Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1hj-RlqQ8Qu3i1HvDX561XQqpxI.roa
File: 1hj-RlqQ8Qu3i1HvDX561XQqpxI.roa (raw, json)
Hash identifier: AsHSC+T2dpwU2SkGfQEO9i/ZGKf9+ORePO5zj0jBcaY=
Subject key identifier: D6:18:FE:46:5A:90:F1:0B:B7:8B:51:EF:0D:7E:7A:D5:74:2A:A7:12
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01887F70152E74F0136094CB1856A6DFF3CB
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1hj-RlqQ8Qu3i1HvDX561XQqpxI.roa
Signing time: Sat 03 Jun 2023 04:07:11 +0000
ROA not before: Sat 03 Jun 2023 04:07:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.209.128.0/22 maxlen: 24
188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 23:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7f:70:15:2e:74:f0:13:60:94:cb:18:56:a6:df:f3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 3 04:07:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d618fe465a90f10bb78b51ef0d7e7ad5742aa712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:ef:eb:4a:03:70:65:ff:f0:eb:2f:f1:cb:
a0:25:60:65:a2:1a:24:b3:b1:e4:0e:9d:53:95:6c:
1a:a2:f4:04:d3:1b:3b:e7:5c:ce:86:25:cf:1c:c2:
8f:17:56:25:64:a7:13:3a:17:47:bc:3f:d2:b4:12:
0e:20:50:83:b5:b1:d0:50:bb:39:0d:ef:a6:ef:81:
41:09:29:1e:b6:7a:7e:10:ca:28:eb:73:4f:40:3e:
45:d5:93:ff:d0:15:e2:22:46:21:6f:a2:b9:11:d9:
c4:5d:d9:73:46:09:47:4f:99:7a:b8:f0:93:f6:a0:
7a:7b:84:77:8f:d8:9e:b1:26:66:de:66:d7:18:98:
78:1f:14:96:4c:85:ac:01:f0:f5:c0:67:e0:2a:dd:
a2:95:28:fb:b6:28:7e:86:a9:0e:04:49:a6:6d:31:
9c:bd:33:66:7c:c6:e0:8f:df:cd:50:1a:84:d4:f6:
28:5b:19:c7:b9:be:81:70:97:3a:cf:8b:dd:b3:c2:
c2:4e:98:e0:fa:55:e4:6f:91:00:ef:fb:05:3c:f3:
a0:22:c8:d9:e1:09:cf:e7:96:59:f2:e5:84:42:57:
7a:0a:2f:16:fb:3e:0d:d9:dc:b1:93:76:34:56:b6:
63:8e:a6:59:65:50:0b:29:f0:57:c2:d1:6e:78:87:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:FE:46:5A:90:F1:0B:B7:8B:51:EF:0D:7E:7A:D5:74:2A:A7:12
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1hj-RlqQ8Qu3i1HvDX561XQqpxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/22
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
47:26:cb:b7:4c:23:4c:ea:b2:9c:c9:1c:fe:9b:80:69:b1:3c:
ce:4c:c3:d4:73:70:30:ae:b6:72:6b:a6:7f:31:1a:52:95:6f:
59:ca:2e:86:51:0b:e8:d5:a8:67:a7:6e:cf:53:5b:89:c4:be:
06:29:2a:32:34:9a:b0:9f:f8:6c:e2:ff:50:69:dc:8d:11:86:
d2:41:6d:0d:fe:07:f5:45:f7:a8:9c:7f:0e:46:54:41:17:89:
48:0c:ae:70:a3:e1:f2:a6:3d:75:7c:1d:9b:98:ab:88:26:1d:
fe:29:9a:d5:16:2d:b1:a7:1b:ad:32:1f:47:2e:f9:44:15:63:
3b:cc:00:f2:56:ae:98:6e:85:d5:56:f5:55:aa:7a:72:27:46:
e5:aa:cc:4d:46:63:91:ea:6b:22:2f:07:bc:de:db:56:a0:6c:
35:45:b5:d3:43:b4:4a:32:ff:7c:ce:c8:c9:f9:14:af:d3:8a:
9d:07:4b:6b:74:57:06:cb:8f:82:77:3d:19:b8:84:78:c4:3b:
b2:73:c5:c0:60:08:79:bb:01:18:e7:70:d4:07:b6:f3:02:da:
91:31:ec:e4:63:28:6c:db:78:f3:e0:d2:b5:5a:dd:22:b8:87:
b7:7b:21:ab:85:f7:3b:ce:71:67:29:3f:10:1f:00:49:2c:5d:
a9:8a:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org