Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pZyqz-n1-6rderGULZqAU_SLO6U.roa
File: pZyqz-n1-6rderGULZqAU_SLO6U.roa (raw, json)
Hash identifier: 5uMF1PvqspkuoOxhzorPX+mB9Wkz9xlxmBXXRhB09jg=
Subject key identifier: A5:9C:AA:CF:E9:F5:FB:AA:DD:7A:B1:94:2D:9A:80:53:F4:8B:3B:A5
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01900326D33ED5550BD92B05C4369EAFB349
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pZyqz-n1-6rderGULZqAU_SLO6U.roa
Signing time: Mon 10 Jun 2024 17:16:34 +0000
ROA not before: Mon 10 Jun 2024 17:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
188.209.136.0/24 maxlen: 24
188.209.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 21:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:03:26:d3:3e:d5:55:0b:d9:2b:05:c4:36:9e:af:b3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 10 17:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a59caacfe9f5fbaadd7ab1942d9a8053f48b3ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:f1:50:e2:bb:a4:cb:95:73:05:41:3a:a7:
57:2e:e7:8e:3d:9b:fa:5a:39:30:a6:fb:7c:3c:63:
6d:87:2a:90:d8:f2:37:c9:7e:34:29:0f:dd:f5:5e:
9d:00:7d:cf:f2:53:9c:c2:27:ab:3d:5c:fd:28:ad:
ae:61:a5:b5:5e:14:52:70:e6:64:be:28:99:96:c5:
5e:c8:bf:8d:3f:85:ed:2c:82:dd:13:db:ba:1e:70:
ff:54:4c:9c:60:09:e3:7a:59:57:30:c7:6c:14:82:
77:c4:a2:62:6c:b2:a0:d8:2f:5a:d8:de:78:c0:a0:
55:79:6d:d6:14:0e:c2:42:e7:6b:77:44:2f:90:18:
8a:ea:06:e4:fb:8d:99:86:13:c7:2a:8f:97:8a:13:
ac:66:fb:08:4d:ed:2e:fc:bc:fc:8f:09:d5:91:aa:
bc:f0:8a:82:16:2c:30:ca:ee:cc:f6:1c:eb:75:ce:
82:e0:6d:a1:f5:1e:7c:81:66:f9:c8:82:c4:e7:d6:
ab:f1:2c:f2:60:a0:4d:96:c1:df:f0:5e:ec:1d:1a:
0e:53:38:a4:81:8a:54:a8:28:5c:5e:e2:04:ea:7d:
2e:0d:b2:84:9e:ed:70:32:a1:57:e9:65:7a:cc:f7:
3e:79:89:b9:d8:d0:e0:9e:43:26:d8:43:00:e1:78:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9C:AA:CF:E9:F5:FB:AA:DD:7A:B1:94:2D:9A:80:53:F4:8B:3B:A5
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pZyqz-n1-6rderGULZqAU_SLO6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0-188.209.137.255
Signature Algorithm: sha256WithRSAEncryption
4c:c7:27:ed:8c:0c:84:4b:2c:d8:3c:fc:56:c3:00:e9:aa:5f:
30:e4:49:cb:c1:62:e6:f5:7a:ec:54:b0:38:e6:55:7e:0a:f2:
a3:e8:19:08:fa:ae:a1:6b:f0:6d:dc:71:78:c7:8b:9a:62:63:
13:2e:53:bb:88:8d:1a:95:de:1a:6d:90:4f:d3:57:fb:5a:5d:
6f:23:19:c5:bf:c2:52:ea:ed:e9:35:18:38:cc:08:cf:b8:5d:
63:58:ce:a5:2b:12:27:47:09:1c:87:e3:70:21:c4:69:fd:9f:
b1:91:72:82:d8:56:ea:d5:ff:c4:58:8a:b4:93:c2:e5:6a:65:
db:50:68:fe:6e:80:d7:f6:44:1c:21:8c:9e:91:9d:bd:52:7b:
6e:58:5b:a4:82:e2:41:90:4b:14:de:c8:ca:02:44:1e:5b:11:
98:5c:76:d4:9b:51:a5:cc:f6:aa:cf:d5:65:2f:19:50:ea:b3:
09:a2:75:90:36:49:33:5f:2b:56:da:4c:17:c4:e8:2c:39:c7:
e9:c4:50:8a:27:6c:20:dc:6d:49:e3:67:db:19:a0:91:a4:e6:
4c:a5:23:8c:d6:9c:eb:c7:04:56:93:c7:12:ae:e5:4e:d2:7c:
26:d6:a4:d1:72:73:17:cc:60:f3:7c:d6:4b:49:c7:59:20:c7:
74:f5:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 22:13:56 2024 by rpki-client on console-fra.rpki-client.org