Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/pLPBz7v7tVK_MpL3tw1wTY2yKtU.roa
File: pLPBz7v7tVK_MpL3tw1wTY2yKtU.roa (raw, json)
Hash identifier: 0u4L/wlR4snD6tKGd/C1VfZqf5iXftdA2we0kLnv7mk=
Subject key identifier: A4:B3:C1:CF:BB:FB:B5:52:BF:32:92:F7:B7:0D:70:4D:8D:B2:2A:D5
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 01857270F9AAA332BE5B8460D0772D5E896F
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/pLPBz7v7tVK_MpL3tw1wTY2yKtU.roa
Signing time: Mon 02 Jan 2023 12:24:44 +0000
ROA not before: Mon 02 Jan 2023 12:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 188.209.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 15:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f9:aa:a3:32:be:5b:84:60:d0:77:2d:5e:89:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jan 2 12:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4b3c1cfbbfbb552bf3292f7b70d704d8db22ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:47:7d:a9:6d:93:a7:50:bf:f6:69:c1:79:
94:15:e1:19:9c:e2:79:6b:7f:f2:b1:91:c0:f1:8f:
82:78:7e:b6:a3:46:79:c1:6c:ab:f8:60:08:71:c7:
f7:cb:88:62:ef:5e:34:4a:a8:aa:24:99:bb:9e:35:
e6:2d:7e:e8:86:89:ab:b2:83:c9:48:91:6d:b5:f0:
cd:ef:6f:af:16:cc:47:eb:e0:03:05:40:d3:28:51:
00:8f:9a:11:b3:36:34:3d:c0:98:48:fa:67:a9:fa:
a8:6f:21:ac:ff:d8:7a:a6:c4:53:58:e0:ae:66:f0:
d3:88:9f:8e:4c:00:dc:5b:50:4a:3f:af:03:38:97:
7b:6f:9c:c8:72:c4:5b:4f:e6:0f:de:e3:2d:8f:ff:
43:6f:00:64:da:a6:b7:01:37:5b:eb:96:ef:6c:8b:
5d:ee:b8:1a:5a:e0:ff:12:5f:6e:5d:4a:d1:85:43:
11:0d:a2:d9:c9:f1:d7:85:8c:6a:23:00:9e:ce:b3:
59:59:3d:38:b8:0b:20:21:51:35:78:d2:b4:2b:e6:
65:1a:e5:15:12:01:98:27:2b:0e:27:62:84:ba:42:
b1:9c:78:0d:b8:f9:fa:0d:d5:3b:b2:df:0f:a2:83:
f1:44:2e:a9:53:9f:f2:7b:22:81:28:9b:64:7c:24:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B3:C1:CF:BB:FB:B5:52:BF:32:92:F7:B7:0D:70:4D:8D:B2:2A:D5
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/pLPBz7v7tVK_MpL3tw1wTY2yKtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:bf:c1:f6:4e:c3:47:7e:d5:31:b4:6d:63:06:aa:bb:1b:e5:
e4:b6:2e:4d:18:26:e1:a6:a7:76:b8:eb:ef:33:94:76:6a:86:
e5:33:af:4f:76:da:89:71:e5:aa:3e:0a:91:a9:3e:a2:62:26:
2d:55:8a:a6:b7:6d:27:1e:7c:2d:39:19:89:49:12:e6:44:d2:
09:49:1b:a0:72:a0:ff:2c:f7:95:f0:bd:20:23:4e:de:8d:3f:
1e:e5:a2:bf:88:d4:6a:f7:96:3a:7d:06:2c:05:1c:97:0a:89:
7a:80:4c:fb:aa:44:4d:8c:30:c1:a5:c9:72:83:28:5c:e3:12:
a0:f3:b5:8d:a1:85:09:65:51:be:6f:e5:d2:74:d8:77:b5:03:
0c:56:f1:2b:12:f7:54:b5:5d:41:ea:50:ff:4e:93:7a:85:7a:
48:83:51:78:f6:25:a0:e7:e8:8b:b2:ef:81:0e:88:f3:a4:ea:
a3:74:d2:e7:ae:0a:0a:af:83:a5:7d:ae:ec:6e:a8:6e:49:71:
2b:0c:18:2f:8f:bd:ff:ab:21:99:5c:23:87:47:57:4a:9c:d1:
ed:dd:45:97:89:3c:82:9d:10:61:6c:33:f0:d5:73:e7:e0:98:
10:0c:ea:e6:5b:c0:d4:fb:1e:93:54:ef:ff:8a:fb:5b:97:08:
bb:f3:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:58 2024 by rpki-client on console-fra.rpki-client.org