Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1m8moAztJpPHhC1am1lLwBLtYU4.roa
File: 1m8moAztJpPHhC1am1lLwBLtYU4.roa (raw, json)
Hash identifier: /xWW+BYnplsAZA5kLpBwLbT67JaRi2eFZ23v/DivCF8=
Subject key identifier: D6:6F:26:A0:0C:ED:26:93:C7:84:2D:5A:9B:59:4B:C0:12:ED:61:4E
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0188901061876324DD3E59AB59E91731F1CE
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1m8moAztJpPHhC1am1lLwBLtYU4.roa
Signing time: Tue 06 Jun 2023 09:36:12 +0000
ROA not before: Tue 06 Jun 2023 09:36:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:10:61:87:63:24:dd:3e:59:ab:59:e9:17:31:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 6 09:36:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d66f26a00ced2693c7842d5a9b594bc012ed614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d8:ff:2c:c2:56:7d:8e:6f:86:5b:49:bf:82:
fa:12:9f:84:8c:a4:e5:f1:5c:80:2c:7e:9c:ac:fc:
a1:37:e9:b8:26:fa:04:e3:5b:08:e1:4a:bb:c9:2c:
55:84:35:13:98:28:c2:80:ac:84:9f:77:dc:4e:e3:
76:97:31:da:94:48:4d:35:60:9a:c8:69:68:1d:d3:
fe:5f:4b:d3:a3:25:b5:ff:58:64:35:65:b6:5e:84:
84:38:3d:7b:48:b6:3a:9f:90:b1:88:e8:fd:6d:a2:
f3:70:06:6d:0e:e4:41:d1:29:dc:63:dc:6e:99:0f:
2e:20:c0:eb:cd:b1:bc:39:a5:23:3d:81:ac:28:ba:
67:ee:c3:71:d6:74:e6:a0:36:db:f1:2c:65:ac:a4:
98:a8:db:9c:1a:68:d7:83:e4:26:28:6e:91:8f:15:
20:9f:b4:01:9e:f9:ef:22:90:1e:da:92:59:11:c1:
08:01:9a:85:03:fb:ed:95:43:cf:ca:ac:3f:ae:19:
7c:1e:ff:77:a9:a2:65:df:34:80:74:cd:0c:e0:58:
18:e1:28:3b:b2:71:78:f6:0a:7c:2e:9d:7f:ca:60:
34:c3:f4:7c:cd:0d:78:5e:1a:ad:cf:29:36:73:97:
53:d0:36:ce:67:d5:c2:43:14:ad:8d:59:94:0b:5f:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6F:26:A0:0C:ED:26:93:C7:84:2D:5A:9B:59:4B:C0:12:ED:61:4E
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1m8moAztJpPHhC1am1lLwBLtYU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
81:14:1f:af:ec:c7:c7:dd:4a:1d:88:c2:65:a3:3b:d6:93:f9:
6e:26:41:fc:79:9a:6e:68:69:4a:06:d9:a0:a2:b9:54:8a:a0:
9c:0c:02:20:84:dc:22:b9:ba:71:b5:5e:57:4c:3c:c0:7c:c3:
81:ec:41:30:8e:a7:39:90:bc:ab:d4:e6:f5:c0:b5:8f:2a:5b:
42:9a:73:e2:7a:18:4f:fd:b9:26:33:5e:e1:4a:0f:29:1e:4e:
9e:2a:9f:89:6c:27:e9:12:72:31:6c:c5:45:63:ae:d1:9f:fa:
7d:c9:03:44:e8:0d:16:7e:6d:df:5f:a6:59:f5:1a:d1:5f:07:
52:96:42:23:03:6f:d9:bc:40:46:be:eb:9a:e8:e9:d7:c0:8e:
b1:e4:af:23:40:d6:53:33:55:c6:ca:67:5c:06:0f:47:5a:c4:
85:0a:cc:99:cb:0a:5a:81:52:8c:43:e9:92:c3:d0:e5:c5:96:
06:3d:41:56:cb:a2:e0:e9:b0:18:0c:28:6f:ba:25:b4:41:c8:
07:ba:d1:ec:37:61:68:2f:aa:53:51:fa:03:4d:22:d1:c2:6a:
01:48:17:03:a7:75:ea:28:3c:cb:bb:10:a6:bd:0f:ba:4c:07:
5f:8f:13:34:c5:c4:40:fb:50:ef:62:5e:bb:db:e0:a6:e1:ad:
52:af:e5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org