Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vxfk5yJvaHTXuR-6YKqI4fasowM.roa
File: vxfk5yJvaHTXuR-6YKqI4fasowM.roa (raw, json)
Hash identifier: nQeU9ff//2n70CNfq/gqXKCDb2bgQ6Q5LReASTDa8M4=
Subject key identifier: BF:17:E4:E7:22:6F:68:74:D7:B9:1F:BA:60:AA:88:E1:F6:AC:A3:03
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0191C0CD4326851B6798D3F9B38DFA67D43C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vxfk5yJvaHTXuR-6YKqI4fasowM.roa
Signing time: Thu 05 Sep 2024 06:09:23 +0000
ROA not before: Thu 05 Sep 2024 06:09:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 88.209.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 06:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:cd:43:26:85:1b:67:98:d3:f9:b3:8d:fa:67:d4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 5 06:09:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf17e4e7226f6874d7b91fba60aa88e1f6aca303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:e2:12:12:99:fe:b4:9d:b5:70:cd:87:ba:
f3:a1:47:58:c9:03:71:6c:5c:5f:60:ee:12:8d:65:
2c:33:5d:9b:05:ab:96:f1:3b:f9:63:51:e4:5d:c7:
36:88:ce:8d:0f:76:b0:2c:70:29:79:e8:3d:e8:82:
bf:3e:94:bb:d1:c8:35:87:75:70:99:ec:cc:d8:95:
d6:42:cb:b9:a7:ba:28:f1:3b:3d:5c:83:4a:24:27:
bb:af:ae:0b:75:6d:70:78:3d:ee:13:ee:aa:22:9b:
cc:f6:ef:e4:02:d8:3d:3a:4c:57:e0:75:22:77:29:
33:be:92:72:6e:e8:7c:0b:40:41:66:24:7c:c8:69:
85:04:98:2c:aa:b3:92:59:31:8b:da:3a:d0:6d:02:
ae:f2:8d:12:1f:db:23:fd:94:c4:b1:76:56:e9:01:
23:de:35:8f:31:70:33:9e:c2:84:cd:e6:63:71:f6:
b3:7d:34:a4:f7:33:5a:8d:95:a3:72:c8:e3:46:ba:
12:08:01:1a:82:96:8d:2c:d4:96:98:64:87:38:88:
f8:d0:cb:53:b1:60:9d:98:67:4d:66:5d:85:13:04:
19:2e:3a:3d:3a:5a:14:4e:6e:fa:dc:67:87:36:c9:
2e:16:e7:f9:d7:31:db:9b:f3:4e:6a:12:1d:2e:aa:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:E4:E7:22:6F:68:74:D7:B9:1F:BA:60:AA:88:E1:F6:AC:A3:03
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vxfk5yJvaHTXuR-6YKqI4fasowM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2d:9d:be:6e:53:36:2a:a1:cc:21:39:4a:a3:14:8a:e1:47:
f9:46:63:c1:4e:ea:0f:20:72:4b:d4:1a:52:16:80:30:00:99:
d7:dd:af:f6:3f:2b:83:cb:50:46:44:3b:f3:c1:7b:3f:0f:e6:
b8:1a:ce:54:95:df:f8:78:26:41:79:1f:f9:25:19:d3:cc:54:
b3:83:b9:58:09:3c:dd:9d:4b:a1:3a:27:56:bd:75:70:e7:30:
26:1e:bc:35:94:30:aa:8c:fb:41:06:3e:f4:e3:ea:03:95:ac:
1c:ed:87:29:e8:e1:e2:cf:cf:a6:62:26:18:81:b4:01:92:e0:
a9:b2:1d:c0:bd:24:25:5f:f8:61:43:e7:ca:e3:f2:8e:0c:6e:
5d:24:ca:aa:3b:95:c0:a3:ce:4a:f2:d5:9c:e1:79:95:7f:7f:
ce:9e:dc:6a:0b:b7:85:d7:a9:f2:0c:ba:4e:75:78:3e:e9:bd:
d8:47:59:7a:b0:8c:11:8b:f1:ad:e8:4f:9b:56:0d:72:5f:39:
85:3f:c7:71:0f:63:e9:e3:7e:6a:90:76:ed:3e:e0:41:b0:fa:
f5:7d:47:67:82:a0:86:c2:30:43:e5:df:3c:9a:26:f0:e1:1a:
83:42:42:8d:35:0c:cd:c1:aa:b5:dd:8d:cd:61:d5:36:30:ff:
a8:22:82:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHAzUMmhRtnmNP5s436Z9Q8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjQwOTA1MDYwOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjE3ZTRlNzIyNmY2ODc0ZDdiOTFmYmE2MGFhODhlMWY2YWNhMzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC7iEhKZ/rSdtXDNh7rzoUdYyQNx
bFxfYO4SjWUsM12bBauW8Tv5Y1HkXcc2iM6ND3awLHApeeg96IK/PpS70cg1h3Vw
mezM2JXWQsu5p7oo8Ts9XINKJCe7r64LdW1weD3uE+6qIpvM9u/kAtg9OkxX4HUi
dykzvpJybuh8C0BBZiR8yGmFBJgsqrOSWTGL2jrQbQKu8o0SH9sj/ZTEsXZW6QEj
3jWPMXAznsKEzeZjcfazfTSk9zNajZWjcsjjRroSCAEagpaNLNSWmGSHOIj40MtT
sWCdmGdNZl2FEwQZLjo9OloUTm763GeHNskuFuf51zHbm/NOahIdLqoT7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL8X5Ocib2h017kfumCqiOH2rKMDMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvdnhmazV5SnZhSFRYdVItNllLcUk0ZmFzb3dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH0MA0G
CSqGSIb3DQEBCwUAA4IBAQArLZ2+blM2KqHMITlKoxSK4Uf5RmPBTuoPIHJL1BpS
FoAwAJnX3a/2PyuDy1BGRDvzwXs/D+a4Gs5Uld/4eCZBeR/5JRnTzFSzg7lYCTzd
nUuhOidWvXVw5zAmHrw1lDCqjPtBBj704+oDlawc7Ycp6OHiz8+mYiYYgbQBkuCp
sh3AvSQlX/hhQ+fK4/KODG5dJMqqO5XAo85K8tWc4XmVf3/OntxqC7eF16nyDLpO
dXg+6b3YR1l6sIwRi/Gt6E+bVg1yXzmFP8dxD2Pp435qkHbtPuBBsPr1fUdngqCG
wjBD5d88mibw4RqDQkKNNQzNwaq13Y3NYdU2MP+oIoJw
Generated at Sat Oct 5 08:16:16 2024 by rpki-client on console-fra.rpki-client.org