Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yS4gcNeBGv9YsFwoZ1dGSI3f1Tw.roa
File: yS4gcNeBGv9YsFwoZ1dGSI3f1Tw.roa (raw, json)
Hash identifier: wOPsutKjSKnYXlhCXCBfT5NEj9wP1JOKUeDOust6CvQ=
Subject key identifier: C9:2E:20:70:D7:81:1A:FF:58:B0:5C:28:67:57:46:48:8D:DF:D5:3C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01889ADE2EBEE27DA8A3BBDCFCDF7C45C365
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yS4gcNeBGv9YsFwoZ1dGSI3f1Tw.roa
Signing time: Thu 08 Jun 2023 11:57:12 +0000
ROA not before: Thu 08 Jun 2023 11:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 88.209.195.0/24 maxlen: 24
88.209.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:de:2e:be:e2:7d:a8:a3:bb:dc:fc:df:7c:45:c3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 8 11:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c92e2070d7811aff58b05c28675746488ddfd53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:58:e4:96:d9:71:44:48:30:70:76:51:8b:
fd:ff:47:b0:59:29:98:1c:4e:d5:8f:4a:14:8b:3e:
64:f7:42:4e:6d:ef:5c:54:fa:dc:40:b1:bf:b0:97:
71:84:9c:be:3a:f6:25:6f:6e:43:4a:35:50:1d:44:
d2:7e:1d:68:66:62:1f:e0:fd:8d:bf:7f:bc:ad:b9:
c9:1b:da:5d:97:f5:3b:ad:a3:ee:32:8e:53:3d:9b:
9d:f7:06:ec:50:62:dd:44:90:a6:b5:3f:51:87:ac:
2d:e1:c0:3d:1e:41:a1:06:0e:68:16:fe:c6:76:40:
48:55:6b:12:cc:63:1c:8e:ec:68:48:29:92:4a:15:
f0:b3:3d:7d:97:6f:a8:fe:6f:f6:28:ce:96:7c:5e:
3c:16:d9:10:3d:2d:a5:1b:80:95:7b:d5:7e:d8:23:
3f:59:c0:b6:4b:7b:50:b7:fb:f6:21:05:d7:f7:6a:
39:9b:a6:57:56:8d:d4:70:d9:e9:42:fc:66:11:ef:
24:fa:c8:39:90:62:c1:3b:e7:89:4d:78:e3:4c:ee:
47:bc:7c:a6:98:24:51:15:3e:66:3f:fb:fc:ff:a1:
02:64:93:20:78:64:f7:8d:56:a4:4b:e3:fd:f4:7c:
07:50:85:8a:5b:bc:8c:7a:f9:80:54:25:0f:20:92:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2E:20:70:D7:81:1A:FF:58:B0:5C:28:67:57:46:48:8D:DF:D5:3C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yS4gcNeBGv9YsFwoZ1dGSI3f1Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.195.0/24
88.209.202.0/24
Signature Algorithm: sha256WithRSAEncryption
59:de:82:a2:96:68:2e:dd:f7:b7:12:70:63:d7:22:5d:dd:77:
01:6f:6d:7c:5d:bb:d1:71:41:dd:ab:98:57:bc:2c:13:43:39:
14:32:2e:0c:69:e1:45:24:63:09:f8:01:99:d3:d8:59:4d:b5:
1e:d8:02:51:64:9c:fc:f4:24:dd:29:64:22:74:a7:8c:54:52:
b8:bc:02:1f:32:76:34:6b:b0:05:95:e9:84:c6:ce:98:ac:08:
66:8a:00:3a:90:d1:15:f3:8d:91:7e:82:65:b7:a6:ec:a8:30:
5c:b8:06:42:9d:c8:27:fd:03:d7:88:8f:95:d0:a0:25:14:3e:
1e:dc:8b:cf:78:e9:7c:b9:f9:ed:48:34:2c:f4:c0:2d:9e:df:
08:33:9a:9f:c1:9b:06:33:a1:35:12:06:ab:78:1b:29:b9:f2:
86:3a:75:b9:52:b3:5a:ba:73:8d:ee:97:70:d6:ff:75:7a:4e:
51:36:d5:c9:3c:5a:10:b8:e0:e9:2c:ac:17:76:d3:2a:7f:e0:
9c:63:04:00:72:79:68:20:19:3b:84:c2:e6:ef:bf:95:dc:e0:
99:ef:4d:34:ba:a1:db:ff:6d:dd:c5:0d:73:6f:f6:9f:94:5f:
41:d5:03:f6:c0:5f:76:79:8b:60:b0:31:c1:a7:e6:5a:38:ea:
94:54:5f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org