Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/nYfJUSoK9hNa23UeBMQor2C-6h0.roa
File: nYfJUSoK9hNa23UeBMQor2C-6h0.roa (raw, json)
Hash identifier: z1fM/YRpMjI/yUaIdpvWTJS94Ac8f4kLvOZKfx5hLDU=
Subject key identifier: 9D:87:C9:51:2A:0A:F6:13:5A:DB:75:1E:04:C4:28:AF:60:BE:EA:1D
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018B7394E94B769E88FD22C8D4651E4D4582
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/nYfJUSoK9hNa23UeBMQor2C-6h0.roa
Signing time: Sat 28 Oct 2023 00:00:20 +0000
ROA not before: Sat 28 Oct 2023 00:00:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204834
IP address blocks: 188.209.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:73:94:e9:4b:76:9e:88:fd:22:c8:d4:65:1e:4d:45:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 28 00:00:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d87c9512a0af6135adb751e04c428af60beea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:0d:7f:12:dc:cc:9a:54:ce:fa:01:16:87:
37:19:35:c7:26:59:bd:ae:4e:f7:b7:6f:1f:c7:e9:
03:61:db:92:88:56:1f:52:49:fd:33:2c:cc:cf:4e:
f9:bf:98:19:09:5f:36:a7:03:43:9b:d6:99:7c:dc:
8c:20:f5:49:30:6d:cd:d5:e9:8c:83:59:97:28:ac:
9b:f6:cd:68:49:bc:18:37:00:11:59:56:7f:23:7a:
f2:cd:0a:6e:0e:cc:c8:e4:71:68:f5:5a:42:1a:56:
a3:39:f2:a4:2f:83:a7:80:fc:32:55:80:62:df:c0:
ea:ac:9e:d5:8a:02:3c:a4:9c:ec:af:ed:79:e9:5b:
bb:28:bb:ed:3e:ff:9f:56:ba:db:10:70:ba:e2:57:
cc:52:66:50:a8:e6:d3:7f:ad:86:fd:6b:2e:11:62:
c6:bf:0d:34:b7:30:46:bf:7f:c0:1b:1e:27:b6:82:
2d:cf:28:da:03:57:42:ff:95:0b:e1:19:40:9d:a8:
30:a5:88:05:ad:1a:f3:ce:81:8c:d6:f5:5e:1e:f8:
af:a1:56:9b:9e:b0:d2:f0:da:7b:14:e2:fc:f7:67:
75:1d:75:01:af:a1:73:13:19:b5:86:7a:2e:6d:40:
96:86:43:b6:08:95:f0:e7:fe:aa:6d:7d:56:a8:a0:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:C9:51:2A:0A:F6:13:5A:DB:75:1E:04:C4:28:AF:60:BE:EA:1D
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/nYfJUSoK9hNa23UeBMQor2C-6h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:57:1c:8f:82:7f:98:27:98:c1:00:73:71:80:ca:64:90:21:
7a:6e:f1:a3:7c:5f:4a:99:18:94:04:3a:35:dd:26:3b:8b:4c:
ca:54:78:8d:d3:9f:4a:73:a7:c8:a0:f3:53:56:cc:3e:b9:d3:
98:98:88:03:21:c9:b6:da:31:f6:83:eb:58:94:9b:34:8e:49:
da:99:c9:00:d9:9b:66:eb:13:14:78:cf:e2:8b:3f:03:ac:6a:
8d:ac:e0:06:9f:8e:75:4f:51:59:7e:9c:67:84:5e:59:59:57:
85:fc:57:a2:22:bb:a5:fc:a8:3a:a3:fc:b4:51:22:88:a9:12:
f8:92:61:22:d7:75:0a:78:b4:53:2f:43:83:8f:a4:14:47:cb:
e2:cd:71:09:b9:72:75:6a:96:95:0d:26:62:f9:43:65:75:a6:
7d:36:53:d4:d4:86:23:f0:39:70:11:54:16:78:7f:f0:89:1d:
8e:18:db:80:e4:08:05:ec:74:54:67:78:a3:b4:63:79:ca:48:
ca:b2:10:58:5d:f5:6d:8e:71:df:9d:bf:d1:6f:f8:ff:32:b9:
53:86:e5:57:50:3b:6e:c1:02:43:99:93:9f:44:3a:12:60:50:
fe:ba:75:68:96:99:7d:c8:e5:e6:52:7a:40:55:fb:81:09:6b:
d0:b7:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:08 2024 by rpki-client on console-ams.rpki-client.org