Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/eoRtf6Ad35l_ZTKrIba2jzFXFfc.roa
File: eoRtf6Ad35l_ZTKrIba2jzFXFfc.roa (raw, json)
Hash identifier: HA25qkcDvNmK01HJTsXA2JxbFVXj0z5uaCFXJ+BDaS0=
Subject key identifier: 7A:84:6D:7F:A0:1D:DF:99:7F:65:32:AB:21:B6:B6:8F:31:57:15:F7
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0191B9912452313A017D99F73D6C777F1890
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/eoRtf6Ad35l_ZTKrIba2jzFXFfc.roa
Signing time: Tue 03 Sep 2024 20:26:22 +0000
ROA not before: Tue 03 Sep 2024 20:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.131.0/24 maxlen: 24
188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 19:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b9:91:24:52:31:3a:01:7d:99:f7:3d:6c:77:7f:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Sep 3 20:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a846d7fa01ddf997f6532ab21b6b68f315715f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:15:58:de:de:53:12:a9:6b:1c:8a:d9:bc:
3f:47:bc:76:f6:a7:0c:77:2d:a4:3b:c5:d0:a7:67:
f9:4a:ea:9c:dc:d2:83:37:9d:6a:7e:99:83:ae:36:
cf:e9:bc:0b:55:52:43:ff:eb:4b:fb:26:aa:a1:70:
1e:00:e7:11:e1:53:7c:57:45:1d:b2:5e:2e:19:96:
15:13:af:49:92:73:fe:01:19:3f:20:ca:86:84:0a:
cb:62:61:26:ee:ef:38:7d:61:9a:28:51:0d:f8:c8:
8f:e6:c3:c9:53:be:f3:bb:4f:3d:f8:6c:f8:db:3c:
29:2d:11:83:12:33:78:e5:eb:90:e7:d9:ed:f8:01:
b2:cc:5f:5b:79:97:25:c1:73:1e:d5:68:eb:4b:da:
87:ce:cf:6f:d6:dc:e5:d7:a6:3d:43:55:72:ca:f1:
17:d7:16:92:20:5b:7b:5d:b6:fb:54:3b:99:2c:5b:
13:57:64:67:d0:04:23:94:f1:39:c9:6a:bf:1a:3f:
9a:7e:89:95:ba:48:ae:51:ed:1b:7a:47:38:cc:47:
d7:87:8f:ed:73:a7:10:7c:22:72:1f:44:0b:58:05:
ea:66:65:a5:b7:58:ef:e3:ce:bf:c9:3a:df:4e:ae:
24:d7:1b:4e:fd:9e:13:43:90:04:59:f7:18:d4:fd:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:84:6D:7F:A0:1D:DF:99:7F:65:32:AB:21:B6:B6:8F:31:57:15:F7
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/eoRtf6Ad35l_ZTKrIba2jzFXFfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.131.0-188.209.135.255
Signature Algorithm: sha256WithRSAEncryption
4c:f4:3f:98:6a:b4:3e:0f:59:09:b2:52:36:8b:a8:7b:7c:bb:
21:c9:7d:90:20:63:17:10:8d:dc:3b:b7:50:e4:a3:c2:5e:f3:
51:41:d9:01:00:71:c5:ff:9d:1a:f6:dc:31:65:f0:37:1d:6c:
1f:34:29:29:f2:ea:7f:20:50:fa:88:28:a6:3c:6d:cd:75:6a:
22:92:f3:83:93:70:41:01:52:c6:73:4e:b5:9a:fc:19:77:10:
a2:da:8e:63:13:06:df:82:55:54:dd:c6:04:3a:6d:b5:5b:ec:
74:8f:f8:36:e1:d8:b5:00:ec:c8:dc:5a:ce:1c:74:0a:3c:b4:
61:fc:d5:69:be:d3:99:07:71:26:2f:9b:dd:09:8f:0e:d0:a9:
1f:04:1c:c4:42:16:2c:77:2d:ab:29:e2:04:e8:9f:9c:91:6e:
55:de:31:d9:33:78:51:4a:96:3a:06:77:90:d5:bb:a5:15:c0:
75:68:ca:83:0a:f2:6c:a6:99:ab:66:d1:d5:ac:05:ea:0f:c8:
75:27:69:d4:37:e3:63:06:94:7d:98:9b:46:58:1c:e8:e2:30:
ba:7c:95:00:e9:3a:95:09:7a:9c:d2:c5:9b:52:43:0d:07:2a:
40:2c:c3:22:cf:e2:19:06:92:d1:89:f5:b0:08:b7:ef:fd:5b:
78:6d:12:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 23:58:36 2024 by rpki-client on console-ams.rpki-client.org