Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/loZRCo-kaU-0_UubGZqDB4qv9_A.roa
File: loZRCo-kaU-0_UubGZqDB4qv9_A.roa (raw, json)
Hash identifier: zpU4okNSQzngbRjRGmFgeGzta5g4fa92Z5ozOsGzVVI=
Subject key identifier: 96:86:51:0A:8F:A4:69:4F:B4:FD:4B:9B:19:9A:83:07:8A:AF:F7:F0
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018875C9FE78E60C9DDE82834A7EEEA3296E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/loZRCo-kaU-0_UubGZqDB4qv9_A.roa
Signing time: Thu 01 Jun 2023 07:09:12 +0000
ROA not before: Thu 01 Jun 2023 07:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4826
IP address blocks: 88.209.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Jun 2023 15:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:c9:fe:78:e6:0c:9d:de:82:83:4a:7e:ee:a3:29:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 1 07:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9686510a8fa4694fb4fd4b9b199a83078aaff7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:a8:40:66:6b:bf:75:8c:d5:10:51:3a:bd:
78:97:9e:66:5a:a3:7b:35:eb:dc:d2:6b:13:e4:1a:
2b:bb:fa:88:96:02:df:b9:2d:5e:d2:44:67:5f:2d:
05:fb:68:a9:6a:21:67:43:e2:c4:d7:37:d8:26:bf:
3b:a8:f9:45:98:ce:26:6b:fb:e0:5d:5b:87:54:13:
96:df:47:f3:73:09:f0:15:92:a8:0f:a8:e2:92:eb:
b9:28:b4:44:41:b1:a0:96:a0:84:a2:7c:83:53:11:
de:35:fe:3a:01:77:88:bc:f5:67:c9:b5:5a:5a:6c:
47:fe:32:77:fe:c6:79:c8:cf:3d:7b:f1:7f:63:da:
6d:4d:ad:29:65:5e:a9:a8:31:4c:34:31:8f:26:d4:
07:06:4e:7b:9a:27:80:1b:92:1d:b0:20:5e:4f:42:
74:40:3e:50:ed:ea:e0:28:e2:70:7e:86:df:f6:12:
96:05:86:0b:2e:2f:a6:f7:5a:16:9d:cf:17:87:11:
5c:a8:f1:24:c1:e1:77:71:e6:32:39:b5:ce:ef:fe:
c7:09:6c:59:28:d6:6e:a9:81:b2:28:46:04:ec:0f:
53:ef:7e:3a:a9:77:b0:a8:93:ad:a5:8c:3a:46:3c:
99:50:5d:83:b7:4a:69:fc:62:c9:bf:93:14:57:9a:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:86:51:0A:8F:A4:69:4F:B4:FD:4B:9B:19:9A:83:07:8A:AF:F7:F0
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/loZRCo-kaU-0_UubGZqDB4qv9_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.195.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:df:bf:39:49:dc:27:ae:ca:42:61:4e:66:02:2f:75:ee:a7:
17:2c:b5:b1:49:d9:7d:48:be:e3:0d:4e:8d:a8:4b:28:28:be:
83:66:8c:04:bb:61:d7:8d:04:3c:11:4e:a4:d5:37:e6:64:38:
47:6e:be:5f:81:6b:f5:b4:16:a9:31:6a:26:3d:eb:b3:a7:6f:
af:c0:75:1a:19:14:e5:2b:98:62:3b:89:05:15:67:eb:06:d2:
a9:0e:58:f4:fc:43:db:29:ad:7c:3e:f8:bb:e5:42:be:e5:e0:
19:c7:be:31:1e:58:a6:63:77:a8:6a:e0:ba:76:75:4a:ae:97:
c7:2e:76:fd:a7:52:95:1b:da:24:c6:6f:ad:69:56:e6:57:8c:
8a:82:32:55:4e:c4:bd:ce:7c:0c:d4:cc:d7:63:02:b1:79:22:
44:80:a4:02:47:be:64:2f:c6:99:27:81:25:11:03:53:b7:ca:
6e:24:a1:a4:11:e7:a3:02:eb:5d:8a:90:9e:80:2e:87:69:15:
d8:f6:a8:84:75:2b:e7:b0:de:ce:85:85:cf:87:4f:15:fc:c5:
d4:3b:1f:75:7a:1f:ac:ab:af:28:77:50:eb:e1:2a:14:d5:22:
be:0b:c3:69:dc:47:c6:a7:6c:84:dd:72:ef:6f:07:07:6c:0d:
7c:b1:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org