Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_ub2p4I_e0Bj-98ZXexNkWGCsaA.roa
File: _ub2p4I_e0Bj-98ZXexNkWGCsaA.roa (raw, json)
Hash identifier: QaeIeGWPchoErLaJdHsBm/9yNLYVFDx+R0jDuaeREdE=
Subject key identifier: FE:E6:F6:A7:82:3F:7B:40:63:FB:DF:19:5D:EC:4D:91:61:82:B1:A0
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01890CDDE1E1E43F1F86887995330C059FA6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_ub2p4I_e0Bj-98ZXexNkWGCsaA.roa
Signing time: Fri 30 Jun 2023 15:13:35 +0000
ROA not before: Fri 30 Jun 2023 15:13:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 88.209.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:dd:e1:e1:e4:3f:1f:86:88:79:95:33:0c:05:9f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 30 15:13:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fee6f6a7823f7b4063fbdf195dec4d916182b1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:18:96:2d:94:81:a8:08:20:4e:7f:73:0c:
9d:f0:5b:e8:a6:16:d1:20:2b:d8:24:97:b8:c6:9a:
2b:b6:97:69:23:dd:cf:3e:3f:07:8f:c6:04:8d:f4:
52:b3:64:20:49:0d:a3:76:60:44:b6:76:fc:a9:d3:
cb:68:6f:42:df:ec:4e:d4:0d:bd:28:6d:aa:06:12:
ff:86:b1:f7:01:42:09:8c:09:44:4c:24:fb:d7:51:
2d:f2:1d:03:43:19:f5:18:fd:ca:f5:61:bd:b9:bf:
80:13:5f:f2:18:f1:c8:8e:b1:e3:24:62:c5:93:0b:
91:12:a4:39:1d:f0:ac:d4:bc:75:b2:df:c4:2e:a7:
82:89:9f:97:00:cd:dc:b9:b2:79:23:ac:da:43:54:
a8:62:e7:88:3d:78:8b:b0:c0:69:11:ac:7d:11:61:
5b:7a:b9:74:71:af:67:2e:32:15:57:dd:b3:4d:d2:
2c:a4:0a:7a:97:e0:9d:9b:82:a7:24:a1:9d:16:1c:
0e:05:35:43:dc:20:bd:45:74:fd:aa:1c:51:3c:ba:
11:56:f7:c7:1b:3a:c6:0e:0e:30:41:0f:35:66:8e:
50:80:5a:3b:f0:12:30:72:e2:29:80:96:9b:b8:34:
3c:bb:35:0e:29:51:92:04:4e:15:7e:b0:ab:11:be:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:F6:A7:82:3F:7B:40:63:FB:DF:19:5D:EC:4D:91:61:82:B1:A0
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_ub2p4I_e0Bj-98ZXexNkWGCsaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.202.0/24
Signature Algorithm: sha256WithRSAEncryption
23:45:96:06:59:a6:29:6c:e3:ad:54:80:d7:f3:38:db:55:87:
6f:14:b0:f2:59:bf:e3:c2:b5:d7:db:62:49:fc:e6:a0:78:b1:
5b:45:b5:0e:e6:ab:fb:35:8a:b4:48:f7:3e:69:f8:0d:e8:7e:
0b:38:04:b5:ac:a2:75:43:fd:ff:b3:74:0d:fc:f8:95:9c:ff:
53:96:ed:09:0f:d4:f6:1a:43:e8:8c:04:36:bb:66:c0:a5:93:
7c:a0:af:11:9d:32:69:c4:03:7b:33:2d:90:2a:05:1d:93:99:
50:cf:83:56:3d:f4:c1:cf:7b:97:98:ca:92:89:39:5a:9f:ce:
15:af:02:5e:d2:74:b1:7a:14:15:93:66:ca:bb:62:c5:77:37:
5c:80:00:c3:90:48:1a:4f:2b:ce:cb:d4:ef:5e:ac:8c:af:d3:
42:41:d3:46:19:3f:10:79:44:a4:de:2a:b8:ea:12:e3:44:e3:
6a:4b:fe:ff:0e:ab:1a:0d:a6:d0:96:d6:74:0e:06:80:76:1b:
03:81:c8:9e:c9:4b:76:a5:13:a0:71:8c:2a:97:78:ea:69:10:
c4:51:d5:84:98:ac:42:e9:33:28:96:bf:e0:c2:8e:de:f2:cf:
91:ce:c9:17:dd:ed:96:55:cd:15:c7:e5:94:0f:23:50:cb:ca:
c6:a0:16:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkM3eHh5D8fhoh5lTMMBZ+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNjMwMTUxMzM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWU2ZjZhNzgyM2Y3YjQwNjNmYmRmMTk1ZGVjNGQ5MTYxODJiMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvwYli2UgagIIE5/cwyd8FvophbR
ICvYJJe4xportpdpI93PPj8Hj8YEjfRSs2QgSQ2jdmBEtnb8qdPLaG9C3+xO1A29
KG2qBhL/hrH3AUIJjAlETCT711Et8h0DQxn1GP3K9WG9ub+AE1/yGPHIjrHjJGLF
kwuREqQ5HfCs1Lx1st/ELqeCiZ+XAM3cubJ5I6zaQ1SoYueIPXiLsMBpEax9EWFb
erl0ca9nLjIVV92zTdIspAp6l+Cdm4KnJKGdFhwOBTVD3CC9RXT9qhxRPLoRVvfH
GzrGDg4wQQ81Zo5QgFo78BIwcuIpgJabuDQ8uzUOKVGSBE4VfrCrEb74VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7m9qeCP3tAY/vfGV3sTZFhgrGgMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvX3ViMnA0SV9lMEJqLTk4WlhleE5rV0dDc2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHKMA0G
CSqGSIb3DQEBCwUAA4IBAQAjRZYGWaYpbOOtVIDX8zjbVYdvFLDyWb/jwrXX22JJ
/OageLFbRbUO5qv7NYq0SPc+afgN6H4LOAS1rKJ1Q/3/s3QN/PiVnP9Tlu0JD9T2
GkPojAQ2u2bApZN8oK8RnTJpxAN7My2QKgUdk5lQz4NWPfTBz3uXmMqSiTlan84V
rwJe0nSxehQVk2bKu2LFdzdcgADDkEgaTyvOy9TvXqyMr9NCQdNGGT8QeUSk3iq4
6hLjRONqS/7/DqsaDabQltZ0DgaAdhsDgcieyUt2pROgcYwql3jqaRDEUdWEmKxC
6TMolr/gwo7e8s+RzskX3e2WVc0Vx+WUDyNQy8rGoBbm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org