Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/f49Sefq8iJ79lvCoaoYptrQi-jk.roa
File: f49Sefq8iJ79lvCoaoYptrQi-jk.roa (raw, json)
Hash identifier: US/ZBD5F6jayLQe1IlIDpm2OBCmPn3WiVZ0scfT/Vn8=
Subject key identifier: 7F:8F:52:79:FA:BC:88:9E:FD:96:F0:A8:6A:86:29:B6:B4:22:FA:39
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0186BCBD805F99D5739C10D7B0B9F17B6184
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/f49Sefq8iJ79lvCoaoYptrQi-jk.roa
Signing time: Tue 07 Mar 2023 15:43:01 +0000
ROA not before: Tue 07 Mar 2023 15:43:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212953
IP address blocks: 88.209.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:bd:80:5f:99:d5:73:9c:10:d7:b0:b9:f1:7b:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 7 15:43:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f8f5279fabc889efd96f0a86a8629b6b422fa39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:0d:3f:1a:6c:f6:39:2a:7b:c2:82:a0:7f:
d9:90:ba:ca:23:3e:4e:e6:a2:4f:82:01:58:22:fc:
6a:aa:4d:54:2e:0e:e7:c4:40:3a:fc:29:1e:cc:76:
19:47:29:5b:94:6d:34:88:1a:db:4a:be:05:37:0e:
c8:3b:f5:d6:6f:7b:ad:ba:d9:2f:2c:96:fb:c6:1b:
f3:80:6f:b8:18:6c:de:25:9a:60:a1:d6:c3:97:f7:
4b:fc:0b:0b:82:4d:74:f0:49:f1:e9:bc:b5:fb:70:
3e:bb:47:b2:1a:e0:4c:e5:4c:d1:b0:79:71:e8:a0:
51:2a:78:98:cd:7e:d6:3a:8a:eb:13:a2:6c:1a:24:
6e:07:77:4d:ec:75:17:bb:5b:09:df:d3:f9:3b:68:
1b:c3:a4:7a:94:f9:8c:f1:24:f9:b6:9b:14:94:93:
a1:7c:ee:da:95:1a:49:b9:dd:80:bf:60:9f:1e:36:
1e:45:e4:5e:5e:44:bf:5b:1e:12:5d:23:3b:4f:56:
61:80:f0:2c:47:97:28:18:c3:52:a7:6d:db:a9:50:
dc:53:63:28:e8:36:da:84:8e:81:1d:b7:af:a0:5b:
67:81:9a:4d:9f:ae:93:9c:3e:ad:c1:67:51:2f:80:
c6:1b:42:d2:4d:1b:e6:69:6a:4f:93:8a:a6:b8:21:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:52:79:FA:BC:88:9E:FD:96:F0:A8:6A:86:29:B6:B4:22:FA:39
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/f49Sefq8iJ79lvCoaoYptrQi-jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.216.0/24
Signature Algorithm: sha256WithRSAEncryption
31:07:ac:33:3b:80:e8:03:1c:3a:59:fc:84:85:77:5a:7b:a6:
f4:f9:c4:fa:8f:ad:d6:13:d9:d7:91:fe:fd:c2:eb:0c:c0:17:
2a:0a:70:bf:f4:cb:9f:95:98:4e:e9:0a:f7:e2:b3:b8:81:98:
71:11:3c:7c:ed:ff:0b:0f:00:1c:77:a3:61:fd:99:0e:18:43:
dd:e5:31:4c:71:f3:01:04:da:23:21:73:e3:ad:1d:0b:7e:ed:
9b:ce:7e:1a:c8:a6:15:fc:ab:ae:11:f8:10:fb:36:a0:14:4a:
94:a0:54:9d:53:e8:b9:7f:bf:a5:89:bd:f7:c6:52:0f:38:40:
0b:33:9a:d8:f0:15:2c:e1:94:42:03:15:dd:0d:c5:c0:58:a3:
32:23:ce:16:b9:ca:6d:2c:05:41:a9:8b:ca:36:b5:76:7e:23:
4f:e2:d4:4b:61:68:00:f2:9e:3f:fa:2f:f5:6e:0a:3b:0a:80:
fd:be:e9:a8:2e:74:0b:d6:1b:87:4b:11:e2:b1:42:33:c5:dc:
d5:b6:31:33:b6:1f:97:ec:c0:dc:c4:c5:d6:32:58:5f:ba:97:
15:c4:f1:93:47:e9:df:28:38:ba:a7:ec:db:88:58:af:5f:86:
ab:dc:cd:3d:04:ac:14:2e:c7:3d:f5:d9:3a:f5:a4:f9:3d:5f:
93:3e:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org