Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/O8NL9qlKkPRIkFJs6A8Gc6TTFOI.roa
File: O8NL9qlKkPRIkFJs6A8Gc6TTFOI.roa (raw, json)
Hash identifier: AsxaATgu88760OY8N+p333Eo/cc5HzWaRbF2zazTzgg=
Subject key identifier: 3B:C3:4B:F6:A9:4A:90:F4:48:90:52:6C:E8:0F:06:73:A4:D3:14:E2
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018DD4BFAEB1E18718C81D935BFB9FC46FB6
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/O8NL9qlKkPRIkFJs6A8Gc6TTFOI.roa
Signing time: Fri 23 Feb 2024 06:55:48 +0000
ROA not before: Fri 23 Feb 2024 06:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 25 Feb 2024 20:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:bf:ae:b1:e1:87:18:c8:1d:93:5b:fb:9f:c4:6f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Feb 23 06:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bc34bf6a94a90f44890526ce80f0673a4d314e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:15:d0:a0:7b:0b:4f:33:dc:95:ac:52:0e:
16:e8:e7:88:b6:6c:34:cd:6a:1e:62:b6:98:4d:63:
be:9a:50:3b:6d:91:53:70:f7:16:fb:e2:bb:fc:59:
a1:d9:63:77:c5:1c:5a:30:ef:47:8e:66:8d:bb:b1:
9c:c9:80:c2:9c:4c:4b:93:dc:ca:75:7f:e2:24:18:
44:08:02:70:61:26:77:78:58:1d:bb:ee:6f:ee:2f:
8b:ff:f0:35:ef:93:80:60:8c:42:f4:19:d3:77:46:
4c:d4:3b:86:d2:b8:16:a4:41:cd:f3:f7:f8:73:c6:
bb:29:36:f8:66:cf:aa:80:0d:1e:9a:c4:84:76:d7:
7d:30:b9:99:3c:de:3d:44:2e:5d:4d:03:11:5c:2a:
4b:0b:72:1f:41:8c:c8:c1:d5:37:5c:ea:83:87:56:
eb:4d:f1:33:31:af:dc:44:f6:4b:07:0c:ce:86:47:
c9:aa:4d:6c:8d:f0:45:b7:25:74:66:8d:6b:e9:e6:
41:0a:da:24:53:ad:99:e8:74:51:1d:d1:35:3f:6e:
30:c4:6d:07:e2:77:c9:55:68:44:d7:f7:2b:b9:1f:
32:f0:17:2f:ca:84:7d:a0:14:e2:65:33:35:e8:ce:
f5:be:8d:79:92:7e:fd:3e:43:c0:2f:fc:f4:5d:cf:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C3:4B:F6:A9:4A:90:F4:48:90:52:6C:E8:0F:06:73:A4:D3:14:E2
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/O8NL9qlKkPRIkFJs6A8Gc6TTFOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.136.0/22
Signature Algorithm: sha256WithRSAEncryption
09:92:48:0a:8e:4e:62:9f:8d:7e:fe:1c:89:44:7f:9f:5f:61:
ca:c1:70:41:e7:11:b4:70:68:62:1b:c2:b7:06:41:10:0d:b8:
6c:b6:da:69:77:6e:96:83:bd:58:83:85:b7:1b:07:a1:f7:5f:
28:8f:d5:86:9b:8c:7e:a3:8b:8e:18:c3:79:d9:df:a1:d0:dd:
7a:a2:6b:ad:21:1c:50:c8:f8:3f:34:c4:4c:aa:47:3b:4a:cb:
17:a5:b2:f7:3b:13:bd:b6:46:ca:23:a7:ef:ec:b3:fc:db:83:
1c:22:23:dd:a2:1d:dc:44:f2:f2:b6:23:64:d4:6a:5e:ac:fa:
d0:15:a6:27:ac:f5:fb:c6:fe:82:7b:8e:cb:c6:4e:89:18:72:
21:e0:7f:9b:a8:6a:93:ca:74:ff:5c:2a:e8:75:22:03:93:16:
57:0e:2b:06:53:27:92:79:d5:f5:a6:a7:cc:74:3b:bc:1d:80:
22:96:de:52:db:0f:ab:51:dd:bf:ac:9f:b5:e8:ed:98:bd:23:
67:44:4b:9b:e5:c7:b4:ef:6a:a1:4e:90:c6:88:cc:ff:91:53:
70:47:2b:3f:3d:4c:66:46:ad:eb:fa:91:9b:ab:7a:24:10:26:
ec:f7:8c:b6:fd:d7:f3:ea:50:fe:86:39:57:3c:21:78:5c:2e:
63:44:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 25 23:36:34 2024 by rpki-client on console-fra.rpki-client.org