Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/rZYKi3Lp5bK5rWpZkDxAwIrUSis.roa
File: rZYKi3Lp5bK5rWpZkDxAwIrUSis.roa (raw, json)
Hash identifier: Ry+KtwNdkqYKaYotDHuPS7HSoTEySgreXPsnoolQWV4=
Subject key identifier: AD:96:0A:8B:72:E9:E5:B2:B9:AD:6A:59:90:3C:40:C0:8A:D4:4A:2B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018610F674AD91E7BF4E95F05BC039877149
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/rZYKi3Lp5bK5rWpZkDxAwIrUSis.roa
Signing time: Thu 02 Feb 2023 07:10:32 +0000
ROA not before: Thu 02 Feb 2023 07:10:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 88.209.245.0/24 maxlen: 24
88.209.244.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 08:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:f6:74:ad:91:e7:bf:4e:95:f0:5b:c0:39:87:71:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 2 07:10:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad960a8b72e9e5b2b9ad6a59903c40c08ad44a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:f6:fb:41:04:76:f0:9c:63:d0:61:60:d3:
c7:a2:14:ea:5a:a8:0b:6a:9c:63:f2:61:07:c1:5c:
f0:66:ce:a5:6e:d5:ac:82:23:b2:7c:28:70:6a:b5:
ab:e7:4c:82:cd:e0:3a:eb:7d:74:59:69:9e:cb:37:
11:e9:34:2b:59:45:37:e2:06:a1:a2:5e:bb:b2:6b:
92:c0:e5:ab:b1:a2:77:29:0e:3f:32:32:20:8f:fd:
b7:0a:64:76:ea:35:07:96:d6:84:4b:a3:79:59:84:
46:bc:b8:c3:ba:4c:9d:85:aa:3c:64:06:3a:ef:a2:
0f:e1:75:5c:d3:4d:88:ce:fa:bf:3b:3a:99:14:d9:
71:71:08:2e:65:6b:a6:33:55:b2:a1:ed:65:4d:95:
1f:9d:37:e0:f8:11:46:4d:ee:50:de:04:bc:d1:08:
b2:0a:4e:05:a1:15:db:c1:c8:c5:6a:9a:e5:20:f4:
12:28:a6:a3:0f:c0:61:f0:0f:52:85:bc:74:0f:89:
35:66:cf:07:34:4e:7e:87:62:6d:f3:b8:69:88:54:
a6:f8:30:1f:e9:e8:22:97:50:4e:0e:53:52:e3:51:
5e:5a:7b:7f:85:1d:69:4b:8d:34:be:0f:f4:3e:2f:
eb:5d:e8:49:d9:df:07:e7:e0:e0:37:8b:a7:e3:3d:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:0A:8B:72:E9:E5:B2:B9:AD:6A:59:90:3C:40:C0:8A:D4:4A:2B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/rZYKi3Lp5bK5rWpZkDxAwIrUSis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/24
88.151.58.0/24
88.209.244.0/23
Signature Algorithm: sha256WithRSAEncryption
85:24:ca:cf:81:4b:5c:dd:90:a5:63:02:57:3b:44:7f:50:60:
22:1d:af:30:9d:43:48:cf:c5:4c:9c:14:a9:c7:c3:60:c6:63:
2e:91:7f:88:99:98:85:6d:2e:37:56:de:60:ec:83:0e:a9:66:
50:dd:13:a3:93:35:6d:18:5f:20:07:a4:ca:ea:56:64:73:2c:
a7:e3:90:2d:77:eb:30:14:70:04:68:cd:ea:4b:16:6b:96:91:
82:5e:05:1d:a7:da:59:e3:76:11:a3:c3:16:c5:48:6b:3d:02:
d0:fe:da:ed:47:4e:ef:1a:b7:71:48:05:1d:43:3b:e1:7a:b1:
47:4e:30:9a:32:68:10:bc:9d:0b:92:f9:08:f5:c1:83:c4:7d:
de:fe:02:5b:0d:e2:ca:16:b6:90:fe:22:d4:38:e2:d3:24:93:
5d:9b:44:ec:ac:4b:5a:36:2c:04:65:3e:e9:dd:17:77:94:d0:
65:cf:e7:11:3a:f4:78:6c:bc:c6:04:00:75:ab:b1:a8:ed:2a:
bd:fd:38:ea:40:3d:22:19:55:2b:e4:01:19:77:07:1e:e2:97:
ef:f3:3b:32:46:f7:9c:7a:72:a7:21:c2:a2:c7:86:31:88:95:
23:38:f4:a5:77:20:8a:92:23:c2:9b:ca:4e:77:b5:2f:91:ad:
1c:8b:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org