Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/t0Tjupad6wbkF85WQ2guvpJ8oAQ.roa
File: t0Tjupad6wbkF85WQ2guvpJ8oAQ.roa (raw, json)
Hash identifier: LD83H0BIRPHOMEFY1f1lp5i8EVZtHgnvNrh1Z5GLbTA=
Subject key identifier: B7:44:E3:BA:96:9D:EB:06:E4:17:CE:56:43:68:2E:BE:92:7C:A0:04
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018FEE4820C339983A26057A8E39B8BFA06F
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/t0Tjupad6wbkF85WQ2guvpJ8oAQ.roa
Signing time: Thu 06 Jun 2024 16:00:55 +0000
ROA not before: Thu 06 Jun 2024 16:00:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 384
IP address blocks: 188.209.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 17:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:48:20:c3:39:98:3a:26:05:7a:8e:39:b8:bf:a0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 6 16:00:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b744e3ba969deb06e417ce5643682ebe927ca004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:a4:9a:b4:7e:92:bf:0e:a9:fc:3b:ed:c9:
f5:d9:cc:cb:b3:4c:f6:a6:8b:12:4e:e9:f8:79:eb:
a0:cc:bf:02:9e:8d:34:40:85:f0:24:a9:6f:77:2f:
06:b6:aa:b3:80:cc:8c:cc:24:fb:d5:9c:76:4c:73:
5f:1b:f9:b1:58:c4:ba:4d:13:e0:db:a5:26:21:a3:
fc:bf:c5:85:d3:56:84:5c:f4:c4:79:d8:04:cc:63:
f9:d2:d9:46:9c:ae:6f:24:10:59:82:08:d0:fb:cf:
4a:8a:b0:03:f9:63:68:fd:d8:fc:c8:2d:a4:0f:18:
a7:62:b9:ac:49:47:f3:0b:a8:bf:e9:75:df:06:ce:
fc:6b:6a:9f:4b:52:7a:c3:fb:81:89:b0:1c:2a:5e:
b5:e4:1e:b1:92:f1:75:22:84:bb:74:8f:a6:31:fc:
e1:c0:33:b7:d9:b6:82:8c:0a:dd:bb:b7:e6:68:d6:
76:49:e2:35:b4:9c:b1:04:67:52:a6:1a:ba:3d:dc:
85:f9:cc:16:1e:95:39:57:02:2b:4e:c9:86:2c:16:
04:25:1d:9c:f5:43:99:13:0b:74:78:99:78:d5:85:
c6:bd:4b:a8:86:cd:f5:16:8c:ba:4d:dc:c3:4f:fc:
c1:ae:37:54:80:40:f4:ec:86:05:1a:2c:e4:a3:2a:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:44:E3:BA:96:9D:EB:06:E4:17:CE:56:43:68:2E:BE:92:7C:A0:04
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/t0Tjupad6wbkF85WQ2guvpJ8oAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:6a:63:b6:32:b3:81:bc:64:26:49:ef:5f:c0:c8:6c:37:39:
3f:f4:7f:e1:27:30:6d:d3:b6:37:ac:49:f6:e5:41:9a:30:9f:
f8:38:c1:9f:ba:75:52:4e:55:cc:0b:ef:d7:b5:7f:9e:60:06:
b4:60:01:3c:c2:70:16:fc:f9:c7:0e:a5:8a:0a:9e:f2:36:8a:
15:a3:c4:6b:dd:3d:87:c0:64:61:8b:5b:0f:bd:2d:98:28:fe:
3a:ec:28:1e:c5:c0:b5:d4:a1:c5:4f:0a:30:c1:a7:30:dd:2e:
86:1a:fc:9e:65:d0:e1:cd:c1:e2:e8:0a:d1:55:cb:60:66:a9:
e5:61:85:7b:77:6b:73:4f:3f:48:f7:03:3f:6c:4b:3c:fc:5c:
55:b7:c7:e4:21:e5:ef:bc:63:94:99:b6:29:b9:6c:2f:04:50:
4b:e9:87:74:63:c6:80:06:87:24:4b:3b:a5:93:5a:fd:01:33:
a4:2b:e7:ca:28:47:5b:52:56:76:b2:9a:4e:c7:c1:0d:04:61:
1e:dc:68:87:c4:31:ea:bf:38:76:3e:d0:d3:20:8c:eb:ad:9b:
5e:9f:0d:b7:5f:00:de:c6:23:36:23:55:57:c5:7e:65:41:f4:
a6:c7:10:e5:8b:f5:c2:9a:93:b1:ce:55:21:3e:7e:91:60:27:
0e:3e:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 20:37:16 2024 by rpki-client on console-fra.rpki-client.org