Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/a1pA0v4v9jiToIdxL5g0yoGQ7HA.roa
File: a1pA0v4v9jiToIdxL5g0yoGQ7HA.roa (raw, json)
Hash identifier: wIfj3QUcHYj4LO8Q198S2L1EBf3Y21UQXXo7IvcYzHA=
Subject key identifier: 6B:5A:40:D2:FE:2F:F6:38:93:A0:87:71:2F:98:34:CA:81:90:EC:70
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018AB72A9B6D32F19355A84DA292ACF4FA9A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/a1pA0v4v9jiToIdxL5g0yoGQ7HA.roa
Signing time: Thu 21 Sep 2023 09:55:37 +0000
ROA not before: Thu 21 Sep 2023 09:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 88.209.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 20:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:2a:9b:6d:32:f1:93:55:a8:4d:a2:92:ac:f4:fa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 21 09:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b5a40d2fe2ff63893a087712f9834ca8190ec70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:32:04:04:28:94:b7:36:d5:29:f3:6e:a7:
15:76:c2:92:e8:2c:48:40:e6:37:b1:af:b2:96:34:
cc:dd:dd:4d:96:66:b1:f1:d9:4b:c1:6c:03:a3:ee:
03:66:45:25:14:e1:4e:05:5d:bb:f0:fd:a6:f6:9c:
91:fb:eb:7f:77:6a:31:fc:d5:65:2e:b1:a4:6c:98:
e8:6e:ba:78:19:0a:88:c6:27:e2:34:01:f7:6a:ce:
48:16:a1:7e:78:a3:6a:a9:4c:e6:6a:16:f8:cd:3f:
fc:e7:dd:c9:41:64:c1:15:ae:d2:0a:32:f8:84:18:
81:e1:a4:c4:c8:43:80:42:7f:ed:68:d2:10:62:12:
aa:29:40:4a:ed:58:d2:50:3f:0d:48:d5:03:e3:40:
7f:a9:30:c9:dc:ef:d2:38:e9:13:2d:46:58:e8:3f:
7b:0b:c8:9f:44:07:e2:b9:b5:4e:dd:16:0c:44:9a:
4b:7c:6b:ea:67:20:9b:37:73:b0:a2:a0:6f:3c:d2:
ff:cf:e7:31:49:d4:f4:33:18:25:f8:e6:9d:9c:6d:
0a:bb:58:1a:db:27:bd:a5:70:90:fe:b7:85:d9:cc:
00:99:bf:04:88:57:e8:a6:dd:3b:83:a8:f0:95:4c:
8c:fe:95:65:d8:5f:96:d7:0a:2a:b5:ab:f9:c9:c2:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5A:40:D2:FE:2F:F6:38:93:A0:87:71:2F:98:34:CA:81:90:EC:70
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/a1pA0v4v9jiToIdxL5g0yoGQ7HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:90:b9:7a:f7:f8:b7:04:1a:b3:b1:d5:7a:ac:79:85:d4:14:
4d:67:71:8d:17:6c:aa:b8:72:48:98:f7:f5:91:70:53:d4:44:
52:24:26:38:28:65:29:3e:46:96:c7:d3:b3:b9:81:7e:90:ff:
01:e4:ef:51:fe:b6:93:d1:19:ac:8e:aa:42:34:4d:28:7f:58:
f0:03:72:4e:e8:4b:f1:d7:ca:b2:ae:06:ee:7b:7d:bc:a9:f8:
6f:bc:0b:05:ab:b2:17:c3:4e:9f:ff:40:71:70:30:be:4e:55:
50:82:d2:cf:13:45:4b:52:b6:b3:79:57:4d:e8:1b:7c:13:92:
04:b1:c8:78:1d:5b:b8:f1:34:84:78:ec:80:d4:9c:74:e2:ec:
f7:1a:29:ca:2e:0d:bb:a7:df:7e:b1:18:b1:a7:ae:a6:e2:ea:
c6:8a:5d:5b:77:e8:a1:cb:7e:fd:14:14:5b:15:0d:77:c8:9b:
14:cb:1b:0a:0f:e1:4e:1a:46:8c:10:5f:c7:57:a1:b8:8f:c1:
ec:e2:5b:f2:7f:d7:b8:d5:75:28:0b:75:a8:63:0e:6b:a9:64:
5a:dc:ac:06:53:c1:c0:ac:65:43:62:06:4e:a2:48:7a:fc:2f:
97:e0:d5:6b:26:14:b1:f8:2d:cc:ee:61:2f:50:1f:df:72:7d:
41:bd:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org