Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4KlEgAr3TLiiiexChcF2hwSSQKY.roa
File: 4KlEgAr3TLiiiexChcF2hwSSQKY.roa (raw, json)
Hash identifier: WTDvTuzKLflef97F0cvUNnH46XaTy4JDhpHQjeCiZzI=
Subject key identifier: E0:A9:44:80:0A:F7:4C:B8:A2:89:EC:42:85:C1:76:87:04:92:40:A6
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F8C9324DB2BE899F14E5B657424D2C613
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4KlEgAr3TLiiiexChcF2hwSSQKY.roa
Signing time: Sat 18 May 2024 16:40:04 +0000
ROA not before: Sat 18 May 2024 16:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56913
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jun 2024 04:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:93:24:db:2b:e8:99:f1:4e:5b:65:74:24:d2:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 18 16:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0a944800af74cb8a289ec4285c17687049240a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:8b:b3:9c:81:8e:01:10:fd:2a:f2:b9:b4:
9f:22:05:0a:18:c7:46:cd:9d:2e:67:12:15:49:4d:
22:de:a6:a2:27:54:6a:54:2b:f2:2a:6f:b8:86:44:
a5:d1:6d:a9:a1:a9:6b:d2:2e:94:8e:a8:38:94:bd:
64:ff:4a:4f:3b:7c:bf:a0:97:7a:ec:a3:e1:c1:4c:
be:75:7b:a4:37:99:65:17:d8:f3:c1:61:85:8d:68:
d4:9d:ff:3d:5e:c9:3a:3e:38:da:b8:3d:e9:ff:9b:
0f:c8:25:bc:9a:4a:7e:19:9c:35:9c:53:e9:04:7d:
a4:82:39:13:f8:dd:4d:27:b4:7a:2e:6b:34:70:a5:
b4:e7:d7:0a:f9:96:e7:37:e5:78:7f:b4:e9:d7:15:
d3:87:4e:bf:25:cb:0b:a0:2d:75:cf:45:7f:a6:65:
70:73:96:11:86:81:44:66:1c:bd:ce:c2:2a:71:f1:
03:ba:83:ad:7c:9b:4d:b3:51:9e:a0:37:9f:8d:7b:
bc:7c:56:2c:58:3f:ab:bc:ec:99:d0:49:85:ec:df:
54:50:fb:71:98:d6:4c:6f:ab:13:7a:05:b5:4a:21:
6c:aa:c9:c3:ec:0d:30:bb:f2:09:f3:ca:f3:19:32:
ea:d2:bc:84:aa:51:b4:3b:ab:ac:ec:c9:7b:45:54:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:44:80:0A:F7:4C:B8:A2:89:EC:42:85:C1:76:87:04:92:40:A6
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4KlEgAr3TLiiiexChcF2hwSSQKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
59:82:fa:d1:20:f8:45:46:07:97:c8:f0:9f:63:d6:50:58:63:
f1:75:50:5c:38:03:20:a0:6c:d9:be:40:77:a8:00:1e:a3:f9:
78:c5:37:b1:48:ee:01:e3:3e:52:d1:68:37:75:e7:7e:04:94:
d3:f2:79:c6:57:d1:4e:af:61:c8:65:dc:47:e3:ee:02:dc:f0:
68:e1:5d:9d:ee:31:04:45:23:5c:08:19:3c:3b:85:7c:37:c1:
67:a2:8a:c1:91:1a:ef:e8:1b:f0:f0:dc:92:af:23:9d:6f:34:
d4:48:9d:bc:ae:20:92:24:31:08:94:a9:09:b8:79:b7:66:71:
ce:32:e0:61:12:36:f8:83:27:a3:ea:e7:e3:ac:40:4a:74:77:
03:55:fd:ac:e6:e7:f4:84:a9:92:20:64:04:cd:2c:c5:85:30:
67:48:aa:85:12:1b:18:65:fd:64:a4:b0:d1:56:66:3d:2f:59:
f2:7e:9e:dc:99:66:f2:c6:8b:dc:36:d3:0a:d7:57:d6:be:ce:
0f:08:f8:58:8f:ef:1c:9a:49:b9:6d:f6:32:e0:04:cf:27:bd:
ea:5c:c7:cd:e2:2d:79:54:53:0a:6b:b0:77:6f:a7:6e:e2:bc:
cb:70:be:aa:17:ce:96:f9:c3:2f:96:2f:e9:11:83:79:9d:72:
68:59:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 08:56:58 2024 by rpki-client on console-fra.rpki-client.org