Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SZltBkokpzPGMX8op6q_gdVIbeg.roa
File: SZltBkokpzPGMX8op6q_gdVIbeg.roa (raw, json)
Hash identifier: ToA6IxW8EmKdQVeQi6U+MgCPvUWq1NETI8fcnPbrTmE=
Subject key identifier: 49:99:6D:06:4A:24:A7:33:C6:31:7F:28:A7:AA:BF:81:D5:48:6D:E8
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0190624E060BE5570EF1FB6C8202375519B1
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SZltBkokpzPGMX8op6q_gdVIbeg.roa
Signing time: Sat 29 Jun 2024 04:43:18 +0000
ROA not before: Sat 29 Jun 2024 04:43:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 20:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:62:4e:06:0b:e5:57:0e:f1:fb:6c:82:02:37:55:19:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 29 04:43:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49996d064a24a733c6317f28a7aabf81d5486de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:31:b5:8f:b1:b6:8d:1a:36:c5:52:16:88:
b7:8d:32:89:cc:ef:65:61:b1:1c:88:f9:36:ca:14:
f7:26:21:e2:9d:68:fd:2a:0a:2b:e3:8a:27:d3:d5:
7b:2c:1d:b8:bd:1f:c7:00:ce:25:d5:b4:83:bf:f3:
24:fc:2a:3c:0c:a4:3e:a9:bc:e6:f7:c7:d1:9f:d8:
80:04:ad:f3:70:d9:f3:a8:1f:ae:8e:65:cb:36:12:
4b:2f:7d:2c:18:71:8b:96:85:06:8f:d0:7e:0e:db:
f8:bf:e0:e6:73:db:1d:23:d6:b9:36:48:31:e6:16:
f0:37:af:fa:8b:98:1c:4f:e0:ea:16:78:71:16:5d:
f7:e5:c6:4b:cf:11:0a:73:93:b4:97:4d:ff:3c:99:
7c:ce:89:e2:cf:4e:80:91:e0:9c:28:3d:ae:df:dc:
eb:00:1b:0a:eb:af:8e:64:69:81:20:2b:8f:ec:67:
fe:b6:f1:03:68:b3:40:0c:f8:59:54:8f:55:7b:60:
0b:13:72:bd:cd:b1:3f:51:f3:5d:2a:b1:4f:ff:b7:
4f:74:f8:16:65:95:a9:3a:d5:e0:b6:e4:ef:bd:fa:
a5:de:1c:02:63:f5:cd:7a:1d:20:e3:19:bb:75:15:
f2:d8:62:75:ae:ec:21:cd:40:81:e1:27:21:6d:ac:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:6D:06:4A:24:A7:33:C6:31:7F:28:A7:AA:BF:81:D5:48:6D:E8
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SZltBkokpzPGMX8op6q_gdVIbeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7d:57:7c:da:ee:00:56:c1:ce:32:41:a4:1f:87:b7:d6:4b:
fa:6e:dc:d5:e8:26:6c:d9:5d:46:37:e0:05:a5:69:a3:e0:b3:
22:83:c9:3e:f3:6e:87:8f:95:c0:50:36:2d:a2:da:a4:e1:89:
e7:d0:98:fd:1a:28:31:bd:8e:9f:76:12:71:7e:82:d2:e6:21:
a0:a6:92:f9:e3:47:14:e0:f8:bb:62:73:ed:90:7a:0d:49:f1:
ae:d1:89:4d:0c:b2:84:b0:3a:14:cc:f2:8d:57:8a:99:2f:7a:
a2:3f:ec:55:6d:7c:40:10:3b:fd:86:91:c6:4b:0f:46:54:54:
60:96:21:13:8c:2c:1c:33:14:0f:48:e1:08:3a:02:f5:94:f9:
a1:51:fd:20:45:da:ea:61:85:bd:36:4e:d7:93:cc:ca:73:8b:
4f:7e:1e:a9:e5:fa:99:df:29:92:9a:bf:21:0f:6d:35:38:b6:
d2:27:72:52:bd:b9:31:39:af:20:3d:25:2a:03:21:5f:8b:31:
d4:22:ee:8a:55:ff:c8:b2:bb:8d:4a:94:b7:d6:d5:f3:7d:af:
3e:e8:dc:dc:79:86:f5:e7:28:aa:20:32:97:3b:86:b1:ba:b4:
d9:34:f2:6d:ad:2b:c0:f1:8f:75:85:bf:d0:9a:22:00:a9:2c:
82:24:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 21:56:50 2024 by rpki-client on console-fra.rpki-client.org