Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/CjjVvrWOUlHPakI_xyU2KF7dFRo.roa
File: CjjVvrWOUlHPakI_xyU2KF7dFRo.roa (raw, json)
Hash identifier: XbyFgxgq499mlagy4DM1K/lkH66gqxPKbwy8MjBAMHw=
Subject key identifier: 0A:38:D5:BE:B5:8E:52:51:CF:6A:42:3F:C7:25:36:28:5E:DD:15:1A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018D91CF41C203EAEDD4DF3CA6F105F7116B
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/CjjVvrWOUlHPakI_xyU2KF7dFRo.roa
Signing time: Sat 10 Feb 2024 06:58:15 +0000
ROA not before: Sat 10 Feb 2024 06:58:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.136.0/22 maxlen: 22
188.209.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 16 Feb 2024 06:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:91:cf:41:c2:03:ea:ed:d4:df:3c:a6:f1:05:f7:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Feb 10 06:58:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a38d5beb58e5251cf6a423fc72536285edd151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:03:cb:4a:87:55:13:bf:fd:a1:ad:a4:f5:2f:
7f:58:d3:11:79:f3:ac:e9:23:03:22:b5:03:3c:8e:
a6:f2:df:b6:3a:c7:16:48:76:ac:a2:90:a2:b7:81:
a4:70:78:19:65:e2:c1:5c:d8:dc:ed:5e:c0:de:ae:
e9:ec:03:e0:00:34:9f:f3:b2:ed:e9:f4:a3:65:da:
35:3a:1e:a6:ed:ef:49:ec:f0:17:a7:9b:9b:a1:3b:
38:97:c9:e6:1e:95:22:3a:b6:28:e0:a3:e4:95:98:
6f:ca:35:64:5e:c3:c0:73:94:e0:50:0e:49:b5:ba:
51:bd:52:fe:d6:93:35:de:76:72:63:4d:00:db:93:
ba:66:0d:38:07:22:92:7c:7e:ec:58:43:3e:0d:df:
ce:ef:e8:b2:d3:e0:ba:46:da:e5:bb:55:75:61:14:
45:2d:b1:77:e9:db:f5:d7:cf:8a:81:ca:0e:f7:98:
8e:07:c7:99:bc:ca:d6:19:ad:1c:f8:fb:be:d7:5d:
a4:9d:ac:05:8d:a1:30:de:3f:57:77:f9:10:b2:8c:
eb:a6:1d:ea:8e:a4:ab:5c:81:ce:af:bc:24:a6:e8:
68:ea:e3:db:a2:c5:8d:dc:9d:64:e0:d5:5c:64:45:
9f:1e:44:19:93:cd:ee:fb:99:f4:6f:33:42:2b:a4:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:38:D5:BE:B5:8E:52:51:CF:6A:42:3F:C7:25:36:28:5E:DD:15:1A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/CjjVvrWOUlHPakI_xyU2KF7dFRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.136.0/21
Signature Algorithm: sha256WithRSAEncryption
31:27:e5:5c:4b:bf:f7:cc:a3:37:cc:20:22:82:ba:4b:c0:e0:
5e:08:7d:ba:08:68:87:be:d4:22:0a:6f:7b:70:01:fc:78:d6:
2f:28:52:e6:e0:29:47:98:0d:e4:f9:0a:90:23:68:dc:de:76:
8e:69:43:5e:c3:c3:f7:20:f0:0c:16:11:82:0d:57:29:20:f0:
4d:32:db:80:09:d0:ea:ed:b8:47:25:30:a6:0a:8d:04:96:e5:
81:a9:a3:a4:ee:50:f8:0e:fc:50:a6:70:58:4d:78:45:dd:16:
02:23:7d:03:38:2b:33:c2:9b:01:47:c5:7e:d2:29:d3:05:87:
3e:30:e1:6c:8b:1d:6d:8a:4e:32:53:77:73:0d:b2:85:09:ca:
ef:55:51:8b:b6:50:38:a5:3f:85:e5:a0:26:8a:5a:e4:14:27:
c2:98:79:cb:83:7e:ac:b2:0d:28:7a:ac:1d:9d:01:15:d2:6e:
09:3c:e7:f1:a8:bd:11:11:2f:72:76:81:6d:9c:73:ab:00:25:
26:ee:c1:8a:7b:02:98:6e:79:b1:12:44:c8:36:82:73:b9:8c:
a2:51:1e:e7:f6:5d:a2:fb:e1:c2:a0:c8:c1:93:9e:0d:89:f0:
f1:3f:fd:2a:c9:d2:c4:92:c8:d2:07:17:87:3f:9b:78:32:62:
28:50:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 09:57:33 2024 by rpki-client on console-ams.rpki-client.org