Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/siHkqnia-CKkgPuRKKpA5YNoV_c.roa
File: siHkqnia-CKkgPuRKKpA5YNoV_c.roa (raw, json)
Hash identifier: WA8bgF/gqwiITZH4NhSwRdaG+0brwEyWawaqSm8JI7k=
Subject key identifier: B2:21:E4:AA:78:9A:F8:22:A4:80:FB:91:28:AA:40:E5:83:68:57:F7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7B0FCB12AE1AE25B1BBC0E6E926CD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/siHkqnia-CKkgPuRKKpA5YNoV_c.roa
Signing time: Mon 02 Jan 2023 09:54:47 +0000
ROA not before: Mon 02 Jan 2023 09:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 88.209.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 06:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:b0:fc:b1:2a:e1:ae:25:b1:bb:c0:e6:e9:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b221e4aa789af822a480fb9128aa40e5836857f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:8e:37:28:f6:0f:db:c5:5a:82:ba:80:08:
54:38:b0:97:07:b9:e7:03:03:99:36:61:50:35:2c:
0f:d0:31:3b:f1:bc:eb:0d:cc:84:59:89:14:7b:4b:
2b:e0:53:23:6c:62:a6:e3:c5:4c:dc:68:22:34:63:
c5:5b:c5:27:4f:9f:10:10:fd:77:8a:05:ea:5d:00:
ab:72:eb:74:e7:f7:30:05:24:0a:c1:d9:96:d9:a4:
27:c5:4e:08:f6:4e:e1:ae:f8:91:64:13:69:14:4b:
e2:70:e8:98:3f:5c:d3:7f:0f:b5:d3:df:5e:0f:d7:
f1:53:b8:a8:05:bc:58:4d:4a:fa:d3:b1:d1:33:bd:
c9:5d:60:9d:47:46:97:11:7f:eb:5a:fd:22:88:f2:
c3:d3:a1:a5:45:8f:c7:b5:f5:e3:19:48:44:40:08:
b0:2b:de:88:98:b3:3a:94:0e:5b:14:cd:60:4a:9e:
4f:14:ea:ef:c5:e9:f3:c7:e1:d8:9b:f6:55:62:e6:
b2:67:a7:33:78:d7:ea:6f:e2:c7:4a:5d:e7:a1:c9:
09:54:4e:5f:a1:7a:70:ec:65:97:07:f2:45:bc:78:
07:0c:58:19:d2:5f:8a:7e:3e:6f:f4:cf:27:d5:61:
c5:29:7f:c2:e0:79:d5:c7:f4:27:b2:3a:bd:de:96:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:E4:AA:78:9A:F8:22:A4:80:FB:91:28:AA:40:E5:83:68:57:F7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/siHkqnia-CKkgPuRKKpA5YNoV_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:af:c7:32:55:a9:c4:e9:3e:72:81:5b:7a:f4:18:f6:06:7c:
29:da:88:ac:62:b1:ff:10:f2:6d:ee:d1:93:36:ce:f8:bd:4d:
f2:cf:28:44:02:86:3b:e8:55:11:86:2e:aa:7c:b6:a7:46:f3:
aa:e0:28:7e:0b:6c:2a:1d:57:24:68:72:21:ea:0b:b9:17:6c:
1a:89:25:a8:7b:1c:d0:bc:1b:e3:93:4f:39:5a:1b:6b:0f:ed:
c5:82:fd:5b:3d:ea:cb:89:81:d8:b9:72:b8:1f:d1:28:50:be:
8c:0d:5d:8e:19:79:49:57:83:b9:db:fc:ae:7c:3d:e3:dd:10:
e4:ee:ae:ff:d2:08:17:44:92:fc:00:1a:f6:45:ef:0b:2a:bb:
cd:b0:d5:e0:8f:e1:c5:21:18:f7:48:2b:90:f3:95:5a:19:08:
77:0d:32:74:f5:ea:23:34:36:8e:3f:78:1c:85:7f:5d:5b:65:
3e:02:99:9a:ad:15:e6:a5:e8:b2:20:5a:fa:9f:96:02:f1:c1:
36:38:49:a8:ef:76:9c:3f:0d:a4:4e:cd:40:ff:82:6c:92:04:
50:6f:75:22:62:05:4c:b7:dc:22:05:76:d2:15:ce:5f:a8:63:
64:d1:b1:1d:66:48:70:6d:c4:8f:41:f4:b2:24:3e:64:6c:6e:
3a:89:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org