Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_Z9gI5nu6L2qm6F68JcIMKsUDJ8.roa
File: _Z9gI5nu6L2qm6F68JcIMKsUDJ8.roa (raw, json)
Hash identifier: ZRu3s1KO7zTCbf3oQlVKOVvdugXaTtgPH9n/7II1feo=
Subject key identifier: FD:9F:60:23:99:EE:E8:BD:AA:9B:A1:7A:F0:97:08:30:AB:14:0C:9F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E79F3D8C76D4F33333A3A0F1977BD0
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_Z9gI5nu6L2qm6F68JcIMKsUDJ8.roa
Signing time: Mon 02 Jan 2023 09:54:42 +0000
ROA not before: Mon 02 Jan 2023 09:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 88.209.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 08:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:9f:3d:8c:76:d4:f3:33:33:a3:a0:f1:97:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd9f602399eee8bdaa9ba17af0970830ab140c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:6e:dd:18:41:93:ab:52:a8:f8:37:8c:39:
51:87:45:d8:f3:15:fe:05:ae:1b:91:3a:a2:be:92:
ae:e1:c9:a9:64:d9:b2:78:6d:04:a7:87:38:ca:f2:
ce:67:1b:5b:0a:9d:b4:c6:a3:75:92:d0:dd:3f:1c:
7e:c3:7c:50:20:60:de:f1:31:66:4b:3f:ba:cd:91:
05:92:dd:d0:26:4f:64:f6:c7:21:d1:2a:91:0c:56:
c3:df:2e:a3:1f:7c:2c:d9:8e:fd:ed:ae:f7:4d:e2:
03:24:43:7d:80:ed:9d:73:b4:33:16:12:a7:fc:9d:
6b:75:a6:5d:3b:8f:0a:3c:bb:62:88:58:31:31:3c:
6c:ad:53:03:b7:38:fd:74:0f:d3:0b:c5:a7:c2:21:
ff:86:bf:24:66:75:2e:05:b4:d2:b6:02:e2:bc:85:
74:0f:77:aa:16:f6:69:da:0b:d9:ec:dc:e3:c4:25:
1e:f1:32:1c:76:33:f7:91:f7:c8:35:86:23:f8:9e:
92:f3:d8:2d:69:f4:58:e4:5a:0c:0a:62:a9:4e:2c:
0d:25:35:47:49:ff:27:62:98:15:9e:a8:64:e9:99:
72:20:2e:b1:52:5b:57:9f:ab:ff:7a:85:6a:42:18:
6b:eb:01:6f:54:45:d1:fa:c0:ee:5d:98:a5:fd:08:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:60:23:99:EE:E8:BD:AA:9B:A1:7A:F0:97:08:30:AB:14:0C:9F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_Z9gI5nu6L2qm6F68JcIMKsUDJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9a:58:9c:ea:f4:c9:ca:39:9e:22:ea:43:54:2e:15:18:c7:
c0:97:d4:5a:50:56:2f:f5:2b:27:d5:82:76:4b:77:55:3d:45:
d8:73:4d:38:c1:91:a2:3a:f0:4e:10:09:b7:2f:b7:c8:59:6e:
0f:d9:18:19:66:dc:0a:fe:55:fc:21:6a:b1:e7:b2:6f:7f:f5:
91:4d:13:5e:4f:7a:23:b3:9a:93:38:6b:2d:04:54:76:1d:92:
aa:12:62:13:37:0f:a4:7d:cc:bf:4b:aa:b9:8a:30:fa:15:8a:
1b:78:8c:77:eb:21:1a:55:ac:b6:4a:45:a4:2e:21:82:23:14:
5f:21:cd:cd:d3:04:9a:9b:4a:b1:26:db:7d:84:81:ac:26:53:
3f:3b:58:24:12:6b:b9:7f:af:4b:94:1a:96:51:90:eb:e6:18:
be:6f:de:4b:14:38:4e:6a:63:96:c6:66:b8:17:51:2f:53:86:
e8:88:0b:e1:e6:51:fa:e9:d6:88:f2:53:16:d0:67:f6:0d:06:
11:12:ef:df:45:a7:86:e7:cb:9f:64:84:da:9b:13:90:c5:00:
e6:06:98:d2:6a:8f:46:27:91:fc:7c:9a:0a:b9:b1:81:43:c7:
09:03:cf:3f:d4:7c:0c:5e:c0:36:68:90:3c:fc:e7:94:f1:fd:
df:8f:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org