Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Q8OejLhPvUtYehf9w3AISsNUU6s.roa
File: Q8OejLhPvUtYehf9w3AISsNUU6s.roa (raw, json)
Hash identifier: nsQLqii98iu+Ua/uC3cT9iygI25BB2Ioha+0abaWw98=
Subject key identifier: 43:C3:9E:8C:B8:4F:BD:4B:58:7A:17:FD:C3:70:08:4A:C3:54:53:AB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018FE382234E9035B8D3D470629CDDBA143E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Q8OejLhPvUtYehf9w3AISsNUU6s.roa
Signing time: Tue 04 Jun 2024 13:48:27 +0000
ROA not before: Tue 04 Jun 2024 13:48:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135377
IP address blocks: 188.253.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 21:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:82:23:4e:90:35:b8:d3:d4:70:62:9c:dd:ba:14:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 4 13:48:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43c39e8cb84fbd4b587a17fdc370084ac35453ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:cd:63:d5:2a:25:3a:67:ae:d0:44:26:9a:
d0:d7:87:d8:d0:b4:bc:6f:b8:f8:c4:e0:71:2d:57:
ab:ca:d7:25:7f:de:28:09:45:90:c8:27:66:9d:74:
8f:1b:df:59:e4:93:cb:df:95:5d:48:74:60:01:b3:
43:bd:4f:05:11:99:fe:32:35:2a:62:ec:19:3b:3e:
15:86:e3:15:f6:be:f2:60:dc:78:17:79:82:0a:3e:
fb:e4:2e:c8:e9:59:95:21:2a:e5:da:b4:96:82:07:
50:15:1a:88:29:35:e0:1f:90:b3:26:ec:79:2b:a8:
e6:73:0e:ef:4d:09:b7:74:87:31:50:75:cb:4b:92:
d6:a5:08:53:49:11:b8:59:2d:3c:13:53:ae:69:f9:
7c:79:1c:07:5d:3a:4b:07:c7:29:52:6e:14:e1:49:
e9:71:ef:46:76:d1:05:e1:b3:41:91:79:89:f9:08:
bf:7a:51:31:2e:92:16:00:d7:93:76:4e:c6:bc:d4:
e4:c9:ed:00:75:9d:d9:61:f7:d5:93:37:98:d6:ac:
a9:ee:83:a2:ce:80:b5:0f:1d:4b:60:a5:d5:ed:5a:
5d:03:d1:09:1e:be:25:5a:d4:fc:bb:38:6c:d7:b8:
49:0f:cb:08:d0:f7:94:ac:aa:44:a2:06:8c:28:fd:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C3:9E:8C:B8:4F:BD:4B:58:7A:17:FD:C3:70:08:4A:C3:54:53:AB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Q8OejLhPvUtYehf9w3AISsNUU6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.8.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ac:30:4b:c6:6d:83:92:cd:2b:c9:09:e2:bb:7f:73:08:61:
e7:b3:ff:3f:a5:bd:15:d2:c1:d3:8c:75:21:f5:2c:2a:07:3a:
39:1a:9d:73:ba:dd:62:cb:5d:94:7e:6a:9c:45:1e:21:72:01:
10:39:d8:c4:2d:db:fb:63:48:a5:35:33:1b:69:18:a5:5a:7f:
1a:01:1a:f3:00:65:fd:08:c5:47:00:ad:c5:16:58:18:95:37:
e8:69:a0:89:51:1d:e9:5d:64:7a:c8:f2:01:a0:06:07:ec:bd:
84:15:05:f4:9e:bf:db:92:08:aa:5f:0e:1b:21:54:de:e8:75:
a0:49:27:f9:fe:f1:b2:18:19:b2:f1:86:be:bc:1f:56:11:9d:
ac:c9:a9:d5:ec:60:0b:ab:ae:f6:51:23:54:64:31:c8:90:1c:
1f:19:67:22:40:e9:de:25:7d:d4:52:63:06:50:a7:29:cb:ce:
7c:6e:99:ec:c5:8a:b3:07:db:cd:a1:0d:2b:76:79:92:26:c1:
67:6f:ce:5f:63:fc:23:97:b7:51:c8:e9:91:c7:72:f6:88:a4:
63:25:1d:81:e2:aa:b6:8c:fa:81:69:cb:e8:ae:c3:cb:cf:40:
c2:9a:d3:48:16:73:44:71:5a:8f:97:59:72:36:ea:df:3e:05:
b8:10:3d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 02:28:03 2024 by rpki-client on console-ams.rpki-client.org