Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yCL4uHEGe4XLLlE4n4zTbC_t0xI.roa
File: yCL4uHEGe4XLLlE4n4zTbC_t0xI.roa (raw, json)
Hash identifier: paMz/8/BHdkKjQB9N7z5o1jid7dGqobY8L/XrDDLVjI=
Subject key identifier: C8:22:F8:B8:71:06:7B:85:CB:2E:51:38:9F:8C:D3:6C:2F:ED:D3:12
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0185B46FDE6DE4622532819DF3F5F479A783
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yCL4uHEGe4XLLlE4n4zTbC_t0xI.roa
Signing time: Sun 15 Jan 2023 07:58:28 +0000
ROA not before: Sun 15 Jan 2023 07:58:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 88.209.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b4:6f:de:6d:e4:62:25:32:81:9d:f3:f5:f4:79:a7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 15 07:58:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c822f8b871067b85cb2e51389f8cd36c2fedd312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:fc:d8:d6:6b:f1:9b:48:f9:b1:93:f0:ae:
96:3a:f2:2b:9a:80:7e:23:ef:8f:d3:7b:b1:34:86:
c4:ac:23:6b:d8:a6:56:85:f1:90:7e:32:64:1b:63:
2e:89:e2:8d:5d:f2:3b:e0:e9:7b:f3:b6:64:ce:4e:
dd:99:f4:dd:c7:78:e1:7c:69:10:fe:6a:b6:8c:c8:
cd:7e:98:cb:1b:01:91:56:56:74:be:a2:0a:ec:c0:
3b:b8:87:6b:03:c2:91:33:82:e9:88:9b:2d:b9:c2:
79:24:a8:84:5f:75:60:22:32:60:e3:a7:c7:c1:92:
e3:2e:2c:cb:c5:91:84:9b:1e:a7:29:1a:85:4e:c3:
8d:b2:44:b8:85:d6:05:80:f6:2b:fa:71:38:73:f7:
ac:30:8f:21:6d:f7:40:a4:55:36:69:d8:44:2a:04:
9e:c3:c1:d1:c0:be:2f:60:50:2c:35:84:6a:62:fe:
e1:29:f7:07:3f:76:a7:71:3a:04:9e:6e:14:dd:65:
8f:a8:67:f2:34:21:fb:2c:6a:7a:9a:80:48:d4:d8:
7e:3e:31:fe:0d:6b:e1:4f:e4:18:30:bf:09:8d:c1:
65:26:7e:89:cf:c3:01:61:ba:47:eb:ed:e7:a6:4b:
54:4e:f3:62:42:82:c0:3f:59:a9:69:d1:3a:28:e6:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:F8:B8:71:06:7B:85:CB:2E:51:38:9F:8C:D3:6C:2F:ED:D3:12
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yCL4uHEGe4XLLlE4n4zTbC_t0xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.229.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b1:7c:51:14:df:e9:24:3d:30:ba:64:c5:90:8f:32:81:6f:
14:d3:f2:11:8b:b2:e4:12:0d:17:65:15:3c:3f:5b:12:7b:36:
81:ee:43:2f:cd:62:c5:85:0c:1e:e3:62:e0:22:6e:46:08:20:
3d:3e:16:b2:d3:d1:8f:72:37:6f:40:2c:8d:e9:10:79:6c:c1:
82:63:1e:5e:92:72:00:91:30:de:2d:a7:94:ad:55:1f:10:0b:
26:bc:4a:0f:ea:48:d4:bc:50:b8:82:92:47:fd:ce:9e:03:da:
1c:28:58:45:19:da:42:05:9e:26:e2:62:84:0d:a4:87:f4:a1:
ad:13:7f:f6:b5:a5:72:07:e1:29:4a:26:f2:61:33:45:76:cd:
87:14:02:44:7e:de:7e:6f:ed:79:aa:9f:94:4e:e2:79:a4:e0:
81:a5:cc:4f:bf:a6:0c:ed:3b:35:65:66:b4:3f:e9:a6:17:15:
f9:da:bf:2a:f1:73:96:0c:d2:20:7f:b0:ea:aa:f0:cc:0d:56:
18:28:98:00:69:fc:d9:74:f3:71:f8:18:31:3c:e1:2c:a0:fe:
fc:90:d9:6d:89:15:c3:79:d1:2b:72:62:f7:0e:ca:25:d1:0c:
3c:d9:67:cf:7a:54:b1:5d:be:d6:bb:91:2d:fb:4d:ad:5b:4a:
e4:f0:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org