Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Zecz2mWnMr49qbGBVDkfLzAV7DI.roa
File: Zecz2mWnMr49qbGBVDkfLzAV7DI.roa (raw, json)
Hash identifier: NAH0o7/gSlXFmmI4OwP9BndqQl9KVFzMi5GTuT7hlH8=
Subject key identifier: 65:E7:33:DA:65:A7:32:BE:3D:A9:B1:81:54:39:1F:2F:30:15:EC:32
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187CA430124B41F6CDCB3345927518155C8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Zecz2mWnMr49qbGBVDkfLzAV7DI.roa
Signing time: Fri 28 Apr 2023 23:46:41 +0000
ROA not before: Fri 28 Apr 2023 23:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206361
IP address blocks: 88.209.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ca:43:01:24:b4:1f:6c:dc:b3:34:59:27:51:81:55:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 28 23:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e733da65a732be3da9b18154391f2f3015ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a7:ec:51:e8:67:06:67:c6:d4:dc:02:fe:71:
3d:45:a5:bb:a3:69:68:ba:44:17:51:b8:bd:5b:f2:
12:bb:37:ec:df:5c:6d:c4:0a:61:a0:da:3d:18:61:
bb:a7:a3:51:a0:bb:2e:80:c8:64:f9:ee:8a:1d:b5:
24:b5:f6:73:2d:37:6f:4f:d1:b7:5a:e2:24:39:e8:
67:de:61:d1:f6:c1:99:21:65:32:7b:c9:a2:7b:98:
18:f0:1d:09:84:2a:04:ea:4c:78:d7:52:e3:41:a5:
0c:48:49:f6:1a:90:0d:7d:23:ab:fb:57:07:bc:1f:
bd:7e:2e:91:33:09:9c:b0:f9:7c:91:24:c7:40:ee:
dc:21:74:95:ff:3d:81:28:0f:25:58:2a:a8:d7:f0:
06:e0:07:ba:e3:99:d1:43:c3:c1:57:b3:ff:64:6e:
dc:7f:9a:aa:0f:8d:df:72:7e:1a:26:7a:5c:52:1c:
5c:e5:d2:3c:4a:26:08:ff:17:94:a2:f6:35:02:2b:
f3:0c:bd:b2:e2:18:a8:af:73:58:ce:ae:bb:8a:49:
1f:b6:7d:c5:6d:45:e0:82:03:4e:bc:33:1c:7b:74:
ab:4f:c3:06:3b:c0:6b:9c:06:39:f0:47:97:7a:89:
cf:9e:61:66:ce:66:95:c4:be:27:13:c3:72:c6:4d:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E7:33:DA:65:A7:32:BE:3D:A9:B1:81:54:39:1F:2F:30:15:EC:32
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Zecz2mWnMr49qbGBVDkfLzAV7DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.193.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fe:10:b5:27:4a:60:34:68:47:57:b1:98:4a:16:d3:85:06:
a2:de:76:07:13:38:24:6f:ae:24:f6:76:c9:06:1b:ec:74:21:
00:7a:7b:b2:bf:4a:a0:7d:ad:70:4b:e9:d3:04:0e:17:b6:c3:
30:d8:a2:41:41:a3:73:08:92:f7:3b:f2:e0:63:d8:81:28:d6:
61:96:a0:a4:ea:b9:e4:0f:2e:76:69:4e:62:8a:d5:d6:d0:33:
7a:3c:01:0e:39:c5:72:2f:3e:51:f8:51:82:20:ef:dc:b2:58:
fc:c1:d2:4a:f3:ab:ce:59:9c:3d:32:56:35:70:0b:23:ce:f8:
f4:94:f9:cd:63:a6:b6:e5:55:bb:17:11:70:db:2e:b4:4d:42:
4f:1f:d3:a5:ac:a2:96:a5:e5:b7:0f:60:cd:00:d4:1d:76:89:
d3:3f:3a:3d:be:35:90:62:8d:8d:22:b7:b9:96:9b:97:f8:9e:
b8:16:fc:6d:9a:86:48:3d:7b:be:ec:53:24:ce:61:69:a2:4d:
1e:1a:ab:d1:cd:2d:d1:30:09:11:4a:8c:16:1f:55:cd:b2:b8:
dd:40:4a:3c:b0:cc:a7:dd:28:f5:e2:2e:0b:15:5c:2a:c8:f3:
be:22:ae:bd:17:3b:f9:c9:ac:40:bd:f6:87:24:8e:03:de:6d:
9b:52:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org