Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/zjfaW8ulpRgcx_xKT76gRbEf99o.roa
File: zjfaW8ulpRgcx_xKT76gRbEf99o.roa (raw, json)
Hash identifier: jVE7MajyiydIJ20m73QMsJZPQ8jGkTT42gcpE/SKcKs=
Subject key identifier: CE:37:DA:5B:CB:A5:A5:18:1C:C7:FC:4A:4F:BE:A0:45:B1:1F:F7:DA
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 01856EA6A9B0E76BCA896E09663099AAD1CD
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/zjfaW8ulpRgcx_xKT76gRbEf99o.roa
Signing time: Sun 01 Jan 2023 18:44:54 +0000
ROA not before: Sun 01 Jan 2023 18:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132335
IP address blocks: 188.208.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 08:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:a9:b0:e7:6b:ca:89:6e:09:66:30:99:aa:d1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Jan 1 18:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce37da5bcba5a5181cc7fc4a4fbea045b11ff7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:70:51:03:aa:12:52:f9:15:c6:de:65:2e:
fc:5e:b0:94:90:8b:23:93:09:9e:3e:d7:75:80:7b:
56:a4:b6:c4:df:87:78:a4:33:07:37:7b:f5:4a:3c:
88:5e:18:4a:5a:a0:8a:57:39:00:f4:b0:6a:54:c9:
6f:12:86:27:3f:e7:3d:65:4f:f1:f1:51:0e:01:da:
16:76:8b:0f:a7:63:3b:e2:30:6d:ce:69:21:22:91:
05:3b:22:74:08:0a:cc:59:95:d1:9e:c1:56:df:33:
e5:d9:c8:22:dc:63:c0:03:4a:1d:7b:d8:e4:e5:44:
c1:ae:44:81:e3:44:6c:e0:c8:3c:70:3f:dd:d8:61:
70:4a:89:30:00:98:96:ba:81:73:5a:4e:1d:50:3f:
84:a3:f7:fb:12:ab:fc:0c:5c:ef:ae:1d:db:03:1b:
76:15:dd:d0:d6:b7:b9:93:a3:a9:98:44:fb:b0:10:
f8:09:94:6e:d4:4f:4d:51:c1:7c:c7:3e:75:13:6d:
93:9c:30:42:98:b6:7c:6c:d9:95:26:c5:5a:c2:74:
e0:fe:70:0a:73:bf:04:7f:03:ac:bc:9c:af:2a:c5:
84:a3:9f:d5:4b:bd:db:a9:26:69:8b:2f:85:2b:6e:
ed:9c:98:6f:69:25:24:5b:22:46:27:09:03:4c:6e:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:37:DA:5B:CB:A5:A5:18:1C:C7:FC:4A:4F:BE:A0:45:B1:1F:F7:DA
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/zjfaW8ulpRgcx_xKT76gRbEf99o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.140.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a5:79:bb:b9:01:34:56:de:1b:55:50:48:5b:45:b9:14:9a:
38:01:5a:df:c0:40:fd:fd:67:ad:39:03:10:14:57:80:9e:16:
50:84:1f:cc:95:d9:59:19:8f:f1:bc:d1:bb:aa:8f:f3:d2:83:
dd:95:22:79:00:21:cb:c6:90:cd:3e:82:50:d9:fe:fb:6f:cf:
5e:17:e8:78:f6:3b:23:ff:33:51:9c:4f:bc:f9:02:56:a1:3b:
e4:74:85:97:77:7c:04:dd:c3:91:27:b8:c6:4d:22:19:d0:62:
1e:12:04:76:0d:21:42:70:f0:70:5e:65:a2:51:53:7d:ed:bb:
e5:70:c3:9d:a2:db:5b:8b:ff:53:12:81:a4:31:03:79:f0:f2:
33:16:a0:6e:ae:2f:a2:d8:f7:c6:e1:46:3a:f3:11:4c:4f:22:
22:90:49:6c:88:5b:ee:b7:f2:19:d6:56:fe:44:db:53:94:28:
ab:51:6c:5a:2a:33:b5:f3:c2:86:4a:09:80:7c:75:66:8f:15:
a3:f4:c1:2f:68:b1:c6:dc:3f:a9:23:4c:06:34:1e:17:02:53:
44:01:3e:3a:a3:f5:96:77:be:33:d7:61:28:ef:9b:92:c6:bc:
17:47:a0:46:93:94:ca:9f:8f:62:cd:05:01:57:d6:4f:8b:1d:
41:66:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:01 2024 by rpki-client on console-fra.rpki-client.org