Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/psgdg483Vy8xpVoApNT2ub_WDDE.roa
File: psgdg483Vy8xpVoApNT2ub_WDDE.roa (raw, json)
Hash identifier: LBFmTfGYQD9VosU4PAqGff87zMnhBOlcp7HhIUmEHws=
Subject key identifier: A6:C8:1D:83:8F:37:57:2F:31:A5:5A:00:A4:D4:F6:B9:BF:D6:0C:31
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018635439A134F8F6547F208DA3B99CAC67D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/psgdg483Vy8xpVoApNT2ub_WDDE.roa
Signing time: Thu 09 Feb 2023 08:21:08 +0000
ROA not before: Thu 09 Feb 2023 08:21:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 88.209.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:43:9a:13:4f:8f:65:47:f2:08:da:3b:99:ca:c6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 9 08:21:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6c81d838f37572f31a55a00a4d4f6b9bfd60c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:14:dc:93:13:9f:47:f3:a9:9d:3b:6b:43:
bc:10:3f:ac:21:41:28:8f:5c:f5:8e:c8:ab:b5:40:
92:ca:ae:e6:7d:0e:0d:a6:c0:8a:44:12:1b:eb:d2:
2a:83:06:d0:4f:43:59:b7:e9:92:6b:57:05:4e:45:
96:af:fa:40:55:4d:42:b4:9f:42:fd:5a:a7:55:52:
f8:bf:ab:64:81:b0:45:1d:71:f2:15:47:ff:cf:5b:
05:f1:63:ec:5e:3e:53:a8:20:c9:e9:68:ae:10:04:
ad:1b:8b:e7:ed:dd:1d:65:80:36:5b:0e:86:f1:eb:
4c:eb:f4:b5:aa:a2:ce:fb:dc:c1:7e:da:89:8a:aa:
1c:46:88:b3:42:52:34:df:16:cb:25:9e:e3:62:31:
18:72:85:aa:51:61:51:10:a6:69:34:3f:85:4e:45:
dc:4b:cf:7a:0b:a3:41:b4:9d:18:a1:5b:b2:ce:27:
fe:1d:db:f3:c2:d6:52:f9:77:9e:a2:30:40:b4:73:
da:ce:53:21:ac:18:31:b1:62:e1:b6:51:7a:1e:04:
bb:be:e4:6e:fb:c3:f1:a2:c3:48:a9:43:f0:d9:e8:
20:18:03:1c:67:44:57:47:76:a5:f9:b3:3a:3a:21:
f5:34:5e:cd:8d:c8:e9:52:68:9b:c9:d7:c9:da:c4:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C8:1D:83:8F:37:57:2F:31:A5:5A:00:A4:D4:F6:B9:BF:D6:0C:31
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/psgdg483Vy8xpVoApNT2ub_WDDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:85:88:1b:f5:1b:d3:3f:75:84:66:fd:c9:ac:3e:c7:b7:0b:
13:83:cc:6d:58:4f:7b:4c:26:7c:b7:bf:2d:69:c6:bf:fd:62:
eb:cb:4f:c2:4d:d6:a6:bd:03:32:79:99:a2:09:b6:20:91:56:
d2:8e:f7:70:96:72:23:c2:f0:fc:ca:2a:63:e1:85:9a:ec:4e:
cf:27:13:23:b5:02:51:6e:44:05:b0:f7:f8:b2:58:c1:c8:ae:
19:60:ad:a9:a8:48:dc:b1:13:03:f4:ee:ae:4e:47:b9:5c:83:
7c:90:cd:fe:2a:28:22:00:97:6b:d8:dd:7a:87:e4:12:9f:2a:
a3:a1:55:62:26:1c:34:9e:8e:79:b1:0c:5b:1e:8c:8c:97:de:
c9:38:cd:7a:17:9d:5b:de:ca:aa:02:d6:35:1a:d3:57:a1:95:
87:57:6f:16:8b:7c:68:dd:60:98:ff:ad:0c:39:c7:cd:90:df:
21:77:49:08:ba:ac:72:ba:2c:af:c1:20:4e:94:27:98:e5:09:
b2:72:ee:4e:a8:1d:19:bb:49:0e:c9:91:30:f2:54:9c:1a:08:
d1:e7:78:c5:af:21:52:98:ce:18:35:8a:10:1b:39:03:87:a3:
5d:8e:cd:53:91:23:2a:e1:fa:9b:4a:03:77:3a:c4:1c:af:f6:
02:7c:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-ams.rpki-client.org