Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WE6R37T7ilvleDxdQSDAyZQxF8g.roa
File: WE6R37T7ilvleDxdQSDAyZQxF8g.roa (raw, json)
Hash identifier: sRvHfFvScMuq0XYZDAFY60QWRMMOfA3bhTORj/1gS7k=
Subject key identifier: 58:4E:91:DF:B4:FB:8A:5B:E5:78:3C:5D:41:20:C0:C9:94:31:17:C8
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018E8B9B763F5CD928C3A2D73674DB9F655D
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WE6R37T7ilvleDxdQSDAyZQxF8g.roa
Signing time: Fri 29 Mar 2024 19:06:45 +0000
ROA not before: Fri 29 Mar 2024 19:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
188.209.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 21:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8b:9b:76:3f:5c:d9:28:c3:a2:d7:36:74:db:9f:65:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Mar 29 19:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=584e91dfb4fb8a5be5783c5d4120c0c9943117c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f8:fd:55:de:78:89:40:ca:66:29:2f:be:e3:
ad:f3:a8:c5:7f:82:61:2c:65:b4:29:0e:4c:fe:27:
9d:cb:06:4d:69:92:9a:05:76:90:b8:b7:15:0b:0f:
b9:f5:87:b2:58:08:f4:8b:59:16:04:5b:47:e4:28:
84:ce:24:39:03:df:8b:b3:11:0c:01:45:a9:69:86:
67:81:e9:2e:35:d8:c5:30:6c:79:01:30:f7:48:20:
43:78:8a:e3:5c:e6:92:24:ca:a0:c3:21:b3:ae:dc:
af:87:5b:97:3c:28:25:86:f1:ec:05:c8:b2:f3:00:
59:00:92:e9:69:5a:4d:0a:f3:54:53:7e:c2:0c:ee:
37:ce:f2:f3:dc:9e:fb:ae:e3:a0:b9:c1:d3:af:d0:
61:03:cf:5e:b8:29:4d:f4:60:c1:63:0c:21:e6:80:
ae:88:cf:ad:e0:2c:80:66:93:87:d6:73:a5:c6:e1:
3f:0d:43:58:75:31:8f:9e:8f:fb:de:9c:08:d6:46:
c2:49:1c:ff:b8:d8:83:24:90:e6:13:1c:89:20:e4:
e1:a6:b7:42:e7:44:22:53:76:ad:91:ea:99:6a:5d:
75:53:2a:44:2d:39:df:1c:36:7d:7d:85:9a:95:e0:
06:e1:65:28:a5:e6:cf:fe:12:98:00:d0:b5:09:5d:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:91:DF:B4:FB:8A:5B:E5:78:3C:5D:41:20:C0:C9:94:31:17:C8
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WE6R37T7ilvleDxdQSDAyZQxF8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:44:28:2d:9d:11:f0:8d:72:94:ca:dc:d1:71:a5:e3:cc:dd:
81:78:ee:e4:3c:dd:20:c0:18:7f:2d:4e:87:46:2a:fa:41:5e:
7e:0c:e9:b7:7a:7b:ea:e0:0d:cc:74:16:27:e4:69:51:52:8e:
77:30:6a:f6:ad:a7:20:2b:9a:fb:e4:0e:0f:ec:74:93:6c:f5:
35:a3:5c:8b:13:a3:0e:2d:2c:80:df:b3:ee:05:90:8d:e7:13:
4c:d0:ba:92:0a:b5:6a:e3:a4:9b:94:ac:50:38:27:43:57:13:
42:9f:0f:63:1b:ac:b2:a0:6f:bc:24:4f:49:15:24:b0:3b:9d:
fd:d7:94:bf:fe:7e:da:69:46:1d:65:b2:c8:fb:c0:b2:e5:df:
9b:13:ff:22:32:0c:6c:f4:e4:b9:d9:ee:e9:ab:77:81:6b:93:
ea:26:6b:b6:e4:f3:b8:eb:fe:bb:9d:b4:50:91:b0:c4:df:58:
33:24:ce:b0:95:bc:5b:0b:b1:f0:35:5c:79:ce:89:05:ba:05:
3a:67:3a:ec:0c:08:94:ee:d7:ac:24:11:23:f6:95:d8:58:c2:
0f:95:4b:38:17:3c:48:a4:ee:a1:37:e8:e4:3b:67:05:34:74:
5c:53:14:fc:f8:ff:85:12:4e:dd:9f:6e:67:f0:ea:9b:4a:02:
c5:d5:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 23:31:28 2024 by rpki-client on console-ams.rpki-client.org