Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mWk29FwNr2HY0a-u2RXpcr1jBcw.roa
File: mWk29FwNr2HY0a-u2RXpcr1jBcw.roa (raw, json)
Hash identifier: GviD9IhYcWUWbTWYS0Iwuuge1RXedqmz4V6Z1MImYek=
Subject key identifier: 99:69:36:F4:5C:0D:AF:61:D8:D1:AF:AE:D9:15:E9:72:BD:63:05:CC
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0192954F426BE4E361FED787B9591E9F37B7
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mWk29FwNr2HY0a-u2RXpcr1jBcw.roa
Signing time: Wed 16 Oct 2024 12:30:52 +0000
ROA not before: Wed 16 Oct 2024 12:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215679
IP address blocks: 188.214.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:4f:42:6b:e4:e3:61:fe:d7:87:b9:59:1e:9f:37:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 16 12:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996936f45c0daf61d8d1afaed915e972bd6305cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:88:d3:a1:88:d9:ab:b7:57:d2:3e:3e:1c:
da:ef:77:da:99:40:7b:23:1b:cc:00:5f:ed:ea:5a:
f7:3f:02:85:38:ca:c9:3b:6e:2f:e1:2c:18:8e:17:
d5:02:c4:99:74:59:3a:5b:1d:f7:c3:67:eb:d2:45:
f1:93:54:fd:1d:18:11:5f:3f:38:2c:70:2c:0a:e5:
9c:39:2e:fd:08:0d:8e:4a:25:28:cc:3f:63:3c:86:
bf:25:29:5c:5c:b7:0d:58:23:ef:e6:14:d5:48:ad:
c5:f2:c4:5c:ff:30:2b:ef:a7:dd:8a:c1:6e:3d:b3:
8a:59:7d:06:ca:00:90:69:24:62:ab:c5:8f:f8:29:
e7:59:7e:e9:35:cb:c4:1c:80:61:fb:99:d1:bf:a8:
2a:34:14:a6:25:b5:d5:b0:b1:1e:a0:a4:f9:2e:a3:
7f:26:8b:08:a0:f1:22:b6:4a:2e:04:9f:e4:a4:58:
db:53:3c:bc:52:94:1e:57:f9:53:9c:5a:eb:d8:87:
91:85:bd:c6:2f:b1:7d:f1:bb:8d:c8:3b:b6:4b:7f:
16:4f:aa:f9:19:8e:e8:fd:e4:33:89:3b:97:3b:3d:
1a:83:eb:ce:0c:9c:0d:2c:80:bc:ba:b8:9f:4e:f5:
bc:a0:8e:30:e1:c9:68:05:54:40:65:6b:a4:ab:ec:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:69:36:F4:5C:0D:AF:61:D8:D1:AF:AE:D9:15:E9:72:BD:63:05:CC
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mWk29FwNr2HY0a-u2RXpcr1jBcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.236.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:28:6a:59:9f:ea:c7:20:4c:ec:0a:77:d0:2d:55:9c:a0:4f:
c1:73:12:3b:e1:96:cb:d4:ea:51:42:4a:ba:ef:65:cf:67:f5:
74:79:df:93:ea:9c:9e:b7:32:8b:61:f4:92:2a:40:8b:5f:26:
20:92:1d:1d:a9:c7:29:b0:15:88:4f:db:7d:ff:a7:9b:a6:92:
fc:20:35:4c:3a:0c:9b:c8:01:1a:85:35:05:ed:41:58:c2:e7:
31:69:df:51:bd:32:7e:a0:3b:9b:fc:96:a4:2c:d6:6e:78:d6:
ec:7b:06:0c:e8:46:5c:b0:96:cb:32:34:f4:d4:a1:ec:cd:e0:
ef:2c:e4:47:a1:92:c7:19:aa:58:b5:ad:a1:af:14:5b:9f:06:
f9:a4:56:72:dd:48:a2:06:7f:eb:50:b5:c6:6b:e7:f9:ff:e7:
ff:05:bf:46:4e:e5:00:5b:a7:4f:83:b7:ed:e4:57:9d:4c:f9:
23:23:57:58:ee:9b:4c:da:fe:53:ba:80:f6:04:1c:75:8c:1e:
63:18:d6:32:97:e8:99:34:12:d7:aa:ef:1c:ab:07:7b:61:b9:
88:2a:15:12:f7:46:e5:e8:f8:87:13:67:ab:a7:b6:87:88:38:
73:d6:4b:5b:a5:5a:b4:95:ab:88:39:90:f8:e1:1b:ab:bb:c2:
84:df:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:23 2025 by rpki-client