Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kARQqVkPfrBzb17hbrGpUtBDRos.roa
File: kARQqVkPfrBzb17hbrGpUtBDRos.roa (raw, json)
Hash identifier: b8Y79wc1NCouSLnfMiKa7bqpEF1uqZDXa8uWElI8PYc=
Subject key identifier: 90:04:50:A9:59:0F:7E:B0:73:6F:5E:E1:6E:B1:A9:52:D0:43:46:8B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6BE44C2F94B801514501C6895BDD3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kARQqVkPfrBzb17hbrGpUtBDRos.roa
Signing time: Mon 01 Jan 2024 06:29:42 +0000
ROA not before: Mon 01 Jan 2024 06:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198120
IP address blocks: 88.209.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 15:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:be:44:c2:f9:4b:80:15:14:50:1c:68:95:bd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=900450a9590f7eb0736f5ee16eb1a952d043468b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:45:d2:85:94:ba:85:a2:b7:cf:2c:9b:cb:
39:58:08:1e:53:b5:9c:8b:ce:3a:c4:1f:67:cd:d0:
5c:78:6c:5d:24:1b:1b:c5:27:90:77:ab:96:37:8b:
3a:fd:b7:5d:66:74:2d:e0:38:fc:6f:9c:24:4c:2c:
34:57:70:7d:a4:d6:5b:c7:b3:73:d2:3d:b0:94:c3:
d2:a1:5b:51:e2:ad:5d:48:e9:92:eb:5a:6f:16:d2:
a2:3e:d4:c6:8f:e5:a3:fc:3f:c2:17:6a:4b:ec:76:
37:31:c7:0f:8d:2c:af:1d:d6:92:be:f7:9c:13:17:
61:6a:e1:7e:b8:5d:17:e4:ee:cf:7a:d5:dd:cb:39:
ff:81:ac:f9:f3:ec:5e:13:1a:d8:94:44:57:b2:5a:
1a:ed:b9:5c:2c:95:cc:58:c8:76:84:f8:aa:58:82:
48:ba:77:4a:77:93:a3:a3:db:78:17:c6:21:24:2b:
ec:f3:1b:b8:42:ff:14:88:c6:49:ad:ce:29:48:6d:
bd:ed:bc:4f:37:a8:21:1b:03:1b:a0:05:32:fc:97:
b4:0e:a5:f5:d4:a1:24:c5:25:96:52:d7:78:9e:1c:
09:a0:51:67:e5:65:57:41:de:09:c5:5e:b6:fa:0b:
29:a1:ed:a8:ac:b5:94:03:11:f5:0e:37:0c:6e:eb:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:04:50:A9:59:0F:7E:B0:73:6F:5E:E1:6E:B1:A9:52:D0:43:46:8B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kARQqVkPfrBzb17hbrGpUtBDRos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.206.0/24
Signature Algorithm: sha256WithRSAEncryption
48:73:3d:ef:17:fb:bf:04:83:41:6e:d5:80:2f:a3:c3:00:26:
be:e3:d1:6f:6e:3f:aa:a0:7e:87:19:86:8c:e1:9d:78:7d:12:
46:e8:7e:20:26:f5:da:40:80:21:62:42:b4:17:89:fe:11:c4:
16:96:00:d6:42:39:6c:2d:00:fb:48:64:75:0c:5d:03:f4:e4:
f6:15:13:67:1b:1c:57:b7:b5:d4:81:ff:b6:c4:fa:f1:12:fd:
d6:a2:ff:cf:0d:85:b9:cb:ec:a8:97:2e:59:40:db:3f:84:4a:
9a:9a:10:c8:37:35:17:c5:3f:7d:a3:14:bc:38:e1:50:40:9f:
5c:ba:f1:1b:0d:28:e3:3a:41:91:42:1b:cc:72:2e:e9:e6:e1:
c9:dc:78:86:9c:dc:78:da:1c:e0:13:98:dc:cf:85:2e:74:75:
ed:e7:ba:a0:ed:f7:89:35:0a:9d:07:bc:5e:08:64:94:85:fd:
f0:07:60:de:c3:6f:22:0d:1d:a2:30:d9:70:1b:e7:7c:ef:ab:
91:91:86:2c:4d:24:28:be:5f:41:c1:b2:55:80:39:7d:32:aa:
11:c9:1f:30:b3:c4:c2:8a:6f:0b:82:b5:8c:ed:ac:9f:24:22:
42:48:68:34:53:9a:44:42:95:26:f5:23:12:7d:d9:9a:2e:9d:
7c:91:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org