Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Vfxwug1jhblLlemB5l3LTVxVZOc.roa
File: Vfxwug1jhblLlemB5l3LTVxVZOc.roa (raw, json)
Hash identifier: PL1wzx26v9LdgkVmBXS9c+7Nx5qMBRzw2oeTWrjo4kQ=
Subject key identifier: 55:FC:70:BA:0D:63:85:B9:4B:95:E9:81:E6:5D:CB:4D:5C:55:64:E7
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019165F073245CCAC81CDA8D5CED1A81B918
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Vfxwug1jhblLlemB5l3LTVxVZOc.roa
Signing time: Sun 18 Aug 2024 14:42:22 +0000
ROA not before: Sun 18 Aug 2024 14:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 20:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:65:f0:73:24:5c:ca:c8:1c:da:8d:5c:ed:1a:81:b9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Aug 18 14:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55fc70ba0d6385b94b95e981e65dcb4d5c5564e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:3f:70:54:0d:e5:21:65:21:db:82:65:89:
c0:3b:c4:e7:64:db:89:e4:c3:4b:c8:a3:3f:fc:bc:
b2:ce:a3:b8:69:f5:d4:f0:4b:a5:da:f1:67:12:f1:
3a:63:65:88:33:05:77:29:11:de:93:0e:ec:3b:7e:
39:ad:30:1b:8f:44:64:6b:46:9e:aa:e6:47:32:19:
78:b9:9a:b6:27:de:99:4a:7f:c3:de:d9:1a:99:19:
bf:28:1d:39:49:a1:24:57:2a:fc:17:b7:9a:4a:30:
36:44:cb:e7:1e:09:8d:ea:80:d5:e8:09:19:cc:82:
56:3e:02:a7:9e:8c:bc:f1:cf:2c:85:05:22:1c:fc:
df:00:29:f1:19:c5:1c:34:c8:df:66:d5:af:48:f3:
5e:d9:53:10:4e:50:60:9c:04:53:ed:60:ca:d8:77:
d4:6d:50:eb:70:11:c2:a6:82:8a:35:a8:67:4b:29:
a0:00:eb:d9:50:a1:72:80:a3:23:e2:0d:71:4b:5b:
9f:36:bf:cc:93:23:76:6c:93:9b:49:39:ca:b7:cf:
85:b2:a6:57:10:2d:09:c1:77:66:02:3f:40:bc:d7:
26:74:f3:c3:df:35:ba:07:8f:86:0f:00:ba:53:56:
4c:48:43:f8:50:36:46:a3:9d:17:6d:ef:43:ab:41:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:70:BA:0D:63:85:B9:4B:95:E9:81:E6:5D:CB:4D:5C:55:64:E7
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Vfxwug1jhblLlemB5l3LTVxVZOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:96:6e:f0:0a:0d:db:40:d9:5b:8d:5d:14:2e:cb:00:46:c8:
45:2b:34:48:d0:bb:69:ba:20:a4:2e:ce:e5:70:12:72:cf:48:
57:51:a6:fc:0c:05:63:86:68:8e:5b:01:b5:a2:97:9b:0c:2a:
06:8a:44:60:d9:f8:44:02:b7:0d:64:22:9a:99:c1:57:c1:64:
31:e9:6d:d9:bd:82:56:bd:93:bf:0d:0d:77:e5:6a:df:74:ec:
e4:18:b9:94:6d:29:b2:54:c9:e5:39:f3:8e:68:36:38:cb:a8:
c3:cf:0f:6d:b9:3a:04:29:d4:b2:28:c2:32:a8:bc:05:6c:95:
ca:c4:c7:4a:b5:27:bd:9f:0d:bf:a3:e5:1d:3f:f0:37:17:50:
4c:29:6f:e6:4e:43:44:7a:a8:ae:89:4a:92:16:73:8a:0c:8c:
1a:84:ce:77:67:f2:5c:33:74:72:6b:4c:1a:e8:8a:41:7a:0c:
d5:68:54:b7:b6:a6:1a:88:00:f3:e5:b8:7a:93:88:a2:46:28:
8b:04:63:21:4f:24:82:0d:85:d5:e5:80:9a:c7:3d:ce:ea:f8:
aa:cc:69:2e:8c:86:fb:51:9c:e3:12:76:49:a9:d9:20:f3:e6:
ad:48:bc:ae:17:a3:c7:e8:95:c5:ba:ec:c0:cd:8a:fd:87:e3:
84:d4:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 22:04:23 2024 by rpki-client on console-fra.rpki-client.org