Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7CPAeA6rtdGC6Mqb1XHg5iMxLzY.roa
File: 7CPAeA6rtdGC6Mqb1XHg5iMxLzY.roa (raw, json)
Hash identifier: ptBKmTwQ8YrYzuGRte9h7gNo7tYCgoO/R5h9oViv9kk=
Subject key identifier: EC:23:C0:78:0E:AB:B5:D1:82:E8:CA:9B:D5:71:E0:E6:23:31:2F:36
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5451C632FFD1DDE6C6FA139127239
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7CPAeA6rtdGC6Mqb1XHg5iMxLzY.roa
Signing time: Mon 02 Jan 2023 00:15:25 +0000
ROA not before: Mon 02 Jan 2023 00:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62074
IP address blocks: 188.212.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:45:1c:63:2f:fd:1d:de:6c:6f:a1:39:12:72:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec23c0780eabb5d182e8ca9bd571e0e623312f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:41:9d:6c:a5:26:04:38:3f:32:aa:7b:be:
1b:87:00:a0:9a:d6:6c:5c:ec:bd:01:a9:0d:94:5d:
b5:20:cb:6e:a9:c8:fb:6e:83:59:0c:a8:cc:3f:a7:
03:0b:f0:47:ef:6f:ac:47:91:1a:a4:70:54:ab:d5:
c2:1b:98:80:57:6f:9a:d9:b9:13:a7:8a:fa:6c:31:
77:8e:47:8c:6b:00:04:e5:3c:55:95:0c:95:41:ad:
ee:9a:fc:ad:51:0c:8b:09:4c:66:31:0a:98:47:91:
95:35:8f:60:53:1e:c6:a9:5e:2e:25:27:95:9e:90:
39:07:43:e4:d9:a7:ee:4f:28:40:1c:31:80:73:f6:
7f:25:a2:11:b9:d4:c2:4f:04:08:6a:f7:92:e7:31:
cc:82:3f:05:b6:d0:fc:57:29:2d:7d:33:7c:cd:91:
f8:76:66:b9:ea:b0:a9:4b:db:32:18:f5:40:a7:a4:
2d:0c:45:f1:39:ee:d0:29:c8:76:e0:39:e4:28:34:
55:f8:e1:a4:40:fe:92:e5:d5:72:cc:55:97:7b:71:
a7:a5:d4:c4:e3:63:8f:a5:f9:0d:45:84:1c:67:2a:
9d:53:16:c4:b0:00:7b:10:c4:47:1b:c7:20:0e:0b:
ed:ba:1b:8a:3f:92:6f:db:38:2b:86:7e:96:b2:48:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:C0:78:0E:AB:B5:D1:82:E8:CA:9B:D5:71:E0:E6:23:31:2F:36
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7CPAeA6rtdGC6Mqb1XHg5iMxLzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.248.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f0:79:a4:1e:fb:96:67:69:08:1a:7b:af:e8:43:7c:55:c0:
39:1c:7a:e6:05:0a:89:a5:eb:81:42:2c:f4:94:f9:b4:33:5c:
8e:74:20:4a:1f:8c:41:1c:d9:76:e4:59:0f:f8:7e:d2:60:46:
f7:9d:68:57:64:ba:1e:5f:e7:4c:2f:ea:cb:c6:08:f4:b8:63:
2f:40:0f:a8:6c:80:77:d5:c1:35:d2:9b:18:b9:f1:72:c8:91:
a9:41:08:7e:5b:4b:e8:21:27:ae:84:4c:1c:68:89:26:06:52:
37:63:64:d9:08:b2:91:20:a6:21:44:0e:f5:55:36:cf:42:e4:
a2:0f:47:65:1c:97:41:7b:42:c3:18:fc:5b:f4:58:95:46:8f:
13:02:c1:b1:b1:fc:d8:9d:1d:d0:61:13:82:be:95:fb:b8:8e:
00:72:9c:82:7d:62:00:1c:3b:a3:63:9e:83:29:eb:04:03:83:
09:ba:c3:e7:e0:54:68:b0:6f:22:a4:c3:84:8f:c7:f2:32:69:
42:f0:41:b1:29:44:be:3d:9f:69:e4:8b:9a:95:70:45:54:5e:
f2:56:06:19:fc:06:7e:9a:3f:85:24:e9:48:aa:b0:dc:5e:f6:
da:6a:83:bf:cf:1c:05:5e:b6:98:20:78:b9:41:4b:a0:ae:49:
93:eb:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org