Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_aj8IWtc1iVTgWtHrv5rfwvBFiA.roa
File: _aj8IWtc1iVTgWtHrv5rfwvBFiA.roa (raw, json)
Hash identifier: pOZsA8jaXDQsq3HF1iI/Ym3AVvLAoQqoUejskKf6pHo=
Subject key identifier: FD:A8:FC:21:6B:5C:D6:25:53:81:6B:47:AE:FE:6B:7F:0B:C1:16:20
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018B004B6A7B8287DD810DEB4D9CEC3FFC8B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_aj8IWtc1iVTgWtHrv5rfwvBFiA.roa
Signing time: Thu 05 Oct 2023 14:43:44 +0000
ROA not before: Thu 05 Oct 2023 14:43:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 88.209.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 07:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:4b:6a:7b:82:87:dd:81:0d:eb:4d:9c:ec:3f:fc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 5 14:43:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda8fc216b5cd62553816b47aefe6b7f0bc11620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:6d:78:87:79:a7:61:3e:0e:e5:95:dc:df:
c5:3a:d9:2b:92:67:4c:28:ad:2e:88:74:cb:0f:73:
70:1c:2f:9a:09:3d:72:59:ee:8e:e9:8c:a4:07:07:
c0:2b:cb:bf:49:9c:f1:c6:73:6c:8b:25:bf:5e:b7:
0f:92:75:d4:47:9d:eb:fc:10:d1:6e:8e:4a:d4:95:
54:a2:22:ec:ec:ad:76:50:40:6a:fb:71:02:91:6b:
d7:8c:5d:a9:e0:51:97:97:76:f0:d4:97:dc:31:1f:
23:b8:ca:8a:36:91:64:38:9b:72:67:06:1b:37:37:
66:f6:ee:bd:f3:2f:93:c1:76:95:1f:bb:db:18:ad:
41:24:e2:82:db:ea:0c:cd:8c:54:d8:77:75:70:95:
ed:eb:3b:76:a3:ad:f5:a7:10:1d:a2:d9:20:2e:2f:
73:ce:7c:9e:60:c1:53:17:2c:72:b3:56:be:16:0a:
7c:f0:fe:13:9a:81:c2:af:65:c5:9a:56:2a:1c:95:
98:e8:ad:59:29:24:a4:a1:ac:b5:a6:eb:05:5b:ef:
33:dd:13:b6:cf:c1:9e:4f:ed:c8:dd:47:58:a9:6a:
e8:bf:85:b2:66:70:5a:5e:44:20:9d:57:89:25:e5:
d0:e5:f4:ab:26:81:8b:e0:aa:64:27:ac:ad:57:29:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A8:FC:21:6B:5C:D6:25:53:81:6B:47:AE:FE:6B:7F:0B:C1:16:20
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_aj8IWtc1iVTgWtHrv5rfwvBFiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:7b:a2:56:50:19:fd:97:8d:4f:6f:cd:c8:59:7b:c0:80:42:
d6:53:a3:3b:7c:ae:c9:14:0e:76:57:41:84:5b:be:98:3c:d6:
69:50:d8:4f:71:05:5a:69:2a:8b:27:a0:b6:3c:8a:7c:be:62:
ab:b7:93:c1:26:e5:5d:42:51:a2:e4:05:2a:33:2e:26:8b:e3:
1e:fd:c0:fc:35:4e:6d:36:0c:2e:ad:9f:c9:33:43:2b:6a:f3:
c2:7f:65:66:bb:a6:1a:88:bf:67:79:40:3a:3c:d4:7e:4b:2b:
02:ad:87:37:13:c4:9f:12:35:97:8f:11:23:49:31:d2:07:44:
00:f0:0f:f5:a2:28:59:cd:b5:7e:3b:82:10:c1:4f:46:7f:23:
7e:3f:2c:42:ac:5a:4e:51:07:77:f0:86:c5:32:f7:53:be:a9:
15:1e:40:c7:43:a0:d2:fc:b8:7f:33:7b:58:51:51:d7:7d:5d:
c6:38:1a:09:eb:fa:67:61:2e:ac:ac:fc:23:da:e8:f5:64:48:
fb:69:69:72:1b:b1:f7:8a:df:6c:4a:1d:12:0b:44:9b:fd:d9:
59:64:eb:ec:0b:ec:2e:52:50:ef:28:23:40:4c:45:bf:2f:98:
d1:b6:e3:6a:32:aa:37:dd:e4:97:58:48:17:36:74:54:1a:f4:
76:4d:18:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org