Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SEYn4j8Ls5y9QmXppe7KRQQQ10s.roa
File: SEYn4j8Ls5y9QmXppe7KRQQQ10s.roa (raw, json)
Hash identifier: ZLa4JgWdBYbZ0jxasdBe77CW0sKS96vYGcJnYMA8BNY=
Subject key identifier: 48:46:27:E2:3F:0B:B3:9C:BD:42:65:E9:A5:EE:CA:45:04:10:D7:4B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01858251E047710B984B96AC5C8220712707
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SEYn4j8Ls5y9QmXppe7KRQQQ10s.roa
Signing time: Thu 05 Jan 2023 14:24:42 +0000
ROA not before: Thu 05 Jan 2023 14:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:51:e0:47:71:0b:98:4b:96:ac:5c:82:20:71:27:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 5 14:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=484627e23f0bb39cbd4265e9a5eeca450410d74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:c4:72:f8:24:2c:a1:78:f2:80:93:4f:7b:
99:f5:7e:8c:42:01:f0:49:cf:1c:8d:f9:3b:0f:5d:
17:96:9b:57:50:60:c5:b0:54:95:0d:eb:1c:13:dc:
be:c0:a3:10:00:29:18:f2:ed:6d:50:e2:f8:d9:a2:
a0:cc:59:6e:d9:07:7c:e7:1a:b5:49:10:24:53:1d:
40:05:6e:fe:67:13:73:c5:31:ef:78:53:d7:50:5c:
90:f7:a2:76:77:08:82:af:a0:61:80:eb:89:13:d7:
8c:45:49:8e:d7:60:ff:35:e0:7f:90:06:30:70:b5:
fc:51:76:f0:ce:51:31:fa:3d:ee:ba:ac:1f:0f:d5:
de:df:9b:2d:b4:2f:ef:b4:a3:bf:f1:05:21:d8:eb:
5a:bd:35:57:e4:92:44:06:1d:e5:81:53:a6:d0:97:
6d:e8:fa:bc:04:cf:4e:20:24:e7:94:f2:07:f1:76:
50:df:6f:eb:64:38:68:7b:68:33:a5:a0:9a:9e:7e:
4d:51:62:8a:3f:e0:1d:93:a6:66:1a:a1:07:e3:46:
ad:6e:c6:27:22:00:c8:de:05:f5:f9:04:46:c4:df:
b8:95:04:de:7f:c3:82:ce:7b:b3:af:d9:29:c4:93:
b5:94:ff:de:25:91:ff:e2:26:2a:e5:49:f3:a0:52:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:27:E2:3F:0B:B3:9C:BD:42:65:E9:A5:EE:CA:45:04:10:D7:4B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SEYn4j8Ls5y9QmXppe7KRQQQ10s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/22
Signature Algorithm: sha256WithRSAEncryption
84:64:47:40:13:72:0c:05:83:64:dc:fb:95:09:34:6d:71:05:
20:c2:6b:6e:48:f6:b8:54:a2:ad:91:cb:e2:6a:d4:57:90:4c:
0c:2b:8d:27:95:45:bf:79:a7:6f:ed:01:06:39:5d:49:c1:05:
9b:ef:af:fc:47:ee:99:52:c1:bc:48:1a:d5:98:dd:c8:8b:55:
20:9b:5c:74:e0:d5:7f:51:da:0f:06:db:5e:c5:32:51:ce:78:
04:6f:91:9e:f3:b2:cc:37:08:42:b6:6a:9a:b9:2d:53:ce:04:
60:d3:ea:21:f5:74:4b:4b:4b:79:48:24:86:24:3a:97:c9:ae:
5c:0f:e1:56:d1:85:a6:61:2c:14:fa:fd:d9:69:e7:d6:74:9a:
5c:6e:03:46:58:d9:08:6d:c7:64:44:65:11:2e:f9:71:df:2c:
30:26:54:12:7f:cd:fc:f9:2d:dd:be:1b:6f:d3:64:46:40:c6:
e2:ac:19:c5:98:da:6d:11:0b:5c:3a:37:ff:e1:71:18:de:90:
4e:37:c2:4b:bc:5f:c5:0e:f2:c9:48:44:94:6e:a6:af:2b:38:
5d:e4:7d:b3:15:11:c8:74:8e:a6:ad:c3:69:f6:75:70:f1:53:
a7:f8:a1:84:97:47:f3:17:04:65:86:89:1c:26:3f:46:4b:a5:
08:3a:51:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWCUeBHcQuYS5asXIIgcScHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwMTA1MTQyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODQ2MjdlMjNmMGJiMzljYmQ0MjY1ZTlhNWVlY2E0NTA0MTBkNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDvEcvgkLKF48oCTT3uZ9X6MQgHw
Sc8cjfk7D10XlptXUGDFsFSVDescE9y+wKMQACkY8u1tUOL42aKgzFlu2Qd85xq1
SRAkUx1ABW7+ZxNzxTHveFPXUFyQ96J2dwiCr6BhgOuJE9eMRUmO12D/NeB/kAYw
cLX8UXbwzlEx+j3uuqwfD9Xe35sttC/vtKO/8QUh2OtavTVX5JJEBh3lgVOm0Jdt
6Pq8BM9OICTnlPIH8XZQ32/rZDhoe2gzpaCann5NUWKKP+Adk6ZmGqEH40atbsYn
IgDI3gX1+QRGxN+4lQTef8OCznuzr9kpxJO1lP/eJZH/4iYq5UnzoFJdcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhGJ+I/C7OcvUJl6aXuykUEENdLMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvU0VZbjRqOExzNXk5UW1YcHBlN0tSUVFRMTBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWJc4MA0G
CSqGSIb3DQEBCwUAA4IBAQCEZEdAE3IMBYNk3PuVCTRtcQUgwmtuSPa4VKKtkcvi
atRXkEwMK40nlUW/eadv7QEGOV1JwQWb76/8R+6ZUsG8SBrVmN3Ii1Ugm1x04NV/
UdoPBttexTJRzngEb5Ge87LMNwhCtmqauS1TzgRg0+oh9XRLS0t5SCSGJDqXya5c
D+FW0YWmYSwU+v3ZaefWdJpcbgNGWNkIbcdkRGURLvlx3ywwJlQSf838+S3dvhtv
02RGQMbirBnFmNptEQtcOjf/4XEY3pBON8JLvF/FDvLJSESUbqavKzhd5H2zFRHI
dI6mrcNp9nVw8VOn+KGEl0fzFwRlhokcJj9GS6UIOlF+
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org