Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/xMcHDUuz4_15zWH0Wxu7VOD3GJo.roa
File: xMcHDUuz4_15zWH0Wxu7VOD3GJo.roa (raw, json)
Hash identifier: oJge/hijH+OJjINptHsS7zP93sVUgH+6uxSLXLUyEu8=
Subject key identifier: C4:C7:07:0D:4B:B3:E3:FD:79:CD:61:F4:5B:1B:BB:54:E0:F7:18:9A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018DF00AFC7D9AA3ED01EF78217FECD2BC25
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/xMcHDUuz4_15zWH0Wxu7VOD3GJo.roa
Signing time: Wed 28 Feb 2024 14:07:48 +0000
ROA not before: Wed 28 Feb 2024 14:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 188.209.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 03:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:0a:fc:7d:9a:a3:ed:01:ef:78:21:7f:ec:d2:bc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Feb 28 14:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4c7070d4bb3e3fd79cd61f45b1bbb54e0f7189a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:9b:cb:c5:e7:e0:b8:0c:97:99:5b:b7:4f:
12:ca:7b:8a:6b:90:71:65:62:95:05:65:d7:48:29:
e8:97:61:44:b4:7f:84:f2:80:ce:6b:3b:db:2b:d6:
a8:67:08:c0:59:be:81:7a:5d:81:ce:51:da:21:6d:
15:1e:58:97:70:3b:f0:e3:c6:cd:d4:1a:f5:b2:23:
5b:9f:f7:5f:af:3e:18:62:f6:f0:90:47:90:df:83:
42:d0:6c:69:f5:f9:64:9c:a0:10:78:e4:8c:b2:70:
bd:28:d4:0e:d7:36:c0:4b:0c:81:8d:37:82:eb:7f:
fb:4c:9c:8f:1c:0b:de:86:03:f9:c7:59:60:7a:b5:
ba:9d:b5:db:c8:f3:11:fb:99:4c:c2:3c:a9:db:63:
ec:15:d5:bd:df:82:0c:aa:16:6b:77:a9:12:2c:7f:
15:fa:e6:8e:b6:96:37:52:b8:cd:07:4f:a5:9e:6a:
84:52:fa:69:a5:37:42:7e:28:b0:17:34:19:0d:da:
7c:7a:bc:33:fb:43:01:2f:63:07:13:e7:ae:65:0c:
68:28:3f:a4:d7:73:e1:f2:46:6c:7d:25:ac:c2:c3:
87:11:d9:1c:74:5b:f0:82:92:b5:15:54:de:43:25:
6b:28:0d:23:75:ed:24:fc:fe:3f:78:c7:15:e8:e2:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C7:07:0D:4B:B3:E3:FD:79:CD:61:F4:5B:1B:BB:54:E0:F7:18:9A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/xMcHDUuz4_15zWH0Wxu7VOD3GJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.133.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d8:b4:98:fa:60:0f:8d:55:41:d2:e7:5a:18:1c:4d:43:cc:
9a:2a:65:a8:4e:de:bd:ca:b0:f9:a7:25:9c:b1:93:f6:da:a3:
02:f7:7b:7b:85:c5:90:d7:b5:c2:6a:11:e3:86:e1:34:d7:29:
db:06:82:33:a1:03:98:26:9a:f3:5a:1a:fc:c4:ed:1e:63:10:
70:42:40:17:41:fb:78:8c:98:ab:a1:d7:b8:3f:5b:63:8a:c4:
a1:eb:f6:89:2d:0a:b2:92:db:14:d8:d8:a3:2d:8a:cd:e0:07:
23:62:78:33:51:b3:6a:9e:1c:02:5d:37:68:cd:50:43:39:36:
0b:a4:df:c2:f1:da:9b:85:87:60:1b:06:a1:27:6e:0e:6b:39:
51:d1:72:b0:56:ce:8c:5b:0b:ef:a2:36:8d:07:f5:ac:63:8e:
6c:21:26:3f:d2:58:ce:e7:a0:7c:8f:78:cd:f0:25:44:1b:8b:
ad:12:14:3a:bc:c3:f3:83:a7:eb:b8:4e:c9:68:06:bc:78:96:
fc:b0:7d:ce:24:b3:e0:a4:9d:8c:c9:11:57:a1:ea:78:a1:c4:
5d:89:13:e6:62:10:24:57:37:4a:28:a5:d0:70:ee:91:92:ef:
30:1c:e0:df:4c:da:40:72:ab:ec:a3:b6:31:9b:61:a5:39:8b:
52:71:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 04:23:29 2024 by rpki-client on console-fra.rpki-client.org