Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/myjWJphBW_fnyrX1JOzKWxMlS4w.roa
File: myjWJphBW_fnyrX1JOzKWxMlS4w.roa (raw, json)
Hash identifier: YFm5k+t+myX5GRAwEtposOOJVQ8Lm7o0OdLH9zNFOHI=
Subject key identifier: 9B:28:D6:26:98:41:5B:F7:E7:CA:B5:F5:24:EC:CA:5B:13:25:4B:8C
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019246B4D412B37F21A5EE020A2857A1A468
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/myjWJphBW_fnyrX1JOzKWxMlS4w.roa
Signing time: Tue 01 Oct 2024 06:11:48 +0000
ROA not before: Tue 01 Oct 2024 06:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
188.209.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 19:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:46:b4:d4:12:b3:7f:21:a5:ee:02:0a:28:57:a1:a4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 1 06:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b28d62698415bf7e7cab5f524ecca5b13254b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:a3:ac:d6:00:93:5f:29:59:57:a6:90:b0:
e7:b7:e9:89:57:4f:53:ce:d9:31:61:be:f6:03:2d:
8c:95:91:44:fd:60:cc:69:27:97:9d:73:a9:fd:3e:
9c:1d:68:ae:a3:50:9c:51:c6:f1:2b:b8:d6:76:7d:
9a:89:52:af:ae:39:82:35:e7:5c:77:99:c2:5b:f6:
9f:0e:47:68:80:aa:e4:92:2a:a5:c5:cf:c8:f8:09:
cd:07:95:11:a1:6d:d0:44:4c:ba:4b:96:d0:d7:f2:
13:ba:8c:80:1c:c3:36:6d:f3:61:c9:0f:dd:92:ec:
59:b0:d2:20:40:5c:ab:3a:e3:5b:ec:4c:4d:ed:b9:
a3:0c:1a:c5:cf:46:7c:46:cf:d4:d7:f7:ef:ed:06:
b7:a1:58:f8:e7:b5:49:45:50:c6:cc:31:05:a0:6c:
74:ca:cd:9d:70:23:65:93:80:62:fa:4e:5c:04:35:
16:0b:bd:4d:09:c7:d1:3a:59:76:12:20:be:de:03:
23:f8:34:8b:37:5c:13:56:37:bb:98:10:89:30:b1:
01:fc:d9:1c:94:f8:5c:f6:7b:48:ea:07:28:64:5a:
21:49:a8:f6:43:46:5a:48:a3:57:2a:9e:a9:bf:ca:
dd:0e:cc:f0:c4:d6:95:e3:cf:a2:81:4e:08:f4:66:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:28:D6:26:98:41:5B:F7:E7:CA:B5:F5:24:EC:CA:5B:13:25:4B:8C
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/myjWJphBW_fnyrX1JOzKWxMlS4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
87:d0:07:6b:fb:2e:b1:0f:9f:82:e5:32:18:de:27:9f:b9:5b:
d0:f4:66:c9:42:2e:87:36:c5:79:66:bb:ef:5b:c3:48:17:40:
3c:92:a4:21:fc:1b:aa:87:14:37:b9:90:b5:77:5f:45:31:20:
24:2c:65:d0:89:39:0e:e4:ab:da:0b:5f:7e:ee:e1:81:48:b6:
83:00:5e:40:be:bd:ba:ee:cf:9b:24:42:ec:fc:60:dc:c8:67:
17:2c:d7:f8:45:fb:5e:3c:05:7c:c3:cd:4c:9f:b3:a9:63:bf:
fc:3a:e8:5a:98:f0:17:56:43:d1:36:66:31:99:dd:c3:cb:37:
35:df:97:10:43:45:e7:8f:e8:d6:81:4f:e6:f9:0e:0d:55:10:
6c:0b:fd:fe:35:00:fa:39:0c:3f:5c:7b:ac:93:90:8e:4b:96:
b6:06:21:87:ed:70:2d:80:0a:0f:03:08:d6:5f:dc:3a:82:5f:
9a:6e:e7:96:fc:a8:a2:4c:29:40:df:b3:9f:0e:84:22:f1:77:
5c:c4:3d:b8:b0:b9:ed:52:89:1c:05:41:f0:38:2c:4b:df:32:
4b:e7:32:ee:03:95:5a:72:e4:96:6f:35:02:df:16:7b:73:3a:
2e:6d:99:44:67:41:1c:98:66:8a:47:f4:a1:0f:c3:fc:82:9b:
4a:50:d5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 00:11:48 2024 by rpki-client on console-fra.rpki-client.org