Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QxCBgfeFSSqkkrTk4_G0yr9gnWs.roa
File: QxCBgfeFSSqkkrTk4_G0yr9gnWs.roa (raw, json)
Hash identifier: yBsoBTholra3AGKUJ7NBsXscO+oSv7QPrvzBqzDA+Yw=
Subject key identifier: 43:10:81:81:F7:85:49:2A:A4:92:B4:E4:E3:F1:B4:CA:BF:60:9D:6B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018851B349FE531108E3C9E09B9B40D2E272
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QxCBgfeFSSqkkrTk4_G0yr9gnWs.roa
Signing time: Thu 25 May 2023 06:58:04 +0000
ROA not before: Thu 25 May 2023 06:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 88.209.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:b3:49:fe:53:11:08:e3:c9:e0:9b:9b:40:d2:e2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 25 06:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43108181f785492aa492b4e4e3f1b4cabf609d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:d1:d3:09:a9:ae:f2:19:52:a4:52:4a:6f:
5d:f8:09:2b:e1:51:9a:64:7c:f7:04:27:01:aa:bb:
a0:cf:0a:3d:35:5d:1a:b5:6f:f0:eb:76:52:ac:31:
37:4e:b1:56:45:65:ed:2c:3d:6f:1a:97:84:f4:a0:
74:cb:20:cf:36:a1:5b:f4:f4:3c:44:2d:ee:9c:5f:
f3:80:cd:1d:0c:21:81:63:91:5e:7a:c3:44:73:99:
67:d9:15:2e:5b:c0:cb:f1:4f:26:36:21:3e:51:0b:
95:54:fe:fb:f3:05:45:bb:3b:ed:97:f5:8d:b1:98:
77:88:2f:61:2e:77:bf:27:d6:13:f0:06:d7:79:ec:
36:96:ee:4f:8d:ef:a7:b4:ff:85:10:7b:77:10:f6:
80:d2:3e:78:2f:e4:b6:41:38:ba:cf:2c:06:9e:8f:
c6:88:70:8d:ee:b0:5d:1a:60:78:ac:f9:73:da:63:
e0:74:ef:9f:54:f3:54:c2:d6:f0:8f:f6:38:3c:72:
ff:13:3b:94:86:e3:d4:ce:13:01:5d:ac:a7:69:43:
f3:af:8d:42:a2:97:1c:5d:4c:c1:18:3c:cf:f4:71:
dc:ce:13:40:38:ee:bf:5c:81:b3:61:43:36:ea:32:
2c:86:f9:23:a8:5c:ba:0a:dc:29:51:e4:31:13:74:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:81:81:F7:85:49:2A:A4:92:B4:E4:E3:F1:B4:CA:BF:60:9D:6B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QxCBgfeFSSqkkrTk4_G0yr9gnWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:55:b5:27:04:7b:e4:94:6b:00:c9:0f:e5:23:dc:f4:89:a8:
65:bb:9b:4e:33:3f:25:93:ea:a4:49:de:47:6f:5b:b9:c7:0b:
58:d7:28:d4:8a:e7:06:98:0b:b1:56:37:74:73:0d:eb:f1:08:
bf:57:97:ac:0c:10:11:dd:8c:1f:f2:83:bd:cf:37:f9:20:6b:
b7:64:5c:80:d7:86:1b:d4:b5:56:26:40:69:75:1e:77:fe:7c:
5c:f2:19:1a:2b:59:40:96:f7:68:eb:30:7e:35:43:e8:95:51:
51:c6:e0:f1:c8:cd:ed:0a:d4:75:7c:ce:93:dc:ea:a4:81:09:
ff:5e:31:57:fb:4c:87:8e:91:4d:98:49:d5:5b:2f:d1:54:fe:
4b:dd:47:ab:52:08:df:f3:e9:e3:ef:ad:fe:6d:b5:6c:ee:b0:
db:e8:e2:f9:d4:b9:8a:95:3a:cf:88:71:da:07:d7:4c:75:c4:
18:e7:88:dc:7d:43:50:a9:fd:bb:21:7a:92:b6:41:55:0f:62:
04:29:d4:8d:9f:f7:e6:29:2c:a3:7d:9f:71:c5:e8:fe:86:a6:
2e:6a:60:8c:ef:b5:d5:a4:65:c3:99:ef:9f:93:ad:b2:f6:5f:
ef:05:04:f9:7f:22:dc:f3:46:f6:fd:b5:aa:c1:73:08:60:5b:
dc:65:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org