Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eNM_cI6OYOP1_YuiFJHkAtVjFYA.roa
File: eNM_cI6OYOP1_YuiFJHkAtVjFYA.roa (raw, json)
Hash identifier: GSDFQsDeH+APQMUXUEn0+copFBtOSfLy/w7KUOqaT2c=
Subject key identifier: 78:D3:3F:70:8E:8E:60:E3:F5:FD:8B:A2:14:91:E4:02:D5:63:15:80
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A9C9699F0EB74E2B37B60948BD2BE1F17
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eNM_cI6OYOP1_YuiFJHkAtVjFYA.roa
Signing time: Sat 16 Sep 2023 06:03:50 +0000
ROA not before: Sat 16 Sep 2023 06:03:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 88.209.253.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Sep 2023 09:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9c:96:99:f0:eb:74:e2:b3:7b:60:94:8b:d2:be:1f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 16 06:03:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78d33f708e8e60e3f5fd8ba21491e402d5631580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:b6:f0:f3:35:68:c9:52:ac:3d:2d:d1:5f:
9d:f7:12:4c:06:45:be:bf:32:b8:66:c7:5a:ca:1a:
8f:f2:d8:de:c6:16:25:a1:e5:e3:aa:58:ad:4d:d3:
fa:20:8d:97:84:df:6f:cf:0c:63:e7:1f:88:6c:0c:
60:87:09:04:84:cc:42:00:84:6d:90:95:90:7e:e5:
52:a8:bc:88:79:70:c2:e8:69:5d:e6:df:80:bf:4c:
6b:7a:f7:91:bf:47:c7:89:c6:22:84:59:49:a4:49:
f9:08:bd:f5:10:ad:c0:64:ed:35:b7:be:42:24:02:
4e:ce:88:38:56:9f:a3:00:89:97:62:ac:df:bf:86:
45:bc:7d:c3:4f:25:7f:e4:08:37:e1:a2:56:45:17:
dc:bf:f5:c8:dd:84:ca:95:36:52:d8:0b:f0:72:38:
5b:0e:55:d3:24:e9:6d:13:5c:40:12:8a:a3:cd:a2:
5a:90:14:d5:2f:22:b6:26:ab:b4:6c:60:14:dc:c2:
12:ce:7e:9a:ed:f5:83:f3:ad:12:90:65:73:96:b0:
c4:37:89:1f:bd:b3:0f:cc:6e:cb:64:b5:a5:c6:dd:
9f:99:48:2c:6e:5d:16:9c:4b:a6:6b:18:11:9b:1b:
2f:fc:29:06:51:21:ae:93:6a:a5:d8:f6:4f:6d:bf:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:3F:70:8E:8E:60:E3:F5:FD:8B:A2:14:91:E4:02:D5:63:15:80
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eNM_cI6OYOP1_YuiFJHkAtVjFYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.62.0/24
88.209.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c8:14:8c:88:6f:08:3b:c1:83:86:37:59:62:4c:6d:92:aa:
b7:7f:f4:3d:6e:5f:a3:78:f9:61:35:cb:92:7a:da:79:9e:a0:
1e:67:aa:88:8b:67:f7:e2:2b:5f:ea:97:33:70:a0:96:dd:d3:
b6:71:f9:0e:29:94:94:0d:65:8d:a8:e9:2d:42:86:4f:4a:92:
be:39:51:62:1a:27:8a:bf:1b:f8:e2:9c:21:51:5f:a2:d5:5c:
08:58:78:d8:95:98:70:e7:bd:ce:d8:68:bb:e3:3d:6b:c3:ab:
51:79:04:13:ae:2e:e4:48:a2:60:77:d4:89:b0:5c:11:6e:a8:
be:ac:cc:82:39:0e:77:4b:6c:ff:fc:3c:ee:4a:c7:f1:2f:c2:
3a:df:96:39:5e:85:96:ac:00:64:fd:5c:85:87:2e:c9:c7:57:
5e:11:8d:5a:53:22:4e:ce:00:5b:94:dd:b1:45:6e:4a:dd:d2:
e3:d6:a1:a0:30:40:e6:78:0b:76:08:f3:e5:8b:b6:6c:a3:7f:
78:b4:27:92:a2:c7:40:a2:9e:9e:d0:1d:71:28:b8:e7:98:35:
dc:d3:60:f9:ad:67:09:52:88:97:18:62:8d:bc:a2:b4:b4:50:
ac:d3:7c:27:70:a7:33:b2:0f:4e:9f:18:07:78:76:c2:f0:f9:
44:76:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org