24:10:84:7f:a2:8f:43:0e:6d:be:
9d:a8:2c:1c:93:f2:f2:05:11:a3:37:8e:72:ac:de:e3:c8:a7:
17:66:11:53:29:1a:0b:e3:ba:d2:3e:27:aa:05:21:7e:c7:81:
32:61:82:ac:de:15:c8:6d:36:63:0b:b6:22:87:47:ed:58:27:
a5:5d:88:bb:4e:ae:b2:2b:68:ad:23:33:78:91:51:cc:56:a7:
69:53:10:aa:63:3e:0e:8e:f9:72:77:84:7e:f1:a4:55:8b:5e:
09:de:13:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org