Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mWXxTUw5BDNlS9I8FOT8ggTFg38.roa
File: mWXxTUw5BDNlS9I8FOT8ggTFg38.roa (raw, json)
Hash identifier: xA3ozIJIAry+Vzj08u/5pa94Jq4CRop7Ydi8IRN3qv8=
Subject key identifier: 99:65:F1:4D:4C:39:04:33:65:4B:D2:3C:14:E4:FC:82:04:C5:83:7F
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB31D24B3186A5EDA5B54F369C9443
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mWXxTUw5BDNlS9I8FOT8ggTFg38.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:31:d2:4b:31:86:a5:ed:a5:b5:4f:36:9c:94:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9965f14d4c390433654bd23c14e4fc8204c5837f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:8a:c1:2c:5b:8a:44:44:02:62:67:c4:f7:
e6:b8:4e:a2:e1:f2:b0:fd:3c:db:3b:8e:c9:a3:bf:
7a:78:0b:de:6b:38:50:2f:28:69:ea:da:69:db:05:
ec:8a:3c:db:8e:cc:f3:46:c7:c0:2c:ab:23:91:9c:
24:8a:b6:4d:f7:67:ce:42:5d:87:2e:5d:21:af:da:
72:01:19:e8:a4:86:5d:f5:f5:bc:de:6d:f9:a3:d0:
65:96:cc:f4:46:9c:85:b7:de:21:8e:78:12:26:16:
cd:aa:8c:42:fb:29:aa:29:ed:21:e9:bf:b6:cd:69:
a8:43:16:3b:61:e9:9d:2e:28:e3:0e:c9:ca:6f:d8:
fe:9b:ee:3b:20:77:1e:11:b6:70:58:b7:f8:56:c9:
66:ad:a9:66:61:d6:01:12:73:83:7f:00:9b:b7:6d:
84:a7:0a:df:4e:b4:c5:01:87:16:54:87:fc:66:1a:
1c:bf:09:6b:cc:75:3b:4c:ec:d4:1b:7b:16:47:b7:
29:ec:a9:1e:f6:83:bc:27:7e:28:d6:ae:27:cf:a4:
a7:28:53:4d:84:dc:fb:17:92:4e:84:e5:ae:bf:a3:
5b:12:3d:91:03:8c:24:50:65:18:eb:13:df:c0:4d:
4b:87:23:f5:7c:85:8f:87:84:86:20:a5:bf:a4:bb:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:65:F1:4D:4C:39:04:33:65:4B:D2:3C:14:E4:FC:82:04:C5:83:7F
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/mWXxTUw5BDNlS9I8FOT8ggTFg38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
03:5c:5a:d4:44:ce:49:c3:5d:54:04:a9:b9:22:f3:be:e4:0f:
df:68:b5:b6:5c:f5:f4:7d:a1:06:6b:fa:1f:93:fe:5a:f4:17:
42:35:c5:c5:11:23:8b:0d:79:5e:30:6a:f2:cc:f6:43:53:18:
be:f4:2e:ef:62:41:d7:23:15:af:ff:23:7c:13:6e:31:05:e9:
50:ce:1b:12:d2:80:52:6c:80:23:96:33:e0:03:28:32:00:a9:
20:0f:0c:f3:12:e6:bd:eb:01:bf:e8:6b:66:92:cd:87:bd:8d:
07:cd:e8:ec:6c:cb:98:af:3b:ba:48:15:0b:ee:ce:fa:56:a5:
0c:7b:c2:b6:9c:17:3d:99:68:07:37:cd:f3:cb:a5:3b:c3:f9:
e8:dd:ec:01:2a:4a:81:48:13:02:6b:ee:49:41:66:df:95:3e:
66:cd:d2:16:56:31:7c:ac:45:5a:ca:6c:4d:93:17:9c:0f:95:
a2:4c:c3:7c:59:38:c0:31:e5:5c:71:ed:0a:67:da:98:a0:d1:
68:a4:70:2e:84:64:b0:29:14:6d:81:d5:ec:f0:ef:36:bf:be:
11:fc:ab:24:f7:33:0c:5b:14:29:92:bd:0c:fc:6d:55:2c:a5:
57:31:42:ab:b7:62:bc:ec:a1:4a:4f:7b:ea:1d:e7:61:53:55:
52:b9:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 01:50:52 2024 by rpki-client on console-fra.rpki-client.org