Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pLzbm0XX2Lf5hGkUXmnzKJuUWIU.roa
File: pLzbm0XX2Lf5hGkUXmnzKJuUWIU.roa (raw, json)
Hash identifier: MmWL4ScdaHUIU3PNVXftz7qCZHyKeBD0C++EK09sbLE=
Subject key identifier: A4:BC:DB:9B:45:D7:D8:B7:F9:84:69:14:5E:69:F3:28:9B:94:58:85
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0191602636E3E862CE47D5D9A12D3A4F4242
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pLzbm0XX2Lf5hGkUXmnzKJuUWIU.roa
Signing time: Sat 17 Aug 2024 11:43:22 +0000
ROA not before: Sat 17 Aug 2024 11:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 06:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:60:26:36:e3:e8:62:ce:47:d5:d9:a1:2d:3a:4f:42:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 17 11:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4bcdb9b45d7d8b7f98469145e69f3289b945885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:29:88:d2:5f:a2:a8:2a:ee:b1:54:fb:06:
15:e9:64:43:57:46:7e:7d:30:ab:67:bd:ae:90:d6:
f7:34:70:6c:69:4d:fa:14:ee:50:4c:15:6f:db:4c:
4e:89:0b:f0:3f:14:a3:d4:7e:da:7f:fd:85:cc:a0:
b0:e1:85:d5:73:a8:df:76:4a:26:46:b4:e0:0e:d8:
40:cb:c9:a7:05:77:5a:2f:fe:26:19:f8:6d:0d:9f:
74:71:b3:ce:e1:82:dd:56:6b:4d:d6:58:e6:2e:bf:
ef:5f:3e:8e:54:82:03:c7:1e:9b:97:2a:f4:7e:07:
d7:81:4c:a2:aa:ff:0c:5c:32:e2:7f:38:61:a4:17:
5c:cc:b5:91:f9:ce:34:69:78:fb:a8:9d:79:89:f8:
7e:e9:ad:eb:09:86:e7:7d:db:0f:27:36:ad:28:32:
7f:7d:62:0e:3c:08:7c:c8:81:53:cd:be:1f:05:df:
ee:6a:be:55:69:a7:9d:3d:e0:18:59:ac:93:01:2f:
e7:b7:23:6c:2d:00:13:20:b3:77:80:8e:b0:1b:68:
50:7e:11:e8:8a:e5:1b:19:17:e1:a8:b3:d9:17:b1:
bb:e1:57:af:60:f1:d7:45:31:d2:b2:2d:bb:34:52:
75:c4:b8:ee:12:d0:d6:4f:a1:06:f8:77:fe:ba:83:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BC:DB:9B:45:D7:D8:B7:F9:84:69:14:5E:69:F3:28:9B:94:58:85
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pLzbm0XX2Lf5hGkUXmnzKJuUWIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.195.0/24
88.209.211.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:7d:8a:b2:d1:0c:0c:a2:b7:ab:66:ab:4d:63:b8:99:0e:54:
0d:72:40:f1:84:dd:61:86:05:93:99:a3:71:25:9e:ca:6c:30:
95:74:4c:25:74:7c:a0:d6:b8:4d:6e:49:28:27:b2:07:e2:7f:
9f:5a:3b:ef:91:56:20:03:8b:e3:6b:95:48:57:20:4d:fc:ab:
e0:8c:8b:d1:06:9e:6b:91:43:76:3c:16:3d:f4:7a:5d:55:b3:
d6:72:a7:e2:16:81:60:8d:db:d4:9c:6f:78:e5:d2:fc:9e:05:
8c:9a:61:1e:fe:05:9d:77:87:d8:3d:31:4d:8c:19:41:43:f9:
4a:4c:3c:83:98:1f:49:f2:00:61:1c:f5:08:79:ca:be:fc:9d:
b6:6a:08:73:8f:6e:94:e5:2e:73:2a:31:74:2b:2a:52:4d:82:
9f:25:a6:48:b2:69:1f:b9:c6:71:e7:a5:b3:04:0a:fe:73:4d:
4f:f4:2c:17:09:2f:10:23:bf:d3:61:83:01:d1:99:90:ae:b7:
b3:17:86:89:9d:78:79:77:30:d8:72:63:ab:1e:37:2e:67:f8:
ed:fe:94:4f:5b:af:8a:e0:cf:44:d0:7f:b7:aa:ea:66:e0:1f:
b7:3b:c8:f1:e5:03:48:89:cc:e4:60:1f:1c:bf:72:0d:76:63:
0a:55:3f:93
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 31 07:50:01 2024 by rpki-client on console-ams.rpki-client.org