Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1-mjFrUK5vA-XEP__121VQcjDois.roa
File: 1-mjFrUK5vA-XEP__121VQcjDois.roa (raw, json)
Hash identifier: OrvS1aMNHELanenjnFXqBoYWk566NzzzXLU4k95NPgc=
Subject key identifier: FA:68:C5:AD:42:B9:BC:0F:97:10:FF:FF:D7:6D:55:41:C8:C3:A2:2B
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB320B8FEDC225134FEACD575F28AA
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1-mjFrUK5vA-XEP__121VQcjDois.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:32:0b:8f:ed:c2:25:13:4f:ea:cd:57:5f:28:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa68c5ad42b9bc0f9710ffffd76d5541c8c3a22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:27:fd:95:cb:cf:0d:a7:48:69:aa:e2:97:
aa:d2:16:5c:0e:04:eb:92:e2:42:05:5b:66:bc:ba:
9a:93:2a:d0:db:35:eb:90:f8:27:aa:14:af:44:08:
ba:62:c8:9b:65:5a:3c:e3:8c:10:4e:27:be:02:d4:
4f:af:4d:91:de:55:80:de:27:6b:2e:42:e8:01:c7:
ec:bb:85:b6:23:b1:2e:56:e9:b1:50:6a:fa:20:8c:
ee:23:28:72:ee:47:85:de:12:8f:c7:62:a0:a5:23:
fc:f0:ee:ea:33:ad:00:4f:9a:53:86:69:5b:9c:64:
c8:fc:12:c1:74:21:89:57:9a:ff:be:95:7c:d0:07:
94:90:e6:1e:35:fa:61:b5:dc:0b:7f:f1:26:1d:0e:
e6:d6:72:7d:9b:f6:b9:44:09:06:11:71:37:19:99:
7c:9a:cc:de:63:ea:f3:39:a1:13:97:f5:46:d5:5b:
4c:ce:0f:ed:53:b1:96:84:4b:cf:77:35:b4:c7:77:
2e:2a:a1:1e:50:d3:43:0c:e2:60:22:da:5d:08:09:
7d:47:69:9d:73:85:7c:93:f0:fb:f5:d1:21:fc:e8:
89:23:c9:7d:fd:bf:e6:01:ac:67:ed:bd:6a:b9:a5:
9d:a0:68:76:5d:33:6b:c4:68:78:76:be:e1:9d:ae:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:C5:AD:42:B9:BC:0F:97:10:FF:FF:D7:6D:55:41:C8:C3:A2:2B
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1-mjFrUK5vA-XEP__121VQcjDois.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
00:6c:c4:eb:68:67:74:03:52:5c:e4:e7:da:73:b1:7b:69:fa:
d1:fe:fb:80:7c:ed:c1:42:ad:b3:fb:b0:f7:c1:55:7d:75:19:
e0:d6:2a:67:3d:95:6a:a8:b7:33:8c:4a:55:95:a8:75:9e:b1:
c3:05:3e:0d:7c:3c:06:5e:2a:95:ba:d5:29:bc:65:bc:ea:9c:
cf:d8:c3:21:fe:1c:42:a6:a2:70:75:00:30:44:d9:6c:44:d8:
4f:3c:49:87:bd:66:ba:6e:3f:9f:d1:a1:0f:a4:de:7a:b8:d1:
0a:75:39:db:94:c4:b3:29:ed:ec:69:b6:4a:d4:52:a1:8a:96:
6c:69:7a:3a:0f:9c:eb:35:93:6f:e6:21:8d:e5:f6:e2:ce:e8:
fb:bf:02:56:64:a2:66:32:79:ac:45:98:4e:34:1c:52:b5:76:
7b:b4:78:77:a0:eb:30:42:07:e2:36:25:0a:2f:70:e6:3b:96:
44:00:3f:14:24:93:dd:e1:74:d9:5a:85:9c:2d:c8:3a:5a:e8:
d6:f3:60:e0:92:c7:5d:b4:d0:b8:55:c3:41:d2:4a:4d:9e:11:
65:7b:c9:a2:72:b5:78:ec:ff:9c:c4:3f:9d:84:02:bd:ca:41:
01:4a:fe:93:c2:d1:f8:34:08:67:4d:c4:05:cb:c3:f9:5c:19:
42:7f:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 23:53:05 2024 by rpki-client on console-ams.rpki-client.org