Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rrnxtzsZlx59AB5lL4LDsIz8v1s.roa
File: rrnxtzsZlx59AB5lL4LDsIz8v1s.roa (raw, json)
Hash identifier: qFmc/Y1F/qjN86Q8n8iT0fIBxf6oDY4Vd1/J5BrEm5I=
Subject key identifier: AE:B9:F1:B7:3B:19:97:1E:7D:00:1E:65:2F:82:C3:B0:8C:FC:BF:5B
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CCBFC99B3D835536DBF0557AD2B70F275
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rrnxtzsZlx59AB5lL4LDsIz8v1s.roa
Signing time: Tue 02 Jan 2024 21:02:58 +0000
ROA not before: Tue 02 Jan 2024 21:02:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
188.209.136.0/22 maxlen: 24
188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:fc:99:b3:d8:35:53:6d:bf:05:57:ad:2b:70:f2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 21:02:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeb9f1b73b19971e7d001e652f82c3b08cfcbf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:23:58:1e:70:60:b1:71:64:17:2c:d8:1d:
62:4b:94:3d:aa:06:5a:1d:f3:c5:6e:b2:5a:10:3d:
34:30:dc:94:60:61:bc:cc:12:56:e9:43:79:7b:cc:
48:34:e9:3a:4d:89:59:a5:d6:99:1a:c8:a9:42:f0:
cf:5b:8a:93:3f:8d:36:e7:c6:7b:12:2e:cc:56:2d:
f5:c4:af:be:89:0b:5c:a1:28:0b:8e:ac:3a:16:9b:
6e:f7:ae:46:9a:bd:38:b1:6f:54:a3:31:db:44:6c:
f4:41:fd:5e:55:fc:75:7d:3d:88:23:b8:50:66:96:
b4:78:3e:83:4a:49:96:36:c2:01:ed:21:a0:67:91:
dc:5e:c4:68:e4:ae:ca:37:36:49:87:27:87:4c:b6:
93:5f:cf:4f:7c:14:86:95:ab:2c:f0:6a:a8:b5:27:
0c:b6:7e:40:23:7c:51:db:0f:5d:d1:b0:71:1a:4b:
83:24:7a:12:b9:2e:e9:d4:bc:24:62:2e:95:2f:28:
24:e9:27:f5:70:e9:ed:4b:c9:60:e7:ab:25:c0:4b:
b8:ce:b9:7b:01:6d:07:be:19:08:39:4e:dd:85:80:
c7:fe:d7:84:9a:10:23:5b:5f:51:a1:64:01:9a:b5:
14:b5:df:b6:90:3f:42:d1:22:9e:aa:cd:8f:8e:2f:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:F1:B7:3B:19:97:1E:7D:00:1E:65:2F:82:C3:B0:8C:FC:BF:5B
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rrnxtzsZlx59AB5lL4LDsIz8v1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0-188.209.143.255
Signature Algorithm: sha256WithRSAEncryption
7f:34:8c:25:78:e7:af:5f:af:85:eb:09:bd:13:20:be:e0:9a:
3f:6e:b9:1b:20:6e:f8:db:6d:66:83:22:c8:19:f3:72:51:99:
a6:44:80:69:b6:3c:a1:e8:fb:00:40:22:fe:14:ea:63:6d:7c:
f5:84:a7:71:80:05:b9:0d:fa:af:51:5f:f9:a5:fb:74:3e:82:
f4:ec:c6:39:51:35:dd:71:30:40:c7:35:4d:ea:e0:c9:a2:8c:
02:c9:a2:bc:1e:9d:97:82:69:c3:5e:43:0b:9c:04:6e:b3:13:
41:50:0d:fc:86:ca:a0:12:47:a2:4c:4c:05:32:af:0f:a9:14:
a1:6d:fb:01:6f:1f:15:99:22:c0:a9:11:7f:b2:81:d2:3c:83:
69:93:7f:03:3f:1c:38:58:96:b8:91:73:9d:45:5e:7d:7d:6e:
32:df:90:d2:82:9a:92:b1:e8:51:fe:7a:57:6c:2e:83:4e:a6:
74:bb:4a:91:c2:12:f6:6c:70:86:87:e1:40:4d:b9:ec:70:2f:
64:ce:ff:0d:75:6a:b3:1a:f9:42:ef:bd:22:92:e5:f4:db:89:
b3:1d:7e:e2:46:c3:e6:07:d1:7c:5d:22:a5:ba:2d:e6:34:8d:
96:9f:c6:16:e3:00:43:80:94:d5:30:41:de:c7:73:f5:33:ef:
42:38:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 06:56:19 2024 by rpki-client on console-fra.rpki-client.org