Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/6M7qbujVgnCe6YUeYDDRdrAGlrY.roa
File: 6M7qbujVgnCe6YUeYDDRdrAGlrY.roa (raw, json)
Hash identifier: UJHi3jUJf0iwhUrxNfo42hwE7GjlDl2kCekKFqAxTgk=
Subject key identifier: E8:CE:EA:6E:E8:D5:82:70:9E:E9:85:1E:60:30:D1:76:B0:06:96:B6
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01889010615B1D96A38813074EE521D9A803
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/6M7qbujVgnCe6YUeYDDRdrAGlrY.roa
Signing time: Tue 06 Jun 2023 09:36:12 +0000
ROA not before: Tue 06 Jun 2023 09:36:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:10:61:5b:1d:96:a3:88:13:07:4e:e5:21:d9:a8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 6 09:36:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8ceea6ee8d582709ee9851e6030d176b00696b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:84:54:c7:da:42:10:10:e9:33:2d:01:0b:
c2:29:b6:3f:1a:33:41:f1:fb:00:c8:65:7a:d1:b6:
c7:4a:bb:d8:69:5a:c6:f0:c5:28:fc:00:2a:be:bd:
22:a8:22:fa:fd:4e:9e:92:a5:7f:1a:5f:7d:c9:9d:
7e:63:5f:ec:c1:d4:44:ad:95:94:66:f6:fc:f7:32:
34:86:e7:9a:4b:5d:69:9a:ec:43:15:59:d0:f5:2e:
42:bb:bc:76:cc:db:d8:e7:86:16:b7:0f:ad:8c:8d:
7a:1f:d7:a0:f4:26:3d:91:f5:6a:68:d1:f4:a9:9a:
85:0b:c4:e0:d2:e3:a1:9c:49:61:0f:03:bc:34:bf:
1d:40:4a:41:9d:98:7c:7d:17:64:18:9f:9a:45:ed:
a7:f3:bb:e0:c3:2d:2b:ca:38:0f:03:d2:71:89:71:
a6:1b:a9:28:8e:5f:9e:d4:5f:41:22:e6:26:6b:90:
7a:98:7e:21:46:48:c1:35:30:3a:58:6c:d5:be:83:
21:24:66:fa:46:ee:49:d5:7c:aa:41:96:76:d4:22:
41:be:66:05:5d:50:65:fd:a5:fd:27:ce:2f:0d:3d:
52:f4:b5:40:fd:d5:e6:ed:fb:d7:68:3f:53:12:85:
5a:62:06:d6:ca:a1:93:2a:34:fc:d9:68:54:b0:a3:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:EA:6E:E8:D5:82:70:9E:E9:85:1E:60:30:D1:76:B0:06:96:B6
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/6M7qbujVgnCe6YUeYDDRdrAGlrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
95:8b:a7:91:f9:c5:b0:0b:66:39:1a:a6:8f:b4:74:3a:74:f2:
15:cc:89:dd:7e:e3:9c:dc:39:66:d0:fc:0c:2c:2f:ef:7c:40:
15:09:1c:a2:94:90:d1:a6:25:0b:4e:7a:9c:e1:a4:1b:78:39:
3b:0f:73:13:d8:5d:ff:97:38:87:7e:af:3c:d1:1c:da:14:78:
85:b0:4b:e5:87:11:d1:77:b9:be:6f:24:05:3f:00:b1:db:ad:
b5:61:41:78:2d:71:ac:a1:4a:2b:2e:b9:ef:96:3f:c0:be:f8:
ad:b3:ae:69:c6:15:80:dc:87:59:db:cf:17:06:83:2c:1d:e8:
f8:6b:db:4a:59:ad:07:37:ad:1d:1b:f0:9a:2e:00:f7:b5:04:
cb:0c:44:2c:14:a1:8f:69:a0:0a:c6:80:05:a4:ea:d6:c5:d7:
e8:73:99:b9:8b:11:c8:68:c0:e8:76:ac:92:23:d8:34:26:13:
c9:49:29:4e:2c:1b:1d:5f:eb:15:c4:78:44:b5:17:b9:ea:d6:
f5:4c:b2:6a:1b:6c:5a:3c:28:d1:44:a5:6a:9e:b9:a0:b8:44:
55:2c:4b:69:65:7f:e3:86:d3:bc:7f:38:60:f5:cd:d5:7c:a4:
10:9c:4c:21:24:65:39:39:38:c6:8f:48:c4:ed:a1:42:26:31:
aa:c4:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:07 2024 by rpki-client on console-ams.rpki-client.org