Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sdautW6Z6Df8LapS6BJGIqnrvAo.roa
File: sdautW6Z6Df8LapS6BJGIqnrvAo.roa (raw, json)
Hash identifier: ZNRdEr9zlkaGlHUu94JrrZgXVb1A42dbOx669nloMEc=
Subject key identifier: B1:D6:AE:B5:6E:99:E8:37:FC:2D:AA:52:E8:12:46:22:A9:EB:BC:0A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018F1A4F78FF0BEF7B321C0923C272AE5983
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sdautW6Z6Df8LapS6BJGIqnrvAo.roa
Signing time: Fri 26 Apr 2024 12:09:26 +0000
ROA not before: Fri 26 Apr 2024 12:09:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58232
IP address blocks: 188.253.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 12:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:4f:78:ff:0b:ef:7b:32:1c:09:23:c2:72:ae:59:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 26 12:09:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1d6aeb56e99e837fc2daa52e8124622a9ebbc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:ee:95:32:b6:97:9f:8b:0a:a4:26:7a:5b:
89:6e:86:20:bf:58:51:90:e4:0e:8c:02:24:f3:3e:
20:f1:15:0a:e3:e0:7e:1e:e4:93:00:fb:5c:ac:6d:
6c:84:f3:bd:f1:e6:90:0a:b2:49:09:cd:02:0a:4f:
bc:bc:a7:89:2d:4f:b5:b1:93:db:f8:fc:e0:eb:f8:
9b:6f:79:af:58:92:8a:e1:9c:11:70:43:64:9b:50:
e2:6d:29:a0:f8:b9:11:e6:a0:3f:ac:02:ef:0b:17:
2f:34:e9:a1:fd:85:34:d4:d3:82:c8:3d:59:94:a4:
f2:28:35:95:a7:87:e8:8b:b6:43:fb:86:d9:f2:c6:
16:88:88:2a:05:1d:11:f7:33:1f:41:b9:87:6a:f6:
f8:ca:34:fe:e8:21:d5:4d:05:e9:2f:9c:52:ba:65:
71:9a:8f:1e:ff:c7:d2:b1:c0:53:af:44:fe:64:00:
ab:1a:cd:9c:07:3c:43:ce:37:9d:ac:5f:22:de:94:
51:c4:4e:d5:f0:43:ac:fb:b1:1c:0d:de:d1:9d:d3:
e1:94:30:75:47:ff:16:40:e6:47:a8:61:d7:15:33:
10:08:d5:29:de:ae:1e:0d:d3:53:87:eb:6b:29:b1:
cc:7a:7d:ea:db:9c:e9:fc:4c:f3:dd:8f:73:04:ef:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:AE:B5:6E:99:E8:37:FC:2D:AA:52:E8:12:46:22:A9:EB:BC:0A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sdautW6Z6Df8LapS6BJGIqnrvAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3b:05:8d:d0:6e:11:7f:a7:bb:f0:62:23:49:4c:47:67:a4:
d5:3b:fe:27:3e:24:37:ae:c2:85:26:97:d8:27:9f:e8:9b:c7:
32:3e:c7:6b:b4:70:82:ab:79:5a:ca:3c:03:b5:a2:19:04:53:
22:48:f8:f9:43:51:c4:b9:32:7a:9a:a6:18:83:1b:d9:10:63:
a7:ab:5c:68:76:c1:29:53:d1:a7:46:90:d2:79:86:96:d1:d2:
93:fb:5c:22:da:19:e4:b9:41:3b:1f:49:97:ce:a7:2d:44:6f:
0c:5d:cf:11:1c:e2:a3:28:77:bb:a1:9e:12:b1:12:77:74:1a:
99:0e:e5:70:89:c0:88:cd:a9:41:41:c4:a5:c0:dc:b9:7f:8c:
ae:24:1f:09:ce:d6:0d:01:fe:dd:90:8e:d1:0c:f5:0b:d1:5c:
e8:22:d8:6a:66:09:6f:46:ea:47:ff:5d:76:4c:23:8a:57:1f:
d3:a2:3a:be:2c:f9:24:fa:00:38:24:ed:fc:17:be:10:9d:d5:
72:69:5e:71:f9:eb:b0:6d:ea:fe:bb:12:68:aa:e3:3f:23:65:
0f:8a:f6:e7:bf:c4:b0:b3:5b:85:b5:ac:81:06:0f:3d:ee:f8:
b1:b1:bc:0b:a4:92:83:76:83:25:23:ff:6f:18:30:74:8b:69:
e2:3d:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 14:56:25 2024 by rpki-client on console-ams.rpki-client.org