Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/c1vRK0Pw5lbVnIWlYwOu25QyGfw.roa
File: c1vRK0Pw5lbVnIWlYwOu25QyGfw.roa (raw, json)
Hash identifier: 2OGD4ZVk/D1Bs/LB465nTPhdvml7H+XDqgE8+mkZJz4=
Subject key identifier: 73:5B:D1:2B:43:F0:E6:56:D5:9C:85:A5:63:03:AE:DB:94:32:19:FC
Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial: 0185729ED7E5374DCC16B3D86C52FBA85D36
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/c1vRK0Pw5lbVnIWlYwOu25QyGfw.roa
Signing time: Mon 02 Jan 2023 13:14:50 +0000
ROA not before: Mon 02 Jan 2023 13:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202766
IP address blocks: 188.119.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d7:e5:37:4d:cc:16:b3:d8:6c:52:fb:a8:5d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Validity
Not Before: Jan 2 13:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=735bd12b43f0e656d59c85a56303aedb943219fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:95:f5:10:cf:18:fa:ce:2d:53:d1:90:c0:
2a:38:b0:b9:15:1b:99:55:0a:f2:35:73:9b:24:44:
1d:7d:87:44:61:e5:38:9c:68:cf:a0:8b:19:4a:54:
09:06:3c:94:99:01:62:42:41:21:8d:f9:c3:f6:5d:
12:e7:59:f8:73:27:8e:10:88:ff:03:c9:d0:db:f3:
01:91:56:fd:4c:37:c9:7e:6a:02:8c:f0:bb:a6:4e:
65:57:0f:4b:f7:51:26:e6:7f:30:47:4e:95:f8:0a:
af:5b:cf:c3:4d:51:d5:df:af:99:1d:71:c3:99:92:
da:de:e4:38:8a:4d:e6:bc:12:11:f1:1d:36:9a:f3:
d6:87:04:6e:67:91:66:18:c7:bf:51:c1:e3:17:d3:
7f:bd:46:d8:73:74:16:a4:29:b4:91:4c:9f:05:c4:
a6:92:95:44:bd:29:a7:51:af:b8:b0:ce:45:ae:f4:
bc:38:0d:b7:8a:02:15:e0:da:9f:4d:e3:47:5e:64:
9a:25:d7:08:71:df:3a:78:8b:2e:e1:b6:94:6f:22:
2b:4a:42:a6:41:9e:e0:07:d9:ee:ff:9d:9e:44:d1:
f3:eb:fa:6e:5f:db:34:a4:e2:29:b3:c3:ef:68:67:
34:78:7b:a4:25:e2:78:21:d5:94:1c:09:37:24:bc:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:D1:2B:43:F0:E6:56:D5:9C:85:A5:63:03:AE:DB:94:32:19:FC
X509v3 Authority Key Identifier:
keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/c1vRK0Pw5lbVnIWlYwOu25QyGfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.105.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1a:ab:6a:8f:a2:d6:7a:5a:bc:f3:7a:da:59:0c:ab:96:77:
65:11:c2:a4:6f:81:ad:27:5d:5f:8c:2a:aa:88:1a:92:e3:b5:
e6:c7:ff:67:5d:62:51:06:64:22:2d:c7:05:38:6d:65:ea:0c:
d2:dc:47:5c:34:fe:a2:81:73:92:94:ed:bd:5d:67:ce:fb:87:
ae:55:2c:36:b7:66:c1:c2:4c:98:43:0b:2e:7c:88:62:14:bc:
4a:d0:fb:d2:79:01:fe:ce:bf:7f:0a:b2:01:f2:3a:25:b5:7a:
9d:c1:f8:ef:01:9d:dc:2f:e9:53:09:aa:00:1d:98:27:2d:86:
1d:3b:89:13:78:eb:2c:65:9a:95:af:a1:71:16:70:b1:32:6d:
e7:3b:34:f5:5d:6e:02:2b:cd:24:fc:7c:bb:12:11:d4:8d:74:
ca:8f:1c:03:6b:83:2c:97:5c:32:36:50:76:c8:2b:11:e5:9a:
7a:46:b0:2c:00:9f:88:53:ab:9f:8a:07:70:a1:40:09:f9:0d:
cf:8b:0c:70:11:fa:85:27:b8:69:ee:dd:0e:ce:bf:f1:15:22:
59:8a:f3:08:5b:83:c3:e4:38:c6:d4:91:06:39:4e:48:4a:55:
20:1a:08:e2:00:a9:4a:66:c1:39:bd:89:a2:ea:df:e9:02:e4:
21:d4:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:01 2024 by rpki-client on console-fra.rpki-client.org