Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xDpBh0TSDc9Ycq5l-y1H-SR2eac.roa
File: xDpBh0TSDc9Ycq5l-y1H-SR2eac.roa (raw, json)
Hash identifier: Cu+OWbaIzfmN1EYjx1kMNf5LFEDp35PhTzV+8yzdt0o=
Subject key identifier: C4:3A:41:87:44:D2:0D:CF:58:72:AE:65:FB:2D:47:F9:24:76:79:A7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0189347F5424EC8F528F8CB1B9D0B939319C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xDpBh0TSDc9Ycq5l-y1H-SR2eac.roa
Signing time: Sat 08 Jul 2023 07:55:07 +0000
ROA not before: Sat 08 Jul 2023 07:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 88.209.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:7f:54:24:ec:8f:52:8f:8c:b1:b9:d0:b9:39:31:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 8 07:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43a418744d20dcf5872ae65fb2d47f9247679a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:08:8d:3c:c0:4c:d5:3e:35:64:05:aa:79:
c5:65:2e:32:c4:c2:60:27:d4:7f:7e:62:de:40:7c:
1a:96:93:03:58:de:08:ab:24:7f:eb:70:c9:ec:ee:
c1:12:ee:65:94:c3:37:ce:6e:47:15:b9:90:9f:e7:
7a:de:9d:f7:28:8a:70:22:49:f3:31:6c:ff:d1:0c:
98:38:07:29:e7:b3:77:e4:b4:dc:f5:c6:59:50:b5:
4e:14:19:23:4b:96:f0:25:6b:c9:66:de:4c:a7:38:
8e:85:88:89:56:dc:fd:13:72:21:fb:c9:70:a8:f5:
4c:e9:de:e6:08:e9:c0:2b:d7:00:19:41:6e:b3:2d:
31:e3:cf:13:4e:4a:9a:5e:70:2d:56:8a:5b:ff:ea:
e1:7f:9f:bd:dd:10:2e:f1:37:93:e2:10:43:a8:2a:
4b:72:41:77:6b:95:5b:f6:c6:77:7e:69:91:5a:37:
77:b3:02:40:fb:eb:de:54:08:fb:df:fe:76:cb:75:
c0:55:e0:17:c6:9e:35:01:86:0c:4e:27:e7:e7:cc:
43:1f:d4:1a:a3:fa:51:b5:80:81:71:9e:5d:70:f3:
8e:30:3b:be:04:e3:3a:68:59:cc:51:6e:d9:3d:3d:
97:3b:af:b4:ca:52:4e:ea:87:a0:df:72:f3:0f:46:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:41:87:44:D2:0D:CF:58:72:AE:65:FB:2D:47:F9:24:76:79:A7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xDpBh0TSDc9Ycq5l-y1H-SR2eac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.216.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b2:b4:f5:b6:9a:6f:a0:f1:3e:19:cf:7c:dd:ae:03:fa:e5:
40:4b:86:2c:01:f9:c3:91:db:ce:a4:df:30:3d:ef:da:9f:41:
70:48:c9:3d:28:a8:bf:d9:c1:19:ef:17:bf:ea:d6:5d:9e:25:
47:65:81:16:67:57:2e:df:14:e6:db:b6:65:c7:d6:01:cd:77:
0e:b1:84:b4:02:c5:8f:cc:f6:2b:c6:5f:1c:58:b5:55:3f:1b:
62:a4:b4:e8:1c:81:54:1d:f3:8b:0b:6f:96:d7:8b:1a:6a:c0:
c5:e9:26:55:c7:7f:95:4c:3a:4d:ba:a8:1f:a5:e2:79:e9:70:
05:4a:91:aa:f2:12:2a:1a:f5:92:ce:07:df:5c:a3:fb:f6:69:
ef:85:6d:4e:cf:f3:b1:1f:68:eb:30:e4:01:ad:f6:7c:9e:c4:
55:aa:d2:59:ca:94:b1:01:51:b6:b6:f5:f0:fe:16:8f:fc:e1:
21:03:2d:e8:1f:4d:47:09:45:79:25:f6:e7:e8:fe:80:e5:63:
6f:29:b3:b1:54:97:4c:c2:60:50:a4:6e:61:b4:01:8f:14:45:
96:a6:5c:49:5d:27:d3:76:81:37:15:b4:1a:fe:5b:26:55:67:
27:01:cb:74:93:4a:e6:84:51:e2:b3:37:9f:b1:74:a4:80:de:
3a:a3:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org