Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ETH-2cqcZ_DJ4Y9KlDcVYHUXw-U.roa
File: ETH-2cqcZ_DJ4Y9KlDcVYHUXw-U.roa (raw, json)
Hash identifier: esWNzpUajov5yt4sOI+p721pLUWD12EG8Tt1AG8xcaQ=
Subject key identifier: 11:31:FE:D9:CA:9C:67:F0:C9:E1:8F:4A:94:37:15:60:75:17:C3:E5
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018F4745EF3ED89705AC79BD1D693B867F4B
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ETH-2cqcZ_DJ4Y9KlDcVYHUXw-U.roa
Signing time: Sun 05 May 2024 05:41:56 +0000
ROA not before: Sun 05 May 2024 05:41:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
188.209.133.0/24 maxlen: 24
188.209.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 15:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:47:45:ef:3e:d8:97:05:ac:79:bd:1d:69:3b:86:7f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: May 5 05:41:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1131fed9ca9c67f0c9e18f4a943715607517c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:6d:63:5a:73:9c:43:c2:99:ec:ff:d0:b2:
10:0f:d4:97:34:45:d8:4f:72:e5:19:02:e0:37:01:
58:e0:cc:1c:a6:e9:8e:6e:2f:cc:d1:d2:8c:96:55:
74:c8:5b:05:e0:60:57:31:6d:96:05:d4:02:41:f1:
88:97:7a:62:13:ab:41:2f:7e:75:d8:0c:28:ea:b6:
53:08:be:4e:6b:a1:b2:d9:13:fe:34:e4:f8:dd:be:
16:95:74:64:b1:96:57:e2:21:8f:ba:a7:2d:70:6e:
ac:82:ed:f3:f9:9d:8b:49:e2:97:9e:c3:24:ef:f9:
21:d5:10:74:bc:db:50:b9:ca:30:d2:b4:16:e8:4e:
92:a0:73:54:e2:0f:2c:f2:f1:6b:0b:eb:d3:c0:ce:
55:4a:6b:7f:64:ee:fc:a5:43:f5:95:c9:7d:ef:6c:
51:be:97:b5:b8:2b:57:19:a1:c7:63:bf:b8:e9:17:
9f:76:df:c3:16:d0:0d:21:04:78:2c:c6:57:68:87:
40:e4:b3:55:a1:75:36:d7:d6:98:cc:8c:2c:13:4e:
79:f8:e3:57:16:4e:f5:ed:15:7b:b3:19:25:89:72:
b9:db:24:36:7b:01:96:f4:52:8f:c4:74:ce:34:76:
d9:4c:dc:32:22:bc:cd:60:a8:be:8c:da:c8:fd:9c:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:FE:D9:CA:9C:67:F0:C9:E1:8F:4A:94:37:15:60:75:17:C3:E5
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ETH-2cqcZ_DJ4Y9KlDcVYHUXw-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
188.209.139.0/24
Signature Algorithm: sha256WithRSAEncryption
88:93:6a:80:35:ab:46:b5:75:17:c4:f8:e3:5a:68:1e:fb:2f:
ca:f7:24:8d:5d:ec:7f:7e:cb:20:b1:25:1a:04:b4:c9:63:5a:
46:21:ce:f2:76:67:8b:7b:b4:36:52:0d:6f:27:2b:81:24:c0:
4d:49:32:16:d6:f0:2c:b8:df:99:8d:33:80:3a:ca:4d:6d:b2:
8b:e9:fb:71:dc:e9:a7:ec:39:b7:d9:85:d3:6f:c5:eb:03:f2:
c4:ba:ff:a5:3c:23:0d:f4:9b:1a:17:bf:db:ff:05:40:f2:8b:
6d:91:ba:91:1f:4c:05:d9:9e:eb:51:ce:7d:c5:b2:83:e1:ff:
35:c4:44:43:ea:cc:84:e4:dd:17:e4:1d:04:bb:3e:09:7f:c7:
88:1d:65:d8:74:65:50:9a:31:e8:1d:7b:8e:e1:ae:9b:e1:08:
eb:f7:7a:7f:30:1b:d6:c1:ef:ac:f8:a9:f6:7c:5a:56:f6:43:
5c:6e:0d:d1:dc:f7:02:f1:7c:36:b4:ba:4d:c3:75:22:66:38:
fc:a8:9e:bf:0e:6b:e4:e8:cf:c9:cb:95:b0:64:1d:f7:9f:cf:
64:9d:c8:08:79:4f:59:98:c3:27:e5:ba:dc:4e:a8:c7:80:3c:
8f:45:5a:e1:b7:f8:21:99:92:ba:a6:a0:53:9a:07:50:6d:7c:
d3:f7:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org