Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/D__SZQjsVZitTf74ryVdk5CG6Mo.roa
File: D__SZQjsVZitTf74ryVdk5CG6Mo.roa (raw, json)
Hash identifier: S8dG3tWD09M+MplFCU80dCiMPLR4DYx4YBhBzktK0PI=
Subject key identifier: 0F:FF:D2:65:08:EC:55:98:AD:4D:FE:F8:AF:25:5D:93:90:86:E8:CA
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D94157146913D2149ED99E9F08A1413
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/D__SZQjsVZitTf74ryVdk5CG6Mo.roa
Signing time: Sun 01 Jan 2023 13:44:59 +0000
ROA not before: Sun 01 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141718
IP address blocks: 88.151.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:15:71:46:91:3d:21:49:ed:99:e9:f0:8a:14:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fffd26508ec5598ad4dfef8af255d939086e8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:82:86:b6:6e:e5:4d:5a:de:9c:51:29:30:
a4:b9:c7:cd:5e:71:6a:42:7c:6e:80:dc:06:0f:04:
21:f0:33:c9:db:c5:5a:44:1b:bf:cb:27:69:ff:f8:
f7:af:78:c4:21:98:b9:58:26:ac:fe:3c:f7:84:32:
cb:b4:2e:36:a6:ef:de:ce:5a:8b:be:c7:12:c6:52:
cb:e1:a1:60:38:9f:58:e3:b0:f7:88:d4:d2:ee:c0:
30:1d:d0:25:96:2d:e7:9c:a1:0f:40:44:4c:ff:91:
34:a1:8f:d7:83:00:a7:ee:62:97:78:c5:f5:18:e2:
c9:35:28:aa:b3:c8:93:9b:fd:c9:80:bf:2a:cf:93:
07:da:0c:43:e8:81:d3:18:e3:0a:22:0f:51:60:c3:
d9:fa:35:de:56:fb:4a:80:44:1a:85:2b:7f:3a:0f:
6e:35:1a:36:ec:dc:89:8f:f3:39:6d:32:a4:2b:f3:
e3:47:5a:8d:1b:67:0e:cd:b3:e3:18:d3:45:7b:80:
3d:87:c9:61:90:26:48:2f:a8:22:58:62:5f:de:eb:
bb:e7:2f:b1:78:36:bb:a8:46:fa:df:30:57:29:bb:
a0:4d:3a:13:03:b5:80:fb:fa:80:54:c0:ee:41:71:
7f:51:90:cf:bd:00:54:53:35:b3:05:bd:aa:70:c7:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FF:D2:65:08:EC:55:98:AD:4D:FE:F8:AF:25:5D:93:90:86:E8:CA
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/D__SZQjsVZitTf74ryVdk5CG6Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.198.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:6d:33:2c:2c:5e:86:97:f7:c4:63:69:69:c8:58:17:8c:60:
4c:22:9c:03:e1:ed:cb:bb:a4:b6:af:32:d3:f0:fc:5e:61:94:
ea:a8:7b:f6:33:a6:62:12:5b:08:06:26:2c:76:ff:44:41:53:
f1:eb:e1:9b:82:75:16:fe:a0:b6:26:a8:40:a5:e8:b8:2d:99:
dc:6c:22:4a:7f:02:71:5c:51:4b:91:03:61:33:30:72:8e:a4:
d7:6b:e0:7a:13:c5:dc:00:d3:38:8e:1e:b0:5e:ab:e2:a1:74:
46:78:fa:95:53:c7:d4:3e:a9:a4:ad:f4:69:bd:15:42:b6:47:
d0:28:04:a9:15:ac:bc:4e:39:99:78:c4:16:30:4e:70:cd:da:
c1:c6:27:16:4b:8a:23:88:cd:8c:0b:55:8c:85:d1:95:68:37:
c7:99:95:b5:1f:41:c9:f1:8b:aa:24:3c:1f:93:01:2c:69:14:
02:4b:5d:7e:d8:e6:ef:2d:8c:77:a6:f6:6d:13:90:23:9c:2f:
a8:3f:64:0e:02:aa:83:83:21:79:2c:35:cd:aa:0e:8f:5f:55:
c7:68:06:61:ea:50:df:c2:da:45:67:3c:f4:38:ea:99:d0:3b:
21:f9:e3:84:a2:19:a6:0f:69:a4:9c:cc:7a:bb:30:02:37:07:
d6:23:44:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtlBVxRpE9IUntmenwihQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTAxMTM0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmZmZDI2NTA4ZWM1NTk4YWQ0ZGZlZjhhZjI1NWQ5MzkwODZlOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QaChrZu5U1a3pxRKTCkucfNXnFq
QnxugNwGDwQh8DPJ28VaRBu/yydp//j3r3jEIZi5WCas/jz3hDLLtC42pu/ezlqL
vscSxlLL4aFgOJ9Y47D3iNTS7sAwHdAlli3nnKEPQERM/5E0oY/XgwCn7mKXeMX1
GOLJNSiqs8iTm/3JgL8qz5MH2gxD6IHTGOMKIg9RYMPZ+jXeVvtKgEQahSt/Og9u
NRo27NyJj/M5bTKkK/PjR1qNG2cOzbPjGNNFe4A9h8lhkCZIL6giWGJf3uu75y+x
eDa7qEb63zBXKbugTToTA7WA+/qAVMDuQXF/UZDPvQBUUzWzBb2qcMceNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA//0mUI7FWYrU3++K8lXZOQhujKMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvRF9fU1pRanNWWml0VGY3NHJ5VmRrNUNHNk1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJfGMA0G
CSqGSIb3DQEBCwUAA4IBAQDZbTMsLF6Gl/fEY2lpyFgXjGBMIpwD4e3Lu6S2rzLT
8PxeYZTqqHv2M6ZiElsIBiYsdv9EQVPx6+GbgnUW/qC2JqhApei4LZncbCJKfwJx
XFFLkQNhMzByjqTXa+B6E8XcANM4jh6wXqvioXRGePqVU8fUPqmkrfRpvRVCtkfQ
KASpFay8TjmZeMQWME5wzdrBxicWS4ojiM2MC1WMhdGVaDfHmZW1H0HJ8YuqJDwf
kwEsaRQCS11+2ObvLYx3pvZtE5AjnC+oP2QOAqqDgyF5LDXNqg6PX1XHaAZh6lDf
wtpFZzz0OOqZ0Dsh+eOEohmmD2mknMx6uzACNwfWI0Th
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org