Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/8tsTttyYJEcF9Fba4brbCaagqOw.roa
File: 8tsTttyYJEcF9Fba4brbCaagqOw.roa (raw, json)
Hash identifier: ymd7JzEZsGuWo4eyJvgljvhjdNP5M9GkUKv22NyFfqg=
Subject key identifier: F2:DB:13:B6:DC:98:24:47:05:F4:56:DA:E1:BA:DB:09:A6:A0:A8:EC
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0189BB3F398FE283A346FF771EA6A6EDA4E3
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/8tsTttyYJEcF9Fba4brbCaagqOw.roa
Signing time: Thu 03 Aug 2023 11:53:50 +0000
ROA not before: Thu 03 Aug 2023 11:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 188.209.128.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:3f:39:8f:e2:83:a3:46:ff:77:1e:a6:a6:ed:a4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Aug 3 11:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2db13b6dc98244705f456dae1badb09a6a0a8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:ed:4f:86:24:2b:85:a3:e0:07:6b:50:7f:
10:ad:ce:e6:4a:d5:4e:af:11:02:28:07:4a:ee:4b:
43:5a:b3:d4:8e:98:cd:a2:a9:7b:94:d0:12:cc:8e:
29:03:86:47:5e:e8:fd:ff:ae:be:1f:e3:ba:78:04:
f2:d9:ae:90:8b:ae:3c:07:e8:81:0b:ad:e4:5a:42:
aa:7b:d5:f8:28:01:5b:51:a7:dd:a0:fb:45:48:05:
6e:c0:9c:8c:c0:3a:ec:43:29:27:1b:70:77:f1:ab:
9b:42:64:81:5e:df:7e:6e:e1:c7:8b:5e:1f:65:42:
cd:7a:7e:d0:30:73:54:4b:7b:e1:9b:03:7e:0d:d2:
3a:9b:57:25:92:46:35:dd:6a:3d:db:95:83:00:29:
f4:5e:39:92:31:3e:ab:db:70:aa:7f:8f:94:db:0c:
fe:73:e7:2e:1c:a2:6d:8a:e8:c2:85:66:58:b9:49:
e3:5a:28:c0:2f:7e:2d:4e:51:d6:76:a7:3f:7c:ff:
19:55:8f:c8:62:ca:48:a8:08:6e:18:af:c5:74:b9:
4d:ae:36:b6:84:d9:c6:eb:7e:10:0a:c8:fb:d0:79:
58:c8:4a:e6:26:7b:c7:38:ef:24:81:8d:e6:a6:0c:
d1:63:5f:dc:b7:3c:fe:c4:8c:7f:f0:58:7a:0e:d0:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:13:B6:DC:98:24:47:05:F4:56:DA:E1:BA:DB:09:A6:A0:A8:EC
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/8tsTttyYJEcF9Fba4brbCaagqOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:e1:3f:92:25:ff:2b:3f:35:f1:27:fd:c7:d5:2d:b1:50:ab:
c1:ee:b5:36:73:19:a2:23:c1:cc:52:fc:6f:2f:94:9c:a8:40:
31:33:e1:71:af:40:c4:00:f5:79:62:ab:ab:2d:3e:ac:27:13:
46:e6:ee:74:12:ce:5f:6e:c6:2f:c4:fb:3d:04:40:67:d8:ea:
49:8e:a1:cc:c2:89:12:61:06:0e:98:8c:97:11:00:cf:f8:e1:
c8:af:a6:72:07:ae:fb:44:d7:25:55:dd:8a:4f:c5:e4:e7:1d:
e7:c7:b2:9a:23:5e:9d:f6:ab:47:a1:e4:f6:65:af:ae:d7:1f:
3d:c0:ed:26:91:25:6e:cc:94:6f:4c:3d:0b:8c:f9:6a:bc:5e:
67:d6:f4:f3:75:17:f8:63:ba:d0:1a:b2:59:c7:2e:6f:d1:0b:
75:b7:2e:f1:a1:af:98:43:40:48:61:8f:5f:e3:17:60:64:b1:
e3:6e:2b:aa:7b:4a:40:03:97:35:e9:e7:be:62:31:cd:f7:1e:
97:21:79:a6:6f:c9:9a:0c:da:b7:1d:2b:85:77:2c:d4:71:99:
cb:44:bc:51:c5:d2:eb:c7:e3:bb:51:0a:76:32:5b:73:fe:5a:
df:9e:a9:5d:66:19:a5:82:0d:f0:fb:bb:77:ed:af:fb:75:7c:
ba:e8:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 02:21:31 2023 by rpki-client on console-ams.rpki-client.org