Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tXHy3kJ9UcMZwJYbb_AvM7quFNc.roa
File: tXHy3kJ9UcMZwJYbb_AvM7quFNc.roa (raw, json)
Hash identifier: V5Fcj0+wojYYQftHTMgJP1JreWN0I22mzs2frFmsjus=
Subject key identifier: B5:71:F2:DE:42:7D:51:C3:19:C0:96:1B:6F:F0:2F:33:BA:AE:14:D7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01876F177BEE5A1E51C95265ECFEAEFBACE8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tXHy3kJ9UcMZwJYbb_AvM7quFNc.roa
Signing time: Tue 11 Apr 2023 06:53:42 +0000
ROA not before: Tue 11 Apr 2023 06:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 07:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:17:7b:ee:5a:1e:51:c9:52:65:ec:fe:ae:fb:ac:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 11 06:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b571f2de427d51c319c0961b6ff02f33baae14d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:74:43:58:2e:7a:53:47:40:9a:9f:8b:b0:
a0:15:54:b1:71:6e:d9:9d:f7:27:90:8e:16:37:11:
00:e2:4e:cb:12:f6:ab:0f:54:72:8f:0f:14:e9:42:
37:b8:89:e2:9d:97:25:e9:50:46:04:75:d8:91:8e:
2e:0a:5e:72:4d:42:e0:e0:b6:05:90:d5:35:43:f2:
8e:02:b0:8b:22:33:fc:98:3c:f8:ea:c6:51:55:61:
03:f5:de:31:5c:c0:e2:67:01:fb:5e:24:23:69:a6:
b6:37:15:69:e3:6d:a5:44:af:57:b7:48:a7:e2:ca:
f5:74:f1:c6:a0:19:9f:9a:cb:64:57:02:a5:63:86:
5a:1e:c3:e0:f3:89:ed:5f:ce:51:d3:97:f4:f9:e8:
1a:76:d2:b7:43:1b:f6:b3:15:c2:74:4d:8c:89:3c:
ef:39:61:ef:3b:01:40:e6:57:1c:94:0f:e0:c1:56:
fe:1e:4b:ba:a6:ba:4a:cc:99:96:6b:9b:96:64:f1:
54:17:a2:f5:97:67:e1:f2:73:fb:76:f7:1d:cd:4b:
cf:8b:d7:ff:6c:8e:dd:79:e0:3e:93:fc:a2:53:03:
d0:cb:84:8f:fb:b8:ae:53:f1:37:83:fb:49:26:6f:
74:d6:35:5e:5a:d3:57:bb:46:b0:9f:1c:76:e4:e1:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:F2:DE:42:7D:51:C3:19:C0:96:1B:6F:F0:2F:33:BA:AE:14:D7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tXHy3kJ9UcMZwJYbb_AvM7quFNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/24
88.209.216.0/24
88.209.225.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3e:05:dc:2a:0a:aa:0a:c5:30:9b:3c:5a:9a:be:1f:61:81:
d5:a0:99:2b:a3:eb:58:93:38:a0:b7:8a:f9:44:24:10:88:9b:
7f:d5:8c:f6:a3:ca:67:83:05:97:42:71:fc:d8:14:fc:6f:02:
8c:e8:37:1a:55:d7:93:4c:80:ef:f0:a6:8f:ad:4e:17:b0:9c:
f5:73:ad:28:06:f5:2b:91:5f:80:cb:2f:ab:92:b0:be:2e:10:
c9:17:5c:c4:a5:23:73:a0:6b:37:01:48:5a:59:17:8c:dd:2c:
f4:7d:e1:f2:e3:0e:7f:d4:50:f8:e9:22:44:61:00:fd:f1:9c:
93:70:db:2b:e6:b3:60:4b:da:1b:13:a9:76:00:1a:d0:b8:b3:
69:74:1a:0e:38:2e:c5:b8:4a:39:51:05:27:31:28:0a:2d:43:
1c:82:3f:a6:54:42:87:40:ac:04:40:93:6f:a5:74:ac:19:f5:
b7:0b:71:87:a2:6c:d9:37:dd:c5:f7:00:61:02:5f:a0:01:d0:
88:2d:03:15:c5:e5:a4:88:2e:c6:54:c8:7c:ee:84:3a:5b:bb:
db:f8:0e:22:5b:93:36:e5:ab:28:88:e2:da:d1:86:66:6b:72:
a3:1e:5b:79:de:ba:fe:af:77:3a:c2:a6:7e:c9:1a:86:ff:9f:
d8:98:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org