Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/sgjaoyisVKvrIILFW4RTXOuhMTg.roa
File: sgjaoyisVKvrIILFW4RTXOuhMTg.roa (raw, json)
Hash identifier: mvvygMLILWwDoXjwDpoG6jSd+3bszg0wlnL1BzHW0f4=
Subject key identifier: B2:08:DA:A3:28:AC:54:AB:EB:20:82:C5:5B:84:53:5C:EB:A1:31:38
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7A26E7F84EDAFF57028F5A217162B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/sgjaoyisVKvrIILFW4RTXOuhMTg.roa
Signing time: Mon 02 Jan 2023 09:54:43 +0000
ROA not before: Mon 02 Jan 2023 09:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 88.209.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 May 2023 13:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:a2:6e:7f:84:ed:af:f5:70:28:f5:a2:17:16:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b208daa328ac54abeb2082c55b84535ceba13138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:02:f9:a3:0a:b5:49:bb:cb:21:03:fc:19:
ff:8d:73:77:1e:6e:a7:a2:7a:89:f8:19:e9:71:08:
f2:09:69:58:eb:76:9d:49:6e:c7:5b:23:56:1c:5a:
4d:41:65:72:5c:0c:33:ac:75:d5:d0:d9:66:5e:3b:
6a:9f:d0:c4:0d:7e:56:f0:75:bd:aa:14:20:ff:9f:
15:9a:6d:ac:3d:e1:45:a1:be:56:6d:80:d4:d2:48:
73:70:c7:ff:a9:3b:e8:b9:4f:e3:dc:6b:06:57:24:
97:4c:57:e9:20:3b:e3:ba:27:94:e6:cf:e4:d7:c0:
e2:82:e5:4f:ba:6a:0f:e6:ca:ca:4b:89:8c:8c:23:
54:77:30:08:ee:c3:5f:a7:82:89:f2:09:54:4c:53:
75:fb:81:b2:04:cc:93:13:d1:28:4a:09:89:a6:75:
d6:c1:ab:a2:15:50:81:f4:5d:41:73:4f:5b:00:5d:
25:c3:93:7d:57:7f:01:45:68:e6:69:f2:f4:5a:45:
66:41:32:a2:f2:f7:b9:76:61:cf:e5:0e:02:19:f8:
d6:be:52:17:7a:bd:41:ed:22:0a:71:ef:6a:5a:33:
fe:2d:4b:1b:bc:5c:93:c1:1d:cb:75:71:db:af:67:
71:24:11:b0:c2:f9:a8:f0:56:33:66:ea:56:f0:86:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:08:DA:A3:28:AC:54:AB:EB:20:82:C5:5B:84:53:5C:EB:A1:31:38
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/sgjaoyisVKvrIILFW4RTXOuhMTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7f:a6:2b:6d:a0:5a:c3:ab:8a:36:20:ee:be:d8:66:23:66:
e8:ce:23:03:fd:b8:0a:43:db:ec:b4:ca:03:aa:1d:4f:6e:35:
f8:96:bd:6a:5a:1a:1a:e8:3e:e8:85:e4:53:09:26:9f:71:71:
aa:68:46:50:2a:b7:ed:9d:99:c8:c7:b1:a9:eb:f4:9f:e3:aa:
a9:16:5e:66:37:0b:58:52:2e:dd:ac:c9:40:37:bd:c0:ab:c5:
6b:a8:5a:22:7c:b8:d6:30:fd:7f:b0:76:78:7a:78:a8:0b:d5:
7d:44:d7:b7:9b:9a:19:50:97:e3:d7:38:9c:e2:1b:3b:76:a4:
58:7f:8d:9f:b1:45:9b:61:30:55:2f:0f:a3:5a:28:3f:8c:56:
25:d8:ff:b9:75:a5:f8:78:c7:c3:df:3c:04:38:8b:39:aa:98:
ac:d4:7e:a1:92:c3:7f:31:31:2f:92:de:0d:93:cb:49:a7:e9:
27:14:9d:ac:6f:ef:09:3c:80:8a:64:61:31:4f:60:5b:82:56:
a8:d0:13:36:84:33:15:cf:d4:25:21:f5:a5:4d:d0:57:eb:95:
27:d6:f7:fa:a0:5c:12:c8:30:ff:4d:26:60:9a:13:8c:55:99:
ca:67:18:5c:45:fa:5b:62:f0:c9:2f:1e:c3:1d:8b:76:fe:ad:
c4:31:92:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx56Juf4Ttr/VwKPWiFxYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwMTAyMDk1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjA4ZGFhMzI4YWM1NGFiZWIyMDgyYzU1Yjg0NTM1Y2ViYTEzMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr0C+aMKtUm7yyED/Bn/jXN3Hm6n
onqJ+BnpcQjyCWlY63adSW7HWyNWHFpNQWVyXAwzrHXV0NlmXjtqn9DEDX5W8HW9
qhQg/58Vmm2sPeFFob5WbYDU0khzcMf/qTvouU/j3GsGVySXTFfpIDvjuieU5s/k
18DiguVPumoP5srKS4mMjCNUdzAI7sNfp4KJ8glUTFN1+4GyBMyTE9EoSgmJpnXW
wauiFVCB9F1Bc09bAF0lw5N9V38BRWjmafL0WkVmQTKi8ve5dmHP5Q4CGfjWvlIX
er1B7SIKce9qWjP+LUsbvFyTwR3LdXHbr2dxJBGwwvmo8FYzZupW8IZmhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLII2qMorFSr6yCCxVuEU1zroTE4MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvc2dqYW95aXNWS3ZySUlMRlc0UlRYT3VoTVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH0MA0G
CSqGSIb3DQEBCwUAA4IBAQAEf6YrbaBaw6uKNiDuvthmI2boziMD/bgKQ9vstMoD
qh1PbjX4lr1qWhoa6D7oheRTCSafcXGqaEZQKrftnZnIx7Gp6/Sf46qpFl5mNwtY
Ui7drMlAN73Aq8VrqFoifLjWMP1/sHZ4enioC9V9RNe3m5oZUJfj1zic4hs7dqRY
f42fsUWbYTBVLw+jWig/jFYl2P+5daX4eMfD3zwEOIs5qpis1H6hksN/MTEvkt4N
k8tJp+knFJ2sb+8JPICKZGExT2Bbglao0BM2hDMVz9QlIfWlTdBX65Un1vf6oFwS
yDD/TSZgmhOMVZnKZxhcRfpbYvDJLx7DHYt2/q3EMZLz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org