Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lsoG98XoLC34JxK4vxpIRp67Mug.roa
File: lsoG98XoLC34JxK4vxpIRp67Mug.roa (raw, json)
Hash identifier: Ms48ybqFqvHPHzCNNf+jPP4nm5g4Nz5U2L6iZg+Q6is=
Subject key identifier: 96:CA:06:F7:C5:E8:2C:2D:F8:27:12:B8:BF:1A:48:46:9E:BB:32:E8
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01864EB5EC718E686A132B2B12631E05CE54
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lsoG98XoLC34JxK4vxpIRp67Mug.roa
Signing time: Tue 14 Feb 2023 06:56:30 +0000
ROA not before: Tue 14 Feb 2023 06:56:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 88.209.229.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:b5:ec:71:8e:68:6a:13:2b:2b:12:63:1e:05:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 14 06:56:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96ca06f7c5e82c2df82712b8bf1a48469ebb32e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:62:8f:7d:83:59:c3:97:28:b4:de:fa:eb:8b:
da:c7:ff:90:cb:6d:e0:16:31:f7:5d:00:48:70:90:
e6:07:e1:ed:45:12:ce:c2:6c:91:fd:c1:98:8b:ab:
a6:97:c4:43:3c:11:d7:64:83:9b:b5:a9:97:e6:1d:
09:98:4c:4f:3e:a5:af:d8:49:56:69:b2:fd:51:c9:
e9:ee:6b:f6:0f:b1:78:c8:70:74:f6:b3:85:86:6f:
4c:6d:9a:d1:2e:3b:5d:98:d3:22:c1:95:8c:3e:9d:
bd:aa:8d:08:e0:72:6e:77:64:a1:e1:16:bc:5f:fc:
44:10:c0:8d:63:c1:9c:0b:74:0f:a1:da:eb:8a:18:
fa:a1:70:7c:1a:6a:29:18:80:bb:f8:b6:f9:7c:3d:
f9:b7:8e:5d:c9:93:7c:b0:5b:2d:e4:13:4f:aa:53:
66:bb:5c:ac:cc:d0:75:b4:95:f6:22:f3:63:c4:3e:
53:df:e3:42:87:7d:4e:f4:37:11:45:49:cb:1a:5f:
69:c7:2f:76:58:3f:95:79:f0:f0:c6:c1:2e:37:c8:
01:9d:7e:af:1e:26:27:63:23:e9:ed:2d:a1:10:e4:
c6:41:27:15:00:d1:e4:c7:dc:f4:87:2d:f9:ed:ab:
0c:f5:f1:d8:f6:66:ea:fa:c6:25:6b:3d:bc:ec:e8:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:06:F7:C5:E8:2C:2D:F8:27:12:B8:BF:1A:48:46:9E:BB:32:E8
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lsoG98XoLC34JxK4vxpIRp67Mug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.220.0/24
88.209.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ed:0a:0b:1b:92:56:96:a4:62:d6:14:68:57:30:13:86:00:
35:ba:57:74:6a:8b:b8:b9:f5:36:33:6c:86:84:55:9d:2c:85:
9c:06:07:5b:79:08:e5:99:46:0b:b6:8b:5d:0d:04:ac:1b:f3:
d3:d0:34:d2:1b:a9:b8:8b:15:19:d4:bf:55:e6:55:8f:19:0a:
2a:e9:c6:22:1c:aa:88:d9:32:65:7c:bb:72:d9:35:cb:47:df:
5d:4c:77:f1:0c:bc:ea:7b:8d:de:56:4f:96:48:f3:8f:0e:75:
3b:ae:78:fb:ab:8e:8e:9d:87:eb:82:0f:de:8a:56:a1:e8:ec:
bf:a8:d4:79:b1:b0:1b:47:52:da:97:fe:0f:ad:5f:16:35:bd:
6f:61:ca:c4:4b:f4:66:12:22:7c:35:96:12:5b:77:91:f9:94:
08:5f:ff:1f:e7:cd:b3:a8:4c:d0:f8:e2:f8:c7:49:37:dc:a8:
41:f9:18:fb:10:3f:f6:88:f0:4b:bd:5d:69:7f:2e:7c:32:d4:
bc:02:01:9e:a3:cd:6b:14:79:38:24:d9:a5:fc:27:22:07:45:
36:9a:88:a2:e6:fd:0f:2b:f1:fd:bc:70:28:6a:45:ab:98:a5:
a5:a3:56:b8:1b:07:b4:9d:12:51:7c:6c:e7:88:36:ba:54:cb:
cf:e3:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-ams.rpki-client.org