Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/3wwIddmiU11G-yTJJ7hIBMbOkIg.roa
File: 3wwIddmiU11G-yTJJ7hIBMbOkIg.roa (raw, json)
Hash identifier: v/ZYvx/C9TwH8Ef2PUxS5ncamPA4hNfNmwbj9vNasf4=
Subject key identifier: DF:0C:08:75:D9:A2:53:5D:46:FB:24:C9:27:B8:48:04:C6:CE:90:88
Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Certificate serial: 01857079C35BDCE44E18D077DE36978DC8B7
Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/3wwIddmiU11G-yTJJ7hIBMbOkIg.roa
Signing time: Mon 02 Jan 2023 03:15:06 +0000
ROA not before: Mon 02 Jan 2023 03:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29256
IP address blocks: 188.247.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:c3:5b:dc:e4:4e:18:d0:77:de:36:97:8d:c8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Validity
Not Before: Jan 2 03:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df0c0875d9a2535d46fb24c927b84804c6ce9088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:0c:a2:e0:5d:26:96:78:3e:08:3d:48:d4:
1a:c8:16:bc:cd:19:b7:e4:85:10:4b:2e:b7:ef:e1:
7e:9b:5f:88:5b:bc:51:4c:40:94:81:81:3f:a0:99:
b2:86:a2:90:5d:d9:bf:b4:c9:d6:0b:a8:f1:ec:66:
b4:f8:e7:6f:45:db:f7:88:48:ed:23:37:46:c1:53:
82:a7:01:ee:74:30:6b:ab:df:e4:e8:98:0d:df:c4:
a9:7c:b6:8d:fc:b8:e5:88:c7:fc:e7:2c:b8:cf:9f:
73:89:86:34:5a:7a:cd:d4:2a:9b:24:50:b3:af:86:
68:8e:4a:01:9d:35:d2:fe:c6:d5:26:14:bf:97:de:
01:aa:24:4c:f8:a7:93:91:4e:24:71:c2:07:2f:ff:
3d:fc:86:35:97:2e:45:ed:c6:17:68:52:87:5d:f1:
20:ff:aa:83:8d:18:74:1e:4f:ef:60:28:00:91:ee:
86:26:75:6e:f3:e3:7d:77:ec:c1:6c:6d:1b:70:c7:
2a:80:b3:ad:75:32:e4:3c:bb:80:ff:10:b6:84:8a:
5f:f1:49:da:88:a9:4a:20:ac:df:f0:01:52:3d:73:
58:99:9e:15:3e:a2:31:e9:ea:08:73:a4:20:fd:52:
9c:68:74:e7:80:4f:07:33:45:c5:f0:6d:25:1e:f7:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0C:08:75:D9:A2:53:5D:46:FB:24:C9:27:B8:48:04:C6:CE:90:88
X509v3 Authority Key Identifier:
keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/3wwIddmiU11G-yTJJ7hIBMbOkIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.0.0/19
Signature Algorithm: sha256WithRSAEncryption
99:99:fd:c7:30:82:16:46:e0:62:11:cf:25:6e:76:e4:dd:21:
7a:71:f8:77:ea:b3:b6:ea:38:11:a0:a2:ce:6d:47:20:e0:36:
49:2e:b1:4b:79:87:c7:87:14:8b:13:5f:b7:3e:a8:c3:f9:7f:
b1:1d:0d:29:9b:3e:97:17:86:49:84:96:ff:54:38:76:f8:36:
3f:95:66:16:2c:1d:c6:fb:f8:5a:e3:bf:1d:5e:0f:fe:4c:58:
b1:34:e4:c5:03:0d:92:1f:95:15:a8:14:dd:d2:dc:cd:5e:9f:
2f:e9:d8:59:6f:4d:5a:93:2e:03:80:6b:91:af:ac:ba:de:9a:
52:45:00:97:ae:61:4e:55:c2:84:d2:4a:55:2f:a0:c4:64:e2:
32:a0:e0:66:a9:94:9c:1f:af:1d:3d:32:d6:69:51:0d:e8:04:
ab:41:80:cb:79:33:c0:7b:74:2d:0a:b9:6e:82:c4:d6:4d:74:
96:1a:f6:6a:2c:77:89:9b:93:42:54:55:75:b7:b1:41:aa:b2:
45:ac:2d:2c:97:31:fa:46:76:78:cd:15:a3:eb:74:8c:2b:74:
e9:10:d0:e3:a0:f7:71:03:cb:bd:7f:d0:81:fc:06:d0:23:51:
0a:0c:f0:60:84:67:f0:3b:1c:7a:69:48:7d:19:35:05:42:15:
7d:b6:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:10 2024 by rpki-client on console-fra.rpki-client.org