Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gCzN68JeAESBZxCBrn9l4u5FB3I.roa
File: gCzN68JeAESBZxCBrn9l4u5FB3I.roa (raw, json)
Hash identifier: TzJ4fetyWX5QWd1XSJyqCi0g0Kz+DfG4RS3cG2LlDd8=
Subject key identifier: 80:2C:CD:EB:C2:5E:00:44:81:67:10:81:AE:7F:65:E2:EE:45:07:72
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018F4E8037CCBD0ACDB8EF1498A9354389BD
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gCzN68JeAESBZxCBrn9l4u5FB3I.roa
Signing time: Mon 06 May 2024 15:22:56 +0000
ROA not before: Mon 06 May 2024 15:22:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 07:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:80:37:cc:bd:0a:cd:b8:ef:14:98:a9:35:43:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: May 6 15:22:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=802ccdebc25e004481671081ae7f65e2ee450772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:51:f4:91:33:5d:9f:ab:94:1d:ed:c1:cd:
f0:cd:72:4b:0f:49:91:85:b6:d0:33:5f:11:d1:82:
3b:6f:fc:cf:26:ff:f4:27:33:5c:ce:15:46:81:bb:
e4:76:aa:1c:a2:6e:a7:89:c5:e9:62:52:87:ba:71:
4f:72:2d:10:c6:73:28:3b:ce:e6:c0:fd:db:63:7a:
7b:e4:b6:39:d9:07:2c:d3:aa:5b:04:45:eb:2f:45:
bf:02:96:8a:e1:0e:e6:50:be:6e:ad:17:b9:2c:67:
64:08:b1:99:ee:8c:ba:40:97:da:52:7b:4f:c0:0a:
3d:44:f7:99:c0:cb:48:b7:d7:91:26:b8:67:3c:52:
f1:19:06:e7:58:f4:b0:1a:94:ff:20:5f:42:4d:6c:
05:e7:96:e3:c7:4d:6e:fa:d0:b0:98:a7:0b:15:27:
c9:e9:9d:80:db:f2:bb:91:fd:56:b1:45:f2:21:14:
9c:cd:0d:d4:d9:71:4c:38:48:df:aa:6b:92:b2:b6:
9f:48:4d:4a:8d:4b:ab:a6:3a:42:36:8a:ec:c6:ae:
d8:7d:54:22:f2:d9:99:e9:d5:51:cc:a0:1f:ea:5a:
be:c7:9f:27:30:a7:78:04:83:81:0c:b5:9a:cc:9b:
13:57:e6:a7:5b:62:ba:90:34:32:07:4b:03:37:5f:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2C:CD:EB:C2:5E:00:44:81:67:10:81:AE:7F:65:E2:EE:45:07:72
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gCzN68JeAESBZxCBrn9l4u5FB3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
69:e4:a3:f7:2b:aa:ac:52:6f:62:03:18:51:de:20:7d:b1:eb:
55:ea:41:c5:5e:df:4d:58:ae:9f:ca:5f:8d:db:52:8e:10:18:
ca:3a:17:22:37:4a:08:9c:d5:34:53:31:b9:65:af:4d:66:42:
15:69:ad:f4:19:d4:64:15:9d:e7:39:e7:2c:6d:7a:a4:2f:af:
f4:a6:ee:0f:8f:55:62:34:c2:81:24:42:3f:19:42:5e:95:c7:
f0:7f:ae:cc:ca:ce:35:a1:e5:ca:38:2a:84:a2:e4:ac:c0:f4:
cb:85:1b:1d:60:81:1e:d0:9d:66:6b:00:d9:1d:6a:be:a6:71:
c4:15:fd:4b:ec:87:5d:05:48:d6:bb:e7:e7:62:08:17:45:87:
4d:0b:59:43:2e:8a:a3:13:21:52:2b:4c:c3:0d:42:da:48:c3:
df:78:b6:d8:74:86:f2:39:b9:13:27:cd:1b:7c:db:5a:a6:7f:
29:f9:fd:7a:d6:d7:85:a6:41:d3:bc:fd:37:ca:6f:b7:f8:8e:
32:b1:ac:a3:e3:7b:c7:30:d3:b9:83:8a:8d:ca:2a:24:72:78:
a9:fa:99:25:c8:3b:cc:88:83:5b:87:16:7f:12:81:a1:bf:33:
39:75:ca:41:0b:ca:0b:c3:eb:73:ae:9c:1d:12:c8:9b:29:f8:
d4:94:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org