Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/p3VVkEoBxVaocCX85IAmkvWYHqY.roa
File: p3VVkEoBxVaocCX85IAmkvWYHqY.roa (raw, json)
Hash identifier: TKM249WNe6MemFg/+apgpI+SudeZkSLQhteNW5va1sM=
Subject key identifier: A7:75:55:90:4A:01:C5:56:A8:70:25:FC:E4:80:26:92:F5:98:1E:A6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0185E7C7406ECB9950A8908F4ED6B7828805
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/p3VVkEoBxVaocCX85IAmkvWYHqY.roa
Signing time: Wed 25 Jan 2023 07:14:33 +0000
ROA not before: Wed 25 Jan 2023 07:14:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 88.151.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 09:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:c7:40:6e:cb:99:50:a8:90:8f:4e:d6:b7:82:88:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 25 07:14:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a77555904a01c556a87025fce4802692f5981ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:db:16:15:8b:5d:41:c0:6a:92:98:0c:43:
20:68:fc:c0:f8:5b:bd:63:84:f2:f1:42:36:c1:b0:
66:57:db:e6:dc:45:52:c4:e6:a9:12:ee:57:8e:35:
90:e9:9c:c6:0d:1b:c9:10:18:bd:f3:d4:2f:5a:cc:
1e:e6:40:37:af:8d:98:9e:b7:65:0d:ab:36:f1:75:
a0:71:4e:79:dc:9c:6e:7f:e9:05:fe:0a:8b:73:b0:
55:19:ce:b6:74:0f:f6:1b:3d:40:3c:44:c0:34:de:
03:b0:09:f7:d7:05:78:9f:9d:db:e0:90:f0:0c:b2:
1b:65:30:9a:81:93:51:79:a9:43:92:0f:9e:f3:ee:
ec:05:03:a5:c9:76:76:8c:61:ce:22:8a:91:0f:74:
2f:85:31:2a:6b:51:fb:96:7c:ae:89:59:81:44:e6:
8f:de:1d:6c:39:2f:d5:f9:94:b0:7a:71:d3:1e:a0:
37:7a:d6:ba:bf:5e:8c:4c:88:c8:19:b2:49:2b:36:
f3:59:fc:a2:5d:f0:a5:f2:27:5a:3d:16:7c:7e:f9:
07:57:8c:38:a4:d7:f6:6f:f7:98:69:69:95:16:2a:
c3:b5:eb:fb:f8:aa:b2:49:e1:6e:08:71:5e:8c:32:
4d:04:1d:25:3a:1c:42:d1:e7:b4:31:09:19:71:40:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:55:90:4A:01:C5:56:A8:70:25:FC:E4:80:26:92:F5:98:1E:A6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/p3VVkEoBxVaocCX85IAmkvWYHqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.57.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e6:97:82:c6:03:db:2b:f1:70:1a:6f:e1:fd:74:a6:de:31:
71:69:9f:4e:6b:c2:4f:01:54:fe:59:b1:4f:22:15:53:74:06:
84:36:7f:73:ea:c0:f6:d6:1c:91:32:85:e1:a2:1e:8c:64:48:
c4:85:d7:64:81:64:51:ef:2a:8f:14:7f:a4:d4:6e:53:d0:74:
55:22:0a:6b:f8:d5:c6:e0:fb:1b:6e:09:5b:f1:b8:87:68:22:
3a:5e:a9:39:3e:6c:38:da:66:67:44:f5:eb:9d:ce:4b:43:ee:
b9:11:c1:b1:0b:2f:6b:28:ff:67:d1:b0:61:df:84:b2:4b:73:
18:4e:f0:dc:e9:5c:38:57:bd:b5:33:0c:36:8b:86:ef:83:d6:
16:a9:f5:67:c7:30:6c:70:e3:fc:a5:79:82:aa:2f:5e:95:c4:
1b:c7:65:18:4f:6a:97:35:17:8b:b6:28:9a:b1:45:b5:a3:66:
7c:48:7d:1e:b2:4f:c4:25:f6:81:1f:01:e6:b7:d5:6d:32:18:
1f:ab:18:c8:40:47:4c:03:38:50:30:36:69:19:d8:41:77:19:
73:5c:75:7e:73:e6:ff:09:18:c8:5d:07:83:60:fd:71:37:a2:
af:9f:21:63:4d:91:00:11:c5:a4:8b:df:ae:62:ef:4b:92:e8:
78:67:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org