Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/i5tD1LcHJy-tsPn3SNfGHzzd4-0.roa
File: i5tD1LcHJy-tsPn3SNfGHzzd4-0.roa (raw, json)
Hash identifier: pQ3QWgWE8OI8+gOvE8qLRee4/jX1fVIMLj/BQBAXquI=
Subject key identifier: 8B:9B:43:D4:B7:07:27:2F:AD:B0:F9:F7:48:D7:C6:1F:3C:DD:E3:ED
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019093972472DFED9D9A2C5817CEFE671085
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/i5tD1LcHJy-tsPn3SNfGHzzd4-0.roa
Signing time: Mon 08 Jul 2024 18:24:34 +0000
ROA not before: Mon 08 Jul 2024 18:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 188.93.138.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 15:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:93:97:24:72:df:ed:9d:9a:2c:58:17:ce:fe:67:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 8 18:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9b43d4b707272fadb0f9f748d7c61f3cdde3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:28:ee:ae:e4:db:11:1f:a1:ef:5c:4a:f2:
42:13:52:da:04:4e:f5:73:19:53:42:70:78:c6:2f:
b4:30:44:6f:af:81:27:87:56:a8:3a:2b:41:91:81:
c8:42:84:ee:dd:a5:0d:00:ec:d8:04:a9:ee:e1:a1:
c0:fa:96:e8:84:11:c5:b0:5c:76:a9:02:43:35:f0:
aa:62:d9:4c:40:fd:9f:bc:83:b3:1c:03:4a:26:8a:
97:7d:4d:7d:8d:19:59:3a:aa:4d:ae:f8:8c:d9:85:
ce:47:08:5e:dd:87:b8:63:ad:4b:50:f6:c9:27:e7:
74:d6:16:4a:e2:8f:ae:57:f2:aa:ef:28:37:0e:3a:
23:21:e7:ef:5d:58:9c:fc:26:04:ae:19:bd:23:c8:
79:a3:b7:77:c5:3d:fe:43:76:f9:14:72:d3:33:71:
87:0c:56:82:09:1a:9a:34:c3:76:05:1b:7d:89:2d:
29:13:5b:8d:15:f9:fd:94:38:31:ed:d5:38:5b:29:
b8:c5:8a:99:f2:c1:36:f3:63:3a:17:c4:d5:a2:8c:
ea:40:b7:3c:0a:1e:96:fd:e0:e7:e6:43:d6:8d:e4:
e1:bf:70:c7:91:f3:a5:bf:fc:6f:ab:7e:c7:80:ad:
db:26:8d:be:87:15:39:a8:ff:a0:ed:86:cd:2e:a0:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:43:D4:B7:07:27:2F:AD:B0:F9:F7:48:D7:C6:1F:3C:DD:E3:ED
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/i5tD1LcHJy-tsPn3SNfGHzzd4-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b8:47:fa:dd:2f:35:a9:ac:d4:99:5c:88:58:b6:45:36:f4:
9e:d2:21:56:04:4c:8b:b0:1f:e4:5a:1c:70:5c:e2:2e:83:d9:
70:32:0c:a8:d3:56:ae:9f:97:ec:8a:5b:03:08:c7:e2:14:21:
c4:95:ed:04:a0:25:4a:66:ed:3d:60:15:43:a2:f0:f1:5d:24:
37:ae:af:a2:56:e4:c6:09:4f:a5:c6:28:71:3b:49:98:1d:a8:
a5:a9:7b:1b:78:d7:af:77:ee:aa:85:a8:9e:a4:f7:a2:37:18:
c7:6d:73:d4:de:cc:7a:f1:ef:d2:c0:f3:1a:ef:94:43:95:f5:
00:35:0d:53:1e:2e:45:a1:8a:c8:c9:51:c7:63:82:cb:ec:d6:
23:b3:cc:b9:36:d5:f4:c7:ac:e1:b5:f9:4b:c6:f0:60:60:f8:
12:c6:26:f6:59:0e:ca:b2:e9:d6:fa:e4:32:46:50:f2:c6:28:
b9:10:d8:d0:c4:b0:f7:14:d1:b5:94:db:2b:bc:d5:ae:15:25:
43:11:e3:ae:de:46:4a:0b:c9:22:28:f9:45:50:b1:27:61:58:
c6:11:99:51:6a:35:ca:40:eb:99:c3:ed:9e:41:bc:fd:67:5f:
51:0d:b6:63:1f:0e:cb:3e:7e:16:4d:d1:52:49:57:6e:fd:ff:
86:fd:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 18:12:30 2024 by rpki-client on console-fra.rpki-client.org