Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FuQRbWVEQcYW5HXoEcdlmccdHJo.roa
File: FuQRbWVEQcYW5HXoEcdlmccdHJo.roa (raw, json)
Hash identifier: Mj8RLasiNBa8INljbN4yrWGm0Do4JHCgAh6VBkjYYB8=
Subject key identifier: 16:E4:11:6D:65:44:41:C6:16:E4:75:E8:11:C7:65:99:C7:1D:1C:9A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB30DCA22FA69A081FD0F03FD73351
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FuQRbWVEQcYW5HXoEcdlmccdHJo.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:30:dc:a2:2f:a6:9a:08:1f:d0:f0:3f:d7:33:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16e4116d654441c616e475e811c76599c71d1c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:9d:bc:5f:67:c7:67:7d:0f:b9:65:0d:37:
55:cb:58:89:af:5d:e1:8a:a9:54:19:ca:46:df:a4:
8a:e3:f6:8b:f5:1c:b0:f1:70:c6:ba:01:02:c9:24:
dc:3f:bb:ca:a0:31:ca:37:31:50:f5:b2:60:5c:12:
b5:9a:a7:56:c7:69:25:14:f2:2f:b9:b0:bf:89:5c:
c0:07:a9:78:9a:a4:16:0e:92:dc:d5:72:5f:3d:4b:
0b:56:b0:90:2d:7c:90:c7:76:af:a0:15:8d:16:cd:
29:3c:81:f5:48:4b:1c:cf:c3:4f:a4:06:40:f9:e4:
a5:be:7d:a4:b8:75:2e:e1:12:87:55:35:18:49:f7:
c6:6c:39:0b:c1:b4:e3:d2:d0:b0:48:43:ea:03:f1:
8e:bf:a7:0c:50:f7:85:9a:37:cc:5a:04:80:c8:18:
0f:00:60:de:a0:d4:a2:6d:ab:af:92:00:41:90:16:
eb:70:83:dd:37:cc:0e:f2:80:4f:9e:d9:b4:ce:f8:
57:c6:68:d4:07:96:cf:83:77:20:6a:d5:44:31:7f:
60:6d:ee:92:72:0f:b0:d5:c0:2d:7f:43:66:fd:0f:
21:67:f1:79:82:6e:61:99:44:b7:5c:2e:7f:36:81:
a0:07:82:f1:10:9f:e2:31:63:59:e2:df:c2:7f:86:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E4:11:6D:65:44:41:C6:16:E4:75:E8:11:C7:65:99:C7:1D:1C:9A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FuQRbWVEQcYW5HXoEcdlmccdHJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
50:9b:bc:c8:3e:5c:34:fc:c3:3a:1c:0f:77:7c:9e:32:74:f0:
b4:95:87:fc:67:bf:97:22:1c:28:03:1a:25:4f:dc:1c:10:47:
54:02:13:27:cc:12:05:9f:f6:b6:ba:18:a2:5d:95:7f:4d:2e:
ff:94:4e:8f:f2:1b:0b:41:88:a1:a2:4e:f2:25:ea:be:ca:98:
b1:6c:46:2c:a0:14:56:3c:72:53:30:5c:ef:4a:cd:04:ff:fc:
30:c5:7e:f1:32:54:ef:91:68:79:6c:2b:82:83:84:37:bc:d7:
3f:70:04:ad:e3:7c:75:cb:89:c9:24:17:a3:17:d5:99:93:7c:
6e:57:46:48:e8:d0:f5:f9:0e:87:88:21:54:7f:4e:4b:f8:0d:
ba:c7:c8:90:d5:30:e5:d5:8a:1c:16:a1:68:e8:64:88:42:56:
bb:04:2d:96:f3:66:20:9a:28:ee:59:ba:a6:23:ba:3c:0b:4c:
59:5e:16:21:6a:27:86:a5:05:54:67:d8:69:21:1c:4f:9b:39:
ce:08:69:25:07:93:03:4b:ed:ef:f2:e5:b6:66:2a:9f:70:fa:
c6:48:72:b3:66:18:d7:98:d0:ee:d2:d7:b4:eb:64:e2:f2:28:
eb:b2:2d:a0:00:d4:2e:6f:32:f8:28:26:21:f7:a8:ba:f7:83:
cc:ef:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 23:53:05 2024 by rpki-client on console-ams.rpki-client.org