Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/isUs8XKnprIUielNE6ZuEitz9Zc.roa
File: isUs8XKnprIUielNE6ZuEitz9Zc.roa (raw, json)
Hash identifier: BR0LUi5SA0QEt9N3X5HIzjzqrllFzuD2me1UyXnSh8g=
Subject key identifier: 8A:C5:2C:F1:72:A7:A6:B2:14:89:E9:4D:13:A6:6E:12:2B:73:F5:97
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019251B7BD486C75B6E73EC4B18AEF4BCB43
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/isUs8XKnprIUielNE6ZuEitz9Zc.roa
Signing time: Thu 03 Oct 2024 09:30:48 +0000
ROA not before: Thu 03 Oct 2024 09:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 06:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:b7:bd:48:6c:75:b6:e7:3e:c4:b1:8a:ef:4b:cb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 3 09:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ac52cf172a7a6b21489e94d13a66e122b73f597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:e4:36:47:ac:59:f0:88:ed:df:84:09:7f:
20:19:31:85:56:2d:98:b8:e3:6d:58:5f:a0:63:95:
e5:ee:26:17:c4:33:ab:3c:1d:90:fc:3e:f6:6a:83:
c5:67:9e:30:c7:7e:dc:3f:8a:2c:a6:01:fc:d7:54:
95:ea:57:a7:bc:70:0b:f0:65:2e:18:de:0e:c6:d6:
b4:3b:3c:47:cc:e1:a8:77:0b:df:29:d5:55:c4:e3:
5f:07:96:7a:cc:c1:ce:85:f7:7d:37:87:12:e2:0b:
df:ff:64:e8:ae:72:83:83:71:9e:2f:c0:f9:2c:3a:
7b:5e:1a:99:6e:9d:67:02:1f:c7:91:d2:f0:89:eb:
d2:83:2d:f9:e4:6e:d0:ae:21:37:68:e8:02:6c:f5:
e9:52:41:75:6f:bc:c9:17:8b:09:d5:cc:73:6c:2d:
e3:f5:ef:3f:b7:cc:15:47:84:37:85:00:68:84:17:
ae:e6:e1:da:73:90:55:99:ef:3f:3d:55:ff:ef:36:
ad:bc:94:48:ae:41:7c:a5:aa:28:f4:a2:3f:f7:df:
bd:67:d4:1b:c8:ae:14:06:34:49:96:23:a9:a5:91:
b9:4a:15:1c:26:92:1e:d3:57:9b:87:c5:61:5d:a8:
80:8f:2c:1a:6a:26:ef:0d:19:37:30:ec:dd:e4:a2:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:2C:F1:72:A7:A6:B2:14:89:E9:4D:13:A6:6E:12:2B:73:F5:97
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/isUs8XKnprIUielNE6ZuEitz9Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.195.0/24
88.209.232.0/22
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f6:65:9f:da:6a:1f:f2:a3:31:50:b2:a7:dc:f0:9b:33:fc:
20:7d:98:f8:a4:69:0a:12:18:f5:9c:e0:a8:18:98:c2:3b:88:
25:6c:c7:0e:31:95:15:11:96:2b:43:b7:04:08:f6:65:6c:52:
6a:c7:18:8f:06:ce:bb:78:37:f4:5a:44:9c:e6:93:09:79:aa:
24:86:c1:0d:cb:c8:99:40:e5:f5:59:fd:6d:c9:33:27:df:6a:
97:1d:8a:93:0d:30:a2:b0:93:94:04:8d:ee:3b:b5:e9:e5:9e:
de:94:26:c5:ea:8d:2c:31:f1:57:08:71:93:49:f5:49:99:57:
8e:e3:31:8e:54:85:65:80:b3:b7:e4:bb:eb:18:8b:9c:50:22:
0e:c5:21:6f:72:af:c1:26:ac:0c:ec:56:f8:33:26:14:76:95:
34:7c:b4:9a:4d:1e:44:29:f6:4c:6d:3d:10:21:97:35:b1:ef:
6b:f6:b3:e3:a0:eb:bd:37:90:ba:de:5e:ed:dd:ea:cf:9a:71:
f6:e3:8a:af:40:d5:fd:b4:18:e2:aa:4d:aa:5b:16:9d:04:28:
be:03:d1:3c:2e:03:ed:15:f7:3e:76:e5:ae:09:c4:ba:6b:24:
bd:b0:05:a3:a7:e7:d1:f3:40:1e:77:61:aa:3c:60:12:b9:60:
51:ce:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 08:16:16 2024 by rpki-client on console-fra.rpki-client.org