Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wAW2eJdyrW_by5zTcCahshhBJ9s.roa
File: wAW2eJdyrW_by5zTcCahshhBJ9s.roa (raw, json)
Hash identifier: xGdqfrzGp0fXAPa98fhnbMYL6vuMdsFXCHkbMNl76Rs=
Subject key identifier: C0:05:B6:78:97:72:AD:6F:DB:CB:9C:D3:70:26:A1:B2:18:41:27:DB
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018DFB79EDECB99F1BC947BFFD095618A149
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wAW2eJdyrW_by5zTcCahshhBJ9s.roa
Signing time: Fri 01 Mar 2024 19:24:48 +0000
ROA not before: Fri 01 Mar 2024 19:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 188.209.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 07:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:79:ed:ec:b9:9f:1b:c9:47:bf:fd:09:56:18:a1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Mar 1 19:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c005b6789772ad6fdbcb9cd37026a1b2184127db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:9d:e4:01:62:8f:ef:e5:0d:a6:2f:41:60:
a8:15:e8:17:ee:8c:7b:04:31:e6:9f:31:75:d1:75:
a1:25:57:76:03:d7:a5:06:76:46:49:c6:93:34:50:
16:5d:41:9d:1c:52:6d:26:24:ee:65:67:13:a3:b5:
aa:86:cd:55:62:f4:c1:74:ac:76:51:c6:e6:8c:99:
00:22:a7:84:2f:e5:02:04:0a:98:22:ea:63:04:04:
73:09:0d:47:3f:c4:71:b6:8f:94:41:59:07:a7:a2:
45:a7:c1:72:7f:51:f0:5e:03:49:e3:80:ba:c4:80:
75:7c:3e:f0:27:20:ef:d0:ee:48:d2:f4:4d:dc:31:
f1:76:a6:bd:47:3e:13:c7:ce:68:0c:2a:c8:a9:8a:
01:09:9b:f3:19:3e:af:9f:ca:f6:32:60:b2:39:44:
7e:a9:45:0a:05:51:d6:a4:e2:d8:7f:c3:69:70:c8:
40:bd:b6:d5:f6:15:24:c3:ea:c6:a6:30:e8:05:2b:
c0:ef:7b:b2:f8:af:c7:49:f5:d3:7a:02:6b:c9:55:
ee:dd:f5:3d:bd:78:60:7f:5d:81:a8:fa:37:42:da:
dc:79:09:e4:0b:bd:1e:52:ff:60:14:42:da:ee:93:
a7:f4:f7:30:69:97:0a:e2:a9:eb:2a:ee:8e:1e:d3:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:B6:78:97:72:AD:6F:DB:CB:9C:D3:70:26:A1:B2:18:41:27:DB
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wAW2eJdyrW_by5zTcCahshhBJ9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.136.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:63:cc:3d:96:c2:7d:f1:7d:d9:66:5e:da:bd:4c:9b:f4:0a:
db:f3:49:01:5d:ce:71:89:bd:b6:6a:7f:a4:00:48:f9:16:d0:
9f:45:0d:bc:fa:6f:f8:8e:89:37:3a:06:e6:77:25:e4:73:d7:
82:36:d7:3d:c6:55:62:fa:27:0b:63:7f:b4:82:5e:0d:62:a3:
0c:27:9e:ab:3d:4a:22:79:b2:5d:89:fe:c3:47:66:ae:23:68:
77:f7:93:04:82:a1:36:08:5e:ef:fe:ee:2d:b8:f7:9d:b3:43:
7a:29:6c:c7:e0:48:c3:a9:7a:75:5a:72:56:e0:ea:cd:94:7f:
78:e2:2b:eb:af:02:6f:d8:0f:47:c0:7b:b1:cf:8c:0c:39:99:
26:b5:7e:c5:2b:9e:2d:08:53:92:5b:1b:7c:b3:15:56:2b:d0:
c0:16:83:53:c8:30:bc:1e:5e:4d:9f:16:e4:d0:6f:39:9b:55:
9a:79:fc:88:dd:02:7a:42:d6:77:fb:84:91:1f:0c:47:a2:56:
98:b5:19:fa:17:a9:56:55:c7:19:bd:49:44:17:72:69:73:fa:
62:ee:01:a3:42:c5:ec:77:06:53:5a:8e:57:f3:ae:33:6a:56:
b6:c3:28:87:7c:2b:3f:c5:76:a2:35:21:da:3f:58:40:f8:d6:
d9:5b:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:53:10 2024 by rpki-client on console-fra.rpki-client.org