Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/o_gFNC1vo1CP__kWUnktSTxLgLk.roa
File: o_gFNC1vo1CP__kWUnktSTxLgLk.roa (raw, json)
Hash identifier: woKDjhye5B/PYu14smP3A1vyyzDcPV07HxDCI641bfI=
Subject key identifier: A3:F8:05:34:2D:6F:A3:50:8F:FF:F9:16:52:79:2D:49:3C:4B:80:B9
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01858251E15CDB7B79AD650C2B4390035EFB
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/o_gFNC1vo1CP__kWUnktSTxLgLk.roa
Signing time: Thu 05 Jan 2023 14:24:42 +0000
ROA not before: Thu 05 Jan 2023 14:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207236
IP address blocks: 88.151.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:51:e1:5c:db:7b:79:ad:65:0c:2b:43:90:03:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 5 14:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f805342d6fa3508ffff91652792d493c4b80b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:25:e1:93:fd:8a:ee:64:b2:8a:0d:e9:1e:
a2:8c:92:0d:cf:fb:1f:2d:2b:b3:49:b4:17:52:9a:
ff:b2:39:c1:0c:0c:15:10:ea:54:94:28:75:e1:04:
38:4f:b3:f1:ff:bc:5e:94:cf:b9:d6:a4:9c:bb:cf:
ed:6f:8a:12:cf:b1:ef:f8:fc:85:0e:e8:77:ed:a6:
70:6b:a9:df:d8:65:ab:f0:1e:37:6f:86:e1:1f:82:
48:fd:a9:40:c8:a8:37:f5:b0:5f:1f:43:d8:12:d8:
9e:33:72:54:00:4e:8b:af:69:f5:3b:ac:0a:72:6e:
10:fd:eb:f7:39:97:01:69:da:c5:23:40:2e:66:e3:
8b:2c:ea:50:db:e9:5c:89:5e:ea:b7:61:0c:16:a8:
82:29:08:2e:b6:8e:00:e4:67:63:da:f5:81:b6:e2:
aa:d7:ef:5b:a4:c8:eb:3c:29:24:01:35:f7:3f:7f:
50:44:62:00:a1:81:f4:bd:de:44:38:a0:85:a9:1c:
e6:bb:4b:fb:11:74:43:b2:12:51:1e:6c:8d:69:a8:
d0:b3:26:5b:2a:e0:a8:4b:6a:8e:bd:7e:be:a8:9c:
2e:7c:b4:20:43:73:bf:e3:40:49:39:73:ab:7d:43:
2b:6a:1a:c3:71:2f:4a:8a:04:34:8f:bf:03:fa:48:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:05:34:2D:6F:A3:50:8F:FF:F9:16:52:79:2D:49:3C:4B:80:B9
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/o_gFNC1vo1CP__kWUnktSTxLgLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5a:4e:02:84:d3:d9:ea:2a:7d:f1:0e:74:1f:a1:97:5c:c6:
68:a9:6d:30:2a:db:89:2c:4e:d7:3d:66:9f:63:5c:07:f0:43:
49:29:c0:8d:07:c4:6f:84:a7:83:9f:76:0c:a8:ae:4e:48:aa:
ac:41:ca:dd:c7:47:d9:df:50:41:54:9c:46:a4:57:6f:9a:22:
dd:15:47:2a:cb:59:10:76:aa:12:f7:b1:d9:af:87:32:f1:d4:
e2:96:34:0b:00:d6:f4:ad:b4:5f:68:41:b5:ca:fa:12:2c:56:
74:d9:41:60:ac:f5:26:71:ad:61:4d:ba:fc:d9:85:d7:fc:09:
ff:b7:9a:37:d3:d6:2d:f2:4e:bf:cf:b2:f0:6b:9c:7e:cd:cc:
aa:ce:ff:c3:fb:15:a6:e4:fd:14:47:d4:c1:f1:d6:b3:b4:6f:
ce:31:79:60:5a:7e:0d:cc:1f:dc:b0:76:3c:69:eb:0d:dc:57:
98:14:1d:5e:01:f1:d2:b4:cb:82:2c:77:dd:d1:82:8a:d2:46:
e5:4b:8b:be:52:9b:ad:05:c7:67:f6:bf:40:b3:34:9e:3b:ea:
90:52:cf:98:84:90:be:ea:a0:5e:cc:fb:2f:54:70:5c:f3:4f:
b3:46:48:84:9b:2b:72:60:5b:2c:2f:c6:3c:0d:77:0d:6c:c4:
9d:d2:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org