Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/tFpUGsaj5ShqaprZKT7QiQ6QDzI.roa
File: tFpUGsaj5ShqaprZKT7QiQ6QDzI.roa (raw, json)
Hash identifier: J/jZmPysdJTsPnTn8hy6s6WL+OPS8A1nciejVYQvqEA=
Subject key identifier: B4:5A:54:1A:C6:A3:E5:28:6A:6A:9A:D9:29:3E:D0:89:0E:90:0F:32
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01929A58DA8690A65C7415958D78288D487E
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/tFpUGsaj5ShqaprZKT7QiQ6QDzI.roa
Signing time: Thu 17 Oct 2024 11:59:27 +0000
ROA not before: Thu 17 Oct 2024 11:59:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.131.0/24 maxlen: 24
188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 20:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:58:da:86:90:a6:5c:74:15:95:8d:78:28:8d:48:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 17 11:59:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b45a541ac6a3e5286a6a9ad9293ed0890e900f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:dc:3a:d8:1a:0f:78:c1:ab:19:f7:72:f0:
27:99:e4:18:66:a4:c5:71:8a:7d:96:eb:06:4d:8c:
2b:2c:c5:75:c5:d1:ee:cc:3d:50:5d:b4:93:59:a8:
ee:eb:4e:7e:db:ec:7a:f0:3d:3e:80:a3:60:28:66:
14:48:63:c3:be:cf:3f:24:3e:66:fc:d4:32:4f:39:
25:1f:50:11:28:0a:19:1c:9f:9d:43:04:18:c6:c5:
ce:20:6b:fe:8b:ce:b9:b4:fc:8f:2c:89:35:c9:aa:
1c:e3:4a:2c:bb:21:7f:36:7b:05:8e:bd:44:ca:6d:
a6:24:4e:22:6e:65:82:49:68:7b:14:28:7f:96:7d:
95:d6:c9:ee:4f:ac:93:b1:91:45:d2:51:27:5c:a0:
d2:b5:47:68:4b:dd:29:ee:7a:94:01:53:26:74:b4:
04:7e:66:a3:1d:8a:e0:21:ba:69:89:84:16:cc:03:
25:63:52:f8:3a:f6:a6:69:5d:9e:5b:e9:1f:34:1b:
86:6c:9a:0f:0f:16:79:35:e4:6f:58:9f:ee:f3:89:
2b:7a:4f:08:5f:ce:2e:24:91:d0:b0:0b:36:e3:34:
7f:77:f3:6c:c5:0f:7f:be:72:41:52:37:6e:a4:3b:
fa:06:3b:20:be:e5:72:79:a4:9b:20:83:8d:ad:d9:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5A:54:1A:C6:A3:E5:28:6A:6A:9A:D9:29:3E:D0:89:0E:90:0F:32
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/tFpUGsaj5ShqaprZKT7QiQ6QDzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.131.0-188.209.135.255
Signature Algorithm: sha256WithRSAEncryption
5a:97:18:f5:0e:f6:37:24:cc:ef:ac:02:d6:c7:86:b5:21:8f:
db:da:39:b1:ff:ee:0e:71:21:7c:01:be:09:9a:ed:c6:22:b7:
bf:2e:e6:44:f5:c5:9a:e2:2d:bf:3e:a8:84:c6:92:dd:4b:31:
da:2a:9f:4e:60:a5:25:e9:97:2a:05:e2:fe:16:d1:39:81:4e:
aa:54:fd:69:38:34:6c:cf:32:6c:b0:64:cc:a4:6e:c5:7e:48:
45:ec:f2:9c:b2:07:92:bf:89:a5:9b:76:e5:73:bd:6c:ac:fe:
40:ff:f2:8b:bd:90:86:b5:8a:57:ed:d6:3f:fa:a8:71:81:45:
e4:6a:4a:25:df:0b:b2:c5:b5:62:e7:47:5b:d0:e2:7b:a5:13:
3c:af:c0:51:98:f0:5c:47:1f:59:5e:55:4d:42:aa:86:af:05:
48:6c:c7:0c:d7:45:6a:5f:f2:99:2c:6c:25:9d:64:11:5e:8c:
7d:ec:b4:03:f5:97:a4:04:c6:92:77:cf:44:97:b4:4a:ce:95:
41:d2:1b:02:50:dc:9a:f8:53:19:2f:f3:e0:1a:6d:ea:93:ef:
c8:3f:9b:6e:e7:2e:2f:f8:a6:49:e8:5e:35:1c:3f:9a:b3:76:
9d:37:df:dd:7f:79:2d:9b:c0:29:bb:9c:cc:68:32:74:96:0d:
e8:3a:06:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 23:01:49 2024 by rpki-client on console-fra.rpki-client.org