Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/cgrJKp41q4h7n0oyI4IpFmyyVhM.roa
File: cgrJKp41q4h7n0oyI4IpFmyyVhM.roa (raw, json)
Hash identifier: 5amA6VymBLBZk+4VmE/dxjRyyvAGo4pq3lbLkLrrmeE=
Subject key identifier: 72:0A:C9:2A:9E:35:AB:88:7B:9F:4A:32:23:82:29:16:6C:B2:56:13
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0187F713D72D9FD5AD861432449C3EF10A04
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/cgrJKp41q4h7n0oyI4IpFmyyVhM.roa
Signing time: Sun 07 May 2023 16:38:05 +0000
ROA not before: Sun 07 May 2023 16:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f7:13:d7:2d:9f:d5:ad:86:14:32:44:9c:3e:f1:0a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: May 7 16:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=720ac92a9e35ab887b9f4a32238229166cb25613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:b1:54:51:a2:42:e7:c7:16:a4:04:70:b4:
83:4b:01:3c:46:70:b7:5e:29:d7:89:bc:7a:8e:6d:
62:8a:9f:35:26:b0:bb:31:04:c9:e1:4c:4a:3e:67:
c2:6e:47:54:3b:17:b1:de:5b:1a:74:c8:3a:13:5e:
fb:7c:ba:d9:81:1f:06:16:4b:46:7f:58:54:16:6a:
4a:1b:b2:0f:49:9c:02:73:f0:60:94:ba:fe:d8:62:
bc:10:eb:57:f9:6b:61:57:00:63:9a:92:28:62:5a:
b1:2e:4a:84:f6:ea:5b:52:69:4e:70:e5:69:12:f9:
87:d7:63:dd:6b:28:55:c0:ed:11:05:91:e0:6c:0f:
ce:36:70:95:2a:fd:f4:f8:7a:bf:23:56:ca:3c:93:
52:25:b7:af:67:8d:68:bc:8c:a5:f6:f2:fc:70:c5:
98:9f:97:41:e6:69:db:cd:0f:a7:9d:fd:28:e7:8b:
47:37:01:eb:65:b5:c9:f3:21:5a:6a:2b:16:7b:85:
40:14:a2:c2:e5:39:33:d4:48:8d:22:07:2e:cb:cf:
56:a8:b9:7e:60:67:c1:b3:57:3d:19:32:8e:3a:07:
12:48:10:92:a9:a7:ad:71:08:db:07:9a:1d:a6:69:
f5:49:cc:e8:7e:a4:ae:fb:e7:1e:bf:88:ad:00:22:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:C9:2A:9E:35:AB:88:7B:9F:4A:32:23:82:29:16:6C:B2:56:13
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/cgrJKp41q4h7n0oyI4IpFmyyVhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
35:33:e6:e5:1b:32:82:f4:73:f4:b6:4a:b3:54:5e:60:9d:83:
67:25:06:c9:b7:48:ac:85:19:55:bb:06:70:3b:63:87:fd:7a:
98:02:f2:e8:56:55:d0:8b:90:dc:32:f7:22:32:99:c6:5e:4d:
79:cd:4b:41:d0:1d:b4:b0:10:0a:f7:b3:d3:f8:20:7b:58:cb:
ef:d0:0c:7f:79:fd:da:7b:e2:d5:6e:0e:30:de:52:e6:55:17:
44:86:9b:71:e0:9b:98:b4:98:e4:40:e4:fc:52:f6:75:dd:78:
2b:a8:b0:70:9f:f8:ae:8e:a9:06:fc:57:4c:1a:0b:ee:98:93:
48:52:8f:56:e4:3b:8e:40:ae:7f:f9:11:cf:10:94:7c:7d:9d:
34:cc:85:9b:9f:4f:44:63:c4:34:08:a0:84:9a:0c:59:df:f4:
a1:80:83:01:d1:17:52:ff:0c:01:f9:df:82:89:54:7a:fe:e1:
c4:a7:32:b4:d3:3a:9f:c3:8e:90:0b:d6:b7:4f:b6:9f:2b:21:
b9:e6:56:a9:86:4e:67:3e:9c:f7:b0:d4:68:10:b3:06:58:b6:
bc:43:c4:78:5e:60:5b:e7:1c:d2:18:dc:98:54:3a:e1:c0:65:
e1:e9:42:0f:f3:df:29:2a:7a:56:99:16:40:6c:19:34:0a:10:
fd:36:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org