Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/X6GNj2bTR6B-rkdeW-pncMTMn-Q.roa
File: X6GNj2bTR6B-rkdeW-pncMTMn-Q.roa (raw, json)
Hash identifier: +mxYPDSic16/IyN9+Wo8aJFRzlPCo4SZB0J/LTqVzMw=
Subject key identifier: 5F:A1:8D:8F:66:D3:47:A0:7E:AE:47:5E:5B:EA:67:70:C4:CC:9F:E4
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01856ED4BC91F2ECDA984828C1BED8C735C9
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/X6GNj2bTR6B-rkdeW-pncMTMn-Q.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 188.209.128.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 19:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bc:91:f2:ec:da:98:48:28:c1:be:d8:c7:35:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa18d8f66d347a07eae475e5bea6770c4cc9fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:2d:76:a3:1f:c7:fc:1f:c7:3b:38:4f:e4:
99:0c:e2:c7:77:82:da:8d:d5:b3:f7:e9:7a:2e:b3:
2f:8d:d9:59:3c:1f:95:2a:10:9f:bd:e0:dc:53:a9:
24:43:2a:92:49:eb:58:93:80:27:b3:29:2c:89:61:
c5:dc:77:3e:3c:16:e8:6d:5c:2e:ad:1e:b3:27:cd:
37:6a:0d:a3:50:73:3c:d2:33:ad:83:eb:a3:0a:07:
aa:cc:8f:1d:5f:78:4e:e9:1f:30:4a:20:09:3b:04:
8d:cb:ec:ef:58:ae:2f:67:23:45:3e:a3:dc:cd:df:
bd:07:cf:a7:28:eb:28:16:63:82:7f:6a:ec:39:9b:
10:bb:bb:f4:08:0b:32:8c:99:92:80:e3:af:51:f9:
43:8a:0c:da:f5:fc:9e:d3:ae:48:60:41:8a:dd:7b:
f3:19:40:9f:9c:6a:4c:0b:de:49:72:30:67:67:8e:
84:d4:bd:1f:65:f7:b9:b4:05:7d:7f:ab:9c:e2:f9:
d9:bc:94:95:4d:80:9f:6a:a6:0c:ac:fd:c0:94:70:
e9:7f:d6:c3:ad:89:89:d5:03:80:5b:af:a9:9d:6f:
a3:1f:a6:12:c8:36:31:6a:a0:a5:0b:7d:45:d5:53:
ee:71:2a:d2:78:1e:49:77:2b:bc:ae:f5:e9:cc:c4:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:8D:8F:66:D3:47:A0:7E:AE:47:5E:5B:EA:67:70:C4:CC:9F:E4
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/X6GNj2bTR6B-rkdeW-pncMTMn-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:68:4a:c1:75:02:f7:89:2c:b7:db:f8:80:77:e7:53:4c:de:
08:32:b5:12:cc:2a:fe:e6:04:ed:e9:38:0c:9b:1d:45:11:67:
69:d0:80:81:ed:fd:fc:18:75:64:3f:c3:4a:99:18:ca:da:6a:
55:d6:9d:54:66:59:79:a4:d1:a3:92:dd:d3:f2:21:16:94:b3:
1e:d6:95:87:78:8c:8f:bf:a4:57:b0:81:07:32:2a:72:88:80:
0f:f3:21:7a:18:7f:f8:2f:13:af:39:08:73:05:12:de:77:e8:
e8:80:92:c0:bc:9d:c8:03:2a:36:a2:e8:2f:91:39:50:f5:6e:
67:a6:f6:3c:ce:d4:89:03:d7:f5:54:2d:a6:3d:f9:24:6d:bd:
b2:a9:cc:2c:db:a9:19:38:30:87:79:8f:53:e0:59:87:ac:f0:
76:4e:91:f7:fb:b8:81:ef:f1:ba:f7:7c:c9:f3:a1:09:84:a3:
e8:90:59:bd:26:b0:16:93:d8:e8:db:5d:6c:62:b8:bf:84:cf:
de:4a:66:ab:f5:bc:96:93:0e:f8:39:53:0f:2e:c0:71:d9:9d:
e0:c3:68:c6:58:6d:54:e2:26:1a:c5:1e:d3:aa:bf:2b:bc:fa:
cc:89:4d:09:54:a5:dc:bd:d2:78:71:05:14:4f:14:ef:c6:b0:
80:71:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org