Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pHSqJso3vgpqWXNdhfzQ0-B94nw.roa
File: pHSqJso3vgpqWXNdhfzQ0-B94nw.roa (raw, json)
Hash identifier: Zzh4hapU1WUYAh0xw5rldQbOWLvmKjhWX929l5tFJ2Y=
Subject key identifier: A4:74:AA:26:CA:37:BE:0A:6A:59:73:5D:85:FC:D0:D3:E0:7D:E2:7C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7A80CE12D4812BD696B73B3AB1FC2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pHSqJso3vgpqWXNdhfzQ0-B94nw.roa
Signing time: Mon 02 Jan 2023 09:54:45 +0000
ROA not before: Mon 02 Jan 2023 09:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135375
IP address blocks: 88.209.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:a8:0c:e1:2d:48:12:bd:69:6b:73:b3:ab:1f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a474aa26ca37be0a6a59735d85fcd0d3e07de27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:78:62:55:a9:a3:61:b1:ed:1a:4b:50:26:
2b:ca:19:c8:ad:e4:de:79:fe:13:d5:89:ec:b7:01:
cb:43:8f:ef:0d:03:1d:72:b0:20:ea:75:f0:ec:b3:
29:75:59:8c:1c:31:94:8c:91:93:b7:f8:71:79:69:
f6:ea:f8:2b:14:b3:21:4a:e1:74:0c:0b:23:47:7e:
56:ea:85:6a:b4:a9:57:d1:ba:9b:26:05:bd:b3:4e:
66:a2:6e:67:b6:c1:98:dd:bf:64:e1:fb:16:b3:54:
fa:3e:d1:b9:be:f0:ba:46:8f:bd:2d:a1:e1:4a:e2:
e0:22:c3:d7:e1:1a:0a:c8:d8:03:0d:40:2d:e5:e2:
32:76:a5:a0:a2:f5:b7:07:67:ec:4d:87:b0:d3:c1:
2d:fb:63:46:91:c8:7d:5e:2c:35:b1:60:e7:47:8f:
8a:0f:15:41:bc:ad:41:8f:e1:8c:12:c2:22:62:e7:
f5:04:32:53:d6:fd:e4:7b:08:c3:b2:66:2e:45:a6:
c0:23:68:80:c3:7b:bb:1f:92:96:dc:b6:04:15:2c:
6f:c5:4a:16:21:de:9d:84:59:13:2d:bf:94:73:e7:
48:ff:d0:18:e5:86:8c:be:b6:ae:49:5d:12:ba:57:
f5:7c:19:44:a1:bc:24:43:d6:fd:b1:a8:69:73:a5:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:74:AA:26:CA:37:BE:0A:6A:59:73:5D:85:FC:D0:D3:E0:7D:E2:7C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pHSqJso3vgpqWXNdhfzQ0-B94nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ac:72:6c:75:b8:49:2c:11:82:bc:fc:83:f3:e5:23:02:51:
05:10:e2:1c:d6:47:17:32:33:24:94:46:fd:c1:0b:64:03:ff:
44:77:19:a7:ea:ed:27:bc:eb:0d:7e:3a:e6:ab:69:25:da:2b:
f2:92:12:55:35:45:a6:03:27:18:6f:d3:7a:83:ab:6e:64:e7:
4c:c6:90:8b:b8:58:e0:0d:8d:72:81:1e:ba:a6:65:dc:7b:48:
26:15:ba:a0:be:21:90:6e:76:16:6c:a3:37:6f:f2:9e:96:02:
ca:6c:26:c7:0e:20:9d:fc:b1:63:c2:97:38:3e:6b:c4:81:9e:
4f:02:8c:f3:35:03:e2:aa:a1:7e:5c:4d:6c:0a:a2:f2:df:3b:
a9:20:39:40:4f:ff:2e:bd:bd:99:63:9a:c8:c1:45:45:e2:82:
8d:1c:ff:5d:e3:79:7d:01:29:2b:38:3a:04:4b:32:79:35:8a:
3c:2e:5e:28:7a:81:97:5a:d8:01:1c:c5:a0:ea:c9:b4:b7:4d:
58:8b:4a:17:5d:7a:42:09:12:67:31:3d:0f:a5:e8:bc:42:8d:
bc:3b:d3:1c:85:f2:2e:6d:0a:b0:41:74:07:d5:0d:fc:1f:22:
07:dd:60:18:b8:91:d7:ec:65:84:72:1c:74:12:1b:8a:4a:93:
57:9e:62:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-ams.rpki-client.org