Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/_gf0glepOm_Cn4dOzo9WNiHMVmU.roa
File: _gf0glepOm_Cn4dOzo9WNiHMVmU.roa (raw, json)
Hash identifier: u7j1tFRHZUAyeucYypfZzqCIebKAouxw745/cRIhMT0=
Subject key identifier: FE:07:F4:82:57:A9:3A:6F:C2:9F:87:4E:CE:8F:56:36:21:CC:56:65
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01856ED4B934230EC6FE4E3E231B499FDA35
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/_gf0glepOm_Cn4dOzo9WNiHMVmU.roa
Signing time: Sun 01 Jan 2023 19:35:12 +0000
ROA not before: Sun 01 Jan 2023 19:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 188.209.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:b9:34:23:0e:c6:fe:4e:3e:23:1b:49:9f:da:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 19:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe07f48257a93a6fc29f874ece8f563621cc5665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:7b:b5:23:1f:79:2e:fc:e0:7f:e0:8d:00:
f4:f6:37:47:ab:d8:e8:dd:5c:a5:5a:b7:be:46:92:
0f:f6:54:e4:6d:57:fd:10:b8:9b:18:a8:3c:0c:8a:
1a:1f:72:93:17:67:1c:ba:47:26:67:94:d1:ec:23:
bd:b7:53:b2:5e:b6:f2:28:9c:23:67:bf:70:db:61:
1a:44:07:3f:18:50:dc:b5:b6:7d:70:10:0b:f0:f4:
7c:bd:de:9d:72:76:7f:0d:b9:7c:a4:ba:51:d0:ae:
12:17:97:2f:09:7e:6d:5a:78:0e:14:ac:77:52:a9:
2c:84:da:62:f4:5c:ed:03:8b:fb:dc:53:0c:3e:1c:
ee:62:54:49:9b:3d:2d:be:63:82:c6:4b:42:18:c1:
1d:1b:91:c0:1a:2b:d4:cb:e9:90:09:e4:64:96:c8:
c1:6a:9b:64:f1:40:1d:65:55:df:b2:92:19:b3:0b:
4e:81:e2:26:61:bc:72:4b:f3:8d:73:b8:42:af:dc:
ed:3c:b3:86:83:a2:fa:a6:2b:41:3b:14:ea:e9:5d:
eb:e7:82:a4:75:a4:1c:a6:ac:f2:3f:5e:45:9a:3d:
e4:17:6f:5e:4f:db:75:1a:e7:7a:ea:27:5f:ac:da:
78:e5:1e:21:c2:ee:c6:9c:9a:31:8b:eb:35:81:4b:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:F4:82:57:A9:3A:6F:C2:9F:87:4E:CE:8F:56:36:21:CC:56:65
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/_gf0glepOm_Cn4dOzo9WNiHMVmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.136.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:05:cc:05:e1:94:0e:42:36:be:72:d8:6a:cc:5e:6e:05:4b:
f8:9b:ac:ea:3c:d8:d6:c3:fe:55:99:f3:51:45:2b:31:08:b0:
13:86:5f:25:8f:d4:62:35:6b:bd:85:53:83:62:e0:a2:ce:52:
de:26:8a:e2:24:cf:bb:b0:df:b3:d7:f2:7a:59:46:8a:4e:69:
6b:ae:f3:49:2b:c6:96:a1:b9:f5:26:dd:0e:df:f3:3f:15:98:
8b:7a:bc:86:0a:de:ad:37:00:1e:6b:c3:0c:6f:86:63:1c:72:
cb:c8:54:51:53:43:b9:00:78:c2:a0:b1:34:ad:07:ae:94:cd:
7c:5e:40:aa:2f:d1:f1:2a:48:f9:26:4b:2e:4c:83:d4:ba:b9:
10:e7:23:8d:d1:7b:80:9d:41:fd:f4:4e:8c:f4:2f:57:52:22:
74:3a:e6:79:b0:2e:d1:bb:1e:0e:6f:95:77:28:24:aa:40:f8:
6b:7a:a7:2f:79:5c:8d:60:6c:3f:ee:84:18:69:31:64:9b:ff:
db:03:41:75:4a:d4:d5:17:e6:41:e6:e2:32:21:e5:a3:99:2c:
19:67:d8:2c:16:fd:fc:70:05:18:91:d0:01:a8:62:02:d8:7a:
25:a5:3c:3e:81:27:1e:a2:00:f9:50:62:55:75:1c:f7:29:45:
bf:33:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org