Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/arfZo6E5h5xiHh7OHeHpneFQukM.roa
File: arfZo6E5h5xiHh7OHeHpneFQukM.roa (raw, json)
Hash identifier: H0VP5FSuylbUQJkUjo05D2y/rNha8ttsdcsuusSHnW0=
Subject key identifier: 6A:B7:D9:A3:A1:39:87:9C:62:1E:1E:CE:1D:E1:E9:9D:E1:50:BA:43
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01885D7A6F789083FCCA11E0D646F8BD418A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/arfZo6E5h5xiHh7OHeHpneFQukM.roa
Signing time: Sat 27 May 2023 13:51:24 +0000
ROA not before: Sat 27 May 2023 13:51:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 88.209.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 15:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:7a:6f:78:90:83:fc:ca:11:e0:d6:46:f8:bd:41:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 27 13:51:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ab7d9a3a139879c621e1ece1de1e99de150ba43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:3f:34:06:91:19:d1:99:34:01:94:bc:e7:
61:f2:76:de:06:3b:8b:6d:ec:ea:1e:1b:ce:9a:e7:
53:ef:32:24:33:46:80:6a:66:ff:ed:0f:ae:f8:72:
86:04:37:ef:3f:4f:bb:c7:77:d7:9a:6f:20:19:dd:
01:25:c9:66:7c:50:d0:0e:5d:83:de:64:38:29:27:
ff:20:f2:e7:8c:33:67:3a:33:66:45:cd:8d:31:02:
15:ee:7f:d4:16:3d:ae:0e:99:a4:a7:05:8f:bd:0f:
f7:2f:73:33:ee:21:ca:e3:8a:ab:6d:85:7d:cb:88:
3d:60:90:86:36:69:84:66:f1:ab:33:94:9f:95:6a:
0b:6a:ea:43:1a:a2:73:e2:b5:a2:21:32:29:41:1e:
df:18:20:be:6a:d5:ef:f2:91:ba:2d:4e:dd:b3:dc:
fd:8a:01:72:ae:95:74:6b:62:aa:73:28:9c:12:e5:
d5:89:5f:56:e6:44:86:68:c1:34:aa:2c:30:91:ba:
df:b0:b1:22:4b:39:9d:0b:49:90:ff:ec:91:80:b5:
d7:ed:42:f4:4a:ee:94:6e:f5:40:de:05:b0:a4:99:
1b:74:1c:ca:ab:a9:db:bd:23:d9:14:a0:4c:c1:cd:
3f:a0:35:87:7d:c8:df:3a:5a:7a:a2:20:02:76:ac:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B7:D9:A3:A1:39:87:9C:62:1E:1E:CE:1D:E1:E9:9D:E1:50:BA:43
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/arfZo6E5h5xiHh7OHeHpneFQukM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.216.0/24
Signature Algorithm: sha256WithRSAEncryption
08:bb:52:1f:0d:e1:8f:91:10:2f:d5:f8:a5:9f:da:eb:f9:37:
ca:dc:62:74:06:d6:18:50:e6:bf:58:3b:ea:db:4b:9e:47:09:
3f:78:3f:3f:4f:a1:3d:9d:5b:32:f4:06:6f:e1:5a:b9:f7:5f:
ee:69:9e:4a:5f:96:b1:1d:73:28:5e:5a:61:f7:df:24:49:58:
c4:57:92:48:4c:81:a5:1a:7d:38:e5:c5:2f:d5:03:2b:b4:41:
c6:41:c5:21:8d:bc:4a:ed:c2:3a:ac:f2:52:22:45:6d:64:8e:
8c:16:ba:d5:01:99:4a:7d:db:ca:66:06:24:3c:20:b2:9e:f4:
f2:02:31:90:fe:37:45:56:5b:6a:fa:1d:d0:65:90:ae:59:51:
84:bf:af:dc:34:72:9c:9c:a9:52:ab:ba:39:6d:de:31:b0:d0:
1d:7b:d2:39:3d:31:7b:0d:2b:d8:2a:d4:31:5b:d0:8a:66:8f:
d4:99:e5:9b:c4:d9:cb:a6:d2:c5:a9:69:c7:4c:bc:f0:47:18:
cc:86:02:b3:b8:99:bc:13:d2:e1:2a:0e:5b:5c:f8:ea:fb:14:
eb:fd:6e:aa:8e:28:9f:7b:92:96:7e:ed:fa:cf:e3:f2:a3:04:
47:68:19:5d:ed:cc:83:fe:d9:15:30:c2:91:0d:f4:58:ef:0b:
ff:f5:3b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org