Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/H6XxCNUW1w7mX6279AsVoXpA99k.roa
File: H6XxCNUW1w7mX6279AsVoXpA99k.roa (raw, json)
Hash identifier: Y1fyECNNVEVf7sEWsCYPt4ASKzBeYehF9u0MQ8P+rTk=
Subject key identifier: 1F:A5:F1:08:D5:16:D7:0E:E6:5F:AD:BB:F4:0B:15:A1:7A:40:F7:D9
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 0188568C230BB664C8DB6E45F4BD7D3AE734
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/H6XxCNUW1w7mX6279AsVoXpA99k.roa
Signing time: Fri 26 May 2023 05:33:24 +0000
ROA not before: Fri 26 May 2023 05:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42049
IP address blocks: 188.126.0.0/19 maxlen: 19
188.126.0.0/21 maxlen: 21
188.126.0.0/20 maxlen: 20
188.126.8.0/21 maxlen: 21
188.126.16.0/20 maxlen: 20
188.126.16.0/21 maxlen: 21
188.126.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:8c:23:0b:b6:64:c8:db:6e:45:f4:bd:7d:3a:e7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: May 26 05:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fa5f108d516d70ee65fadbbf40b15a17a40f7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:e7:ee:ee:37:4d:f4:c0:3f:89:a3:b1:6e:
69:36:70:33:e9:3c:c9:f3:02:ac:a3:9c:3e:0c:b7:
b7:5e:27:de:de:ff:82:25:88:f8:b6:40:0f:f0:d6:
0f:db:79:f7:d5:ab:ce:c9:6b:f1:3d:8e:0a:98:fe:
61:b9:70:90:8e:c9:13:83:c9:9f:e1:c3:51:18:4b:
ec:62:f3:37:0a:d9:4e:54:4e:2e:71:3f:0e:a0:fc:
6c:45:f3:e5:80:92:7b:05:47:07:09:a8:f9:55:f5:
bd:57:c6:48:95:64:c3:61:8e:f5:0f:ad:b6:95:70:
8c:93:7d:21:2a:87:48:ab:ab:43:5f:73:c5:ed:ba:
a8:36:99:07:3d:d3:e2:c8:60:f4:bf:b3:b8:1c:e0:
3e:b1:f7:67:90:c9:ec:c5:2a:cc:d0:f5:10:41:bf:
eb:ea:a7:f7:fa:34:ba:c0:23:29:18:cf:79:04:92:
0f:4f:36:24:49:5d:5e:20:72:bb:4d:cb:47:4b:3a:
45:34:e6:c7:e2:b5:1c:37:fa:7e:6a:d7:76:26:ff:
65:46:24:11:fe:6d:07:69:48:33:46:d9:2c:cf:1a:
20:a1:d1:c0:ae:50:86:ea:a0:6c:e0:b8:3c:a8:b7:
41:01:78:69:d3:2d:50:bc:d0:bf:72:4b:bf:c3:76:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:F1:08:D5:16:D7:0E:E6:5F:AD:BB:F4:0B:15:A1:7A:40:F7:D9
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/H6XxCNUW1w7mX6279AsVoXpA99k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.126.0.0/19
Signature Algorithm: sha256WithRSAEncryption
11:1a:9e:a5:27:a4:eb:0f:a1:56:70:0f:5b:51:22:19:3e:88:
54:9c:5e:78:79:b1:42:32:db:46:f1:f3:80:47:76:14:82:a6:
e7:96:33:26:56:1b:09:78:ca:ba:fd:fe:14:21:26:13:3e:a9:
c2:ed:97:2f:95:88:e3:fa:e8:4b:3b:eb:f9:18:8f:29:7c:c2:
7c:57:f0:24:20:91:0b:00:c9:b8:65:8e:3b:2a:79:11:65:e7:
d6:4d:96:72:fc:d5:cf:51:25:f5:dd:66:49:ad:7d:e2:70:85:
0c:86:8e:bc:03:99:84:07:93:18:08:05:45:ca:d6:48:a5:97:
09:b8:a0:7b:3f:3d:99:48:00:f1:02:7e:fd:4c:ce:ac:e2:8e:
9f:b0:29:08:79:81:0e:f6:b2:67:59:ef:bc:2d:92:48:0e:e8:
b0:59:36:e4:6d:be:d1:b6:1c:81:38:b4:72:8e:07:2e:19:46:
22:39:66:d7:ad:9d:81:07:4d:fb:23:36:bc:53:88:0b:69:a2:
67:94:ae:6f:8d:f6:c3:83:1b:61:d5:94:f3:ef:dc:7d:3f:f7:
1e:e7:6b:4d:9e:6a:21:66:ad:27:5d:8f:0f:4b:ad:fc:84:e5:
3d:94:1d:ee:ad:33:59:67:b6:a0:d3:85:4c:5e:03:12:37:d0:
52:e7:92:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:53 2024 by rpki-client on console-fra.rpki-client.org