Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/na3DmCUJjoUbL7nUGmug1NyaHFU.roa
File: na3DmCUJjoUbL7nUGmug1NyaHFU.roa (raw, json)
Hash identifier: 3HEX3qiMOYmsElOekOoxzC8MSLGoQmmFuPmUte1B3T4=
Subject key identifier: 9D:AD:C3:98:25:09:8E:85:1B:2F:B9:D4:1A:6B:A0:D4:DC:9A:1C:55
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6B6103E764A220B7991233F9ECEC2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/na3DmCUJjoUbL7nUGmug1NyaHFU.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.209.232.0/22 maxlen: 24
178.210.228.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b6:10:3e:76:4a:22:0b:79:91:23:3f:9e:ce:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dadc39825098e851b2fb9d41a6ba0d4dc9a1c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:5c:db:40:1f:9a:4c:5c:fd:c7:41:9c:b2:
83:48:27:b8:a8:d1:0d:6c:cd:18:56:18:01:4c:e1:
98:98:08:e1:23:d2:54:70:3b:46:05:4b:c3:c7:89:
5a:2b:f2:33:49:ef:3c:3c:24:d6:7f:81:72:d2:e9:
26:25:cd:5c:9e:2a:fb:ae:ce:62:37:23:a8:69:0e:
69:8b:96:1f:93:7c:67:08:ea:7b:2c:4c:a4:ec:6d:
3b:f4:f9:c0:1f:f2:b9:d6:f7:ec:6d:59:29:da:20:
c7:03:d1:46:8a:4f:fe:e6:18:bc:92:e5:cc:68:60:
ae:33:99:1b:fd:bb:30:c3:2c:d4:dd:da:f3:e1:44:
d1:0c:ca:d6:2c:11:ba:43:b3:79:2a:25:ae:d2:66:
01:ca:be:e6:25:c4:5e:cc:02:67:5f:f8:f6:15:57:
68:85:b3:9d:a4:24:62:2a:fd:d6:7e:6f:0c:45:ad:
1e:46:e6:d0:a7:e8:91:22:96:c3:9d:53:83:4e:d8:
25:01:06:ee:6a:c6:c2:d8:c8:6c:e5:22:5c:5d:ad:
94:ae:3a:6f:3b:c6:2a:af:fe:ea:56:1f:0b:68:c7:
39:83:ee:67:55:0e:de:4d:39:58:ca:50:0e:37:c1:
13:15:20:33:cd:cb:59:98:c7:cc:0b:a4:4e:06:81:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:C3:98:25:09:8E:85:1B:2F:B9:D4:1A:6B:A0:D4:DC:9A:1C:55
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/na3DmCUJjoUbL7nUGmug1NyaHFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.211.0/24
88.209.232.0/22
178.210.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:25:b7:6c:ca:e9:8b:6b:3f:b4:63:dc:10:d2:3c:9c:cf:06:
d5:91:e4:4e:9b:c7:a7:99:bb:ef:f9:cd:86:ed:c5:8b:db:5d:
da:9d:4c:86:24:52:25:5a:12:b9:ce:f4:f4:36:cf:be:9b:88:
8a:4f:24:e1:4a:b8:0e:97:6f:c1:dc:e8:9a:05:4e:2f:8b:8c:
e3:1f:15:fe:3a:df:d4:9d:37:50:6b:43:76:4b:08:04:b3:f9:
ce:27:1b:f9:02:b3:e3:6b:db:ca:7f:13:c5:2b:f9:2e:8c:86:
9b:7b:94:d7:12:60:d8:eb:b1:18:c7:df:24:15:80:3d:da:8e:
c6:f3:c9:12:cd:74:e4:65:40:0a:78:01:61:58:35:55:1d:db:
5f:3b:63:5e:71:09:73:00:76:9a:45:e2:87:60:b8:e6:37:16:
5d:09:fa:1d:ab:51:2d:db:a7:c4:b6:41:2b:74:d0:3f:90:10:
e7:5e:cc:9b:97:8b:e2:f9:5f:e5:fd:b9:1c:51:e7:bc:4a:bd:
5f:8e:8d:c2:5f:99:ce:34:00:08:5b:1d:60:7f:05:fa:60:f8:
9c:c3:25:01:cc:4f:e1:30:32:9e:f4:92:50:0a:6e:7b:9b:8f:
30:f7:52:3b:c0:ba:c0:e5:ce:d1:19:85:64:08:77:55:49:f7:
1f:a6:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:47 2024 by rpki-client on console-fra.rpki-client.org