Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/V7JiX7HSRhY1WkpXG8M6p_dMBzY.roa
File: V7JiX7HSRhY1WkpXG8M6p_dMBzY.roa (raw, json)
Hash identifier: v8AEdBNlbaoBLYYQdQv8WPDVeJaKOHYwLmZM6WR82PE=
Subject key identifier: 57:B2:62:5F:B1:D2:46:16:35:5A:4A:57:1B:C3:3A:A7:F7:4C:07:36
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187FF8BDF61E0A111E6139D66693028ABAD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/V7JiX7HSRhY1WkpXG8M6p_dMBzY.roa
Signing time: Tue 09 May 2023 08:06:09 +0000
ROA not before: Tue 09 May 2023 08:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 88.151.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:8b:df:61:e0:a1:11:e6:13:9d:66:69:30:28:ab:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 9 08:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57b2625fb1d24616355a4a571bc33aa7f74c0736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:24:fa:d6:59:a8:dc:54:30:fd:8a:75:e1:
02:b0:42:ea:93:a7:f7:f8:29:9c:75:58:e6:cc:12:
db:04:b0:0e:00:16:61:66:4d:16:6b:bf:f4:df:ca:
56:bb:5d:d8:57:e2:61:bf:2e:f9:8f:00:6d:8c:5a:
26:84:af:45:0c:79:8e:8b:8e:4b:3e:c7:c2:b1:15:
82:fe:c2:01:50:bd:73:9b:00:d9:c4:f1:3a:38:68:
ff:6f:c6:47:d2:4a:94:6f:bb:59:f2:d9:6d:be:8e:
1e:03:c2:06:17:ce:56:d1:5c:12:b1:dd:b6:ef:2f:
92:e3:a8:a3:86:0a:9c:af:99:c9:78:e6:16:17:cc:
51:fd:bf:8e:17:d6:cc:42:10:0a:75:e3:85:98:69:
d3:e4:8d:57:52:24:a4:68:45:0a:a2:33:01:7d:c1:
05:4f:f9:e2:25:33:b4:47:a9:d1:52:ab:0b:df:0f:
32:68:30:0d:e2:3a:29:dd:ed:05:34:14:38:a4:34:
e3:3a:de:13:11:a2:ec:ea:8d:eb:b2:4f:1e:87:0f:
e6:ad:26:af:83:fd:72:c1:e0:6e:79:47:46:c0:8a:
78:bc:19:e1:17:18:db:86:fa:01:26:e0:8f:13:b8:
ea:59:80:34:b1:fd:5b:1c:a7:15:2e:69:15:6a:a9:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B2:62:5F:B1:D2:46:16:35:5A:4A:57:1B:C3:3A:A7:F7:4C:07:36
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/V7JiX7HSRhY1WkpXG8M6p_dMBzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:ca:88:af:9c:0a:99:6d:e8:08:ba:57:95:ff:b3:97:99:97:
33:cd:64:80:10:43:49:dc:09:40:18:b7:51:7e:f5:d1:11:a8:
3a:c7:9c:8a:16:32:c8:47:c5:5b:7e:ac:fe:ca:99:0a:1c:b8:
b2:71:97:fd:26:d2:c8:bb:cc:fd:0b:7c:2e:91:a9:3e:7c:67:
12:e4:f4:12:60:9f:25:7a:ba:9f:b1:df:24:ea:70:10:bc:f5:
59:57:17:33:7c:96:69:ec:b6:8f:6d:e8:53:8d:f8:27:da:0a:
31:9b:95:1b:dc:a6:0d:89:bd:f3:39:8f:71:ae:c4:b1:ed:d8:
b9:32:32:fa:ca:43:7b:81:b8:10:90:d7:ec:57:1a:5a:8d:c5:
46:21:c7:62:12:fa:45:db:82:9f:a8:16:55:a7:72:90:83:99:
5e:85:3e:e7:07:35:03:ca:6d:01:c5:61:d7:b2:99:c6:9a:8a:
bf:91:ec:7b:63:80:52:c6:87:0d:d7:99:01:3e:3c:82:1e:04:
16:09:db:88:85:0a:32:a7:1a:9a:8f:b7:2b:ed:e3:90:68:a5:
2d:61:75:1a:a4:3d:2e:de:39:81:45:a8:88:5e:ec:41:50:b7:
c4:89:4b:d6:d7:a2:07:60:8c:ea:68:ac:3e:ec:ff:33:5f:41:
cd:02:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org