Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/RAsY-ognLXXS0A1eUcuAR4Nu5Ns.roa
File: RAsY-ognLXXS0A1eUcuAR4Nu5Ns.roa (raw, json)
Hash identifier: Dz/SEB9CDVUSkNL4F0mwEjBWPy9fw9zojNz70IuCDdU=
Subject key identifier: 44:0B:18:FA:88:27:2D:75:D2:D0:0D:5E:51:CB:80:47:83:6E:E4:DB
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187A456C8C0195037E6F82A309AC5E4B324
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/RAsY-ognLXXS0A1eUcuAR4Nu5Ns.roa
Signing time: Fri 21 Apr 2023 15:02:43 +0000
ROA not before: Fri 21 Apr 2023 15:02:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 88.209.201.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:56:c8:c0:19:50:37:e6:f8:2a:30:9a:c5:e4:b3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 21 15:02:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=440b18fa88272d75d2d00d5e51cb8047836ee4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:09:ed:86:d5:99:b2:51:1e:1b:b0:02:8c:
87:02:f5:f3:33:bc:1b:78:51:dc:5e:42:1d:fb:4c:
a0:ca:b3:f8:42:7f:6b:11:5a:3d:96:f7:85:56:0d:
77:04:64:48:70:65:1c:b8:2e:29:10:ef:f0:49:b9:
a9:64:4b:5c:14:ae:a3:c0:b9:7f:82:cc:f4:86:5c:
4c:1c:18:56:30:bc:55:73:dc:3d:23:cf:3b:16:bc:
7e:84:84:54:6e:34:81:42:e4:53:e1:cd:93:33:43:
a8:71:00:8a:be:ce:4e:24:3c:b2:84:89:0d:c6:69:
33:44:4c:23:2d:8d:0d:cc:82:38:da:a0:0b:1f:7b:
dc:80:94:ec:d7:82:e4:98:bf:4d:a1:90:e0:36:7b:
24:42:22:64:22:38:39:32:b1:ef:86:36:78:2d:a4:
28:1c:21:ec:50:d8:fd:a4:84:b9:12:87:d9:35:b5:
b4:fa:5d:b4:b7:66:60:1b:a0:c5:ee:28:48:f1:33:
7d:cf:d4:a2:38:c8:4d:57:64:7b:ae:94:e5:59:f7:
66:2a:76:5f:0b:0f:a3:0e:16:5e:2a:15:c0:e7:f2:
a1:ae:ae:3b:d5:94:8c:22:a6:8c:52:ba:1b:92:15:
05:25:01:bd:34:f2:80:dc:cc:51:d9:c3:36:6f:11:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0B:18:FA:88:27:2D:75:D2:D0:0D:5E:51:CB:80:47:83:6E:E4:DB
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/RAsY-ognLXXS0A1eUcuAR4Nu5Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.201.0/24
88.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
56:eb:38:91:4a:7b:24:61:80:e7:61:0f:b4:c0:ad:be:60:23:
a0:09:c3:a4:de:de:b3:f5:b9:df:3c:c7:00:c4:2b:24:bc:2d:
75:bf:2f:0d:e0:83:24:86:13:77:e6:bb:ee:ab:e4:17:93:36:
44:fc:cd:9b:df:52:18:8d:78:fd:df:bd:78:53:8c:42:54:94:
88:a4:93:30:11:44:7e:a7:35:f7:0f:85:68:b8:a3:cb:b9:44:
49:75:9b:ce:26:cc:69:8a:d0:e7:66:d3:8b:3d:e5:11:4c:28:
84:ed:dd:f6:18:d4:07:2d:76:d4:98:86:84:2d:54:bd:a7:5d:
b0:99:6f:22:96:72:f6:20:86:e8:12:7e:69:41:2d:72:06:29:
90:ea:c3:e6:8a:0f:4f:b7:2e:50:90:a3:90:c6:d9:86:aa:ee:
c6:1e:29:29:87:4c:0d:57:3c:15:2d:a1:1d:bc:ef:2b:ba:cf:
c2:0e:68:84:23:ea:64:2f:d4:9d:11:e1:68:4b:78:64:01:f2:
1c:62:0f:61:d4:5d:e8:12:e3:1d:28:9a:b0:95:bc:4d:b7:27:
4d:1f:9c:bb:af:7e:88:de:37:9a:15:f2:3c:85:87:d7:32:59:
cc:6f:b7:25:46:28:c1:f2:1e:5b:0e:c3:c6:0b:49:ca:21:14:
71:85:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org