Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tiaNwim-jtRX1Yev-llQJOgi1rI.roa
File: tiaNwim-jtRX1Yev-llQJOgi1rI.roa (raw, json)
Hash identifier: CpS1/05Z0RvMA1XzGHt/aJ2V3TZkLEfGkD2oH/hiYY8=
Subject key identifier: B6:26:8D:C2:29:BE:8E:D4:57:D5:87:AF:FA:59:50:24:E8:22:D6:B2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A8D514D595375AEDD2EA9EC732EF9969A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tiaNwim-jtRX1Yev-llQJOgi1rI.roa
Signing time: Wed 13 Sep 2023 06:53:50 +0000
ROA not before: Wed 13 Sep 2023 06:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 88.209.244.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 06:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:51:4d:59:53:75:ae:dd:2e:a9:ec:73:2e:f9:96:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 13 06:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6268dc229be8ed457d587affa595024e822d6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:39:47:02:77:a2:ed:08:53:75:33:c0:20:80:
20:be:e0:62:44:f8:96:c7:0c:a8:80:86:48:4f:7c:
45:14:12:b6:53:11:c7:02:fa:c4:03:ea:ae:d1:a7:
f5:82:0e:01:05:2f:b4:c7:6e:69:9e:3a:8c:5e:ac:
21:54:d8:f1:6e:bc:3a:00:bf:ae:c9:be:7b:58:2f:
df:62:5b:05:32:b3:91:5a:0e:92:c9:72:4b:84:d5:
d0:5b:03:6c:06:b3:f6:ca:bf:78:e5:be:a3:69:f9:
2f:23:67:36:1a:d1:ee:9c:3e:4c:78:5b:d7:26:7a:
31:b4:01:6b:0c:97:3b:20:4b:5d:bc:f0:cd:ae:74:
34:5b:ca:5c:7d:07:8f:c9:3c:65:b9:eb:47:8b:7b:
87:f1:a0:47:d1:1c:fd:94:e7:49:e9:92:4c:0d:9b:
f2:7e:7b:bd:f5:56:cd:7b:72:14:05:95:31:d1:48:
5a:ea:c8:8a:85:4f:b5:df:6b:d0:30:b3:9f:83:37:
73:c8:6d:f8:e8:3a:ef:7a:1b:c1:aa:df:e6:b0:26:
d2:80:e4:4f:d3:a6:48:ea:4b:55:ec:d4:63:1b:1a:
9a:b5:ab:72:8a:1d:db:f8:a3:93:05:58:d7:f7:d9:
96:07:08:fc:2b:eb:64:88:dd:72:e8:c8:8f:78:94:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:26:8D:C2:29:BE:8E:D4:57:D5:87:AF:FA:59:50:24:E8:22:D6:B2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tiaNwim-jtRX1Yev-llQJOgi1rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.216.0/24
88.209.244.0/24
88.209.247.0/24
Signature Algorithm: sha256WithRSAEncryption
57:12:2a:52:03:62:10:7e:b8:e0:e8:ec:5a:cc:d3:5f:5b:e0:
d9:38:07:73:b3:d8:99:02:c3:56:9c:00:1a:93:67:f6:f6:0f:
88:cf:53:15:a9:b4:e0:5c:b1:1c:64:57:e5:8a:3c:21:e9:31:
71:ed:80:c5:b4:26:6c:de:80:be:6d:be:a7:12:58:d7:26:c3:
fa:a4:a9:c2:c2:2f:e4:35:9b:81:30:e9:1a:0c:88:14:de:9b:
b6:29:cd:17:68:e0:92:8e:a8:52:ee:26:dd:eb:b1:a4:53:ae:
e2:1b:90:07:73:9c:30:42:62:d5:dd:f9:17:24:f4:42:e2:c3:
8a:26:ff:ee:63:9a:b8:57:00:ce:d6:90:0d:65:6c:40:bb:d0:
0f:b9:c1:10:37:af:5c:97:ec:1a:5e:21:60:d6:97:43:37:6b:
15:fc:80:b0:eb:34:af:4a:a7:37:7e:4e:7a:17:b2:56:37:97:
85:a1:7a:1a:c3:1e:bd:8f:ca:ba:8c:6a:af:98:6f:e0:b3:3f:
bd:c1:4a:20:9b:08:07:0a:4a:3f:90:d3:c1:0c:ba:46:93:98:
db:5b:47:e2:83:f2:87:1c:d3:df:f5:80:a6:5e:58:c3:1d:f2:
42:70:0d:b2:13:a4:89:25:b6:a9:1a:3c:b2:c5:fc:76:7a:73:
b2:bb:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org