Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7N1DH4KVkN0F1pnCdF2skI4Nc1Y.roa
File: 7N1DH4KVkN0F1pnCdF2skI4Nc1Y.roa (raw, json)
Hash identifier: zYC0AyMgvB+L1ODJCfF9eXmcWjW0fVcMgJpVTFE1JRM=
Subject key identifier: EC:DD:43:1F:82:95:90:DD:05:D6:99:C2:74:5D:AC:90:8E:0D:73:56
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018D56650F41209F90FFDF052AF5E01BEB53
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7N1DH4KVkN0F1pnCdF2skI4Nc1Y.roa
Signing time: Mon 29 Jan 2024 18:04:40 +0000
ROA not before: Mon 29 Jan 2024 18:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 188.255.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 10:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:65:0f:41:20:9f:90:ff:df:05:2a:f5:e0:1b:eb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 29 18:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecdd431f829590dd05d699c2745dac908e0d7356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:75:ca:52:5a:c3:b9:3e:73:26:6b:21:fc:
a9:9c:5f:55:3c:e4:ca:13:0d:93:eb:2f:b3:cb:dc:
00:37:64:06:27:3f:2b:ed:64:46:73:2c:48:84:a7:
21:29:7e:5e:59:9c:a2:6f:3b:16:0b:12:74:8c:f0:
01:b3:67:a4:cc:57:b1:88:1a:cf:08:72:89:8e:55:
59:8c:ec:95:20:36:5b:fd:ee:3f:f0:18:92:79:13:
28:50:10:0e:39:f6:2b:42:3b:23:c0:54:ac:a0:62:
63:46:13:2d:70:d6:dd:1e:1e:b3:0a:a4:66:62:ef:
e0:f3:37:37:93:65:ef:c5:7f:87:38:75:34:fb:e7:
f0:70:14:6b:d1:c5:79:c9:a1:0b:f3:f7:62:03:d1:
fc:c9:89:d6:79:67:0c:c7:a0:f9:a4:3f:53:ec:b6:
fa:f7:9b:de:8e:07:8b:32:7a:ca:47:5a:c5:72:23:
fd:34:9d:e6:6c:72:36:ed:73:1a:60:a0:06:c5:9d:
74:36:c1:8c:93:8f:6e:b9:fb:d8:38:98:75:d2:bd:
dc:01:3a:e3:a3:71:87:c7:e7:34:33:f0:00:65:8e:
29:6e:0b:69:24:c2:99:17:61:23:d5:30:4f:f3:44:
c3:15:1b:fd:74:37:09:c5:fe:fc:c7:77:32:85:71:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:43:1F:82:95:90:DD:05:D6:99:C2:74:5D:AC:90:8E:0D:73:56
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7N1DH4KVkN0F1pnCdF2skI4Nc1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.129.0/24
Signature Algorithm: sha256WithRSAEncryption
36:09:90:63:a5:f9:38:8b:c6:5f:2e:30:b9:e1:08:77:ca:49:
49:53:b9:56:8a:5b:d3:71:ee:2a:1c:64:1a:9c:09:3d:2f:39:
fd:32:45:44:1a:31:ed:75:98:aa:68:03:86:e0:a8:af:f1:f9:
01:ae:66:38:da:1f:51:8b:5f:d8:fe:dd:2d:af:43:15:6c:10:
12:57:57:a8:95:c5:7b:91:d9:91:16:1a:52:57:36:45:5a:a4:
62:72:41:8e:13:e2:01:00:4a:11:db:bf:71:4b:2c:ea:87:6a:
c0:82:e6:86:1c:bc:f1:38:3c:cb:0f:0a:76:84:ea:f9:bc:0d:
90:60:cc:03:c7:d4:e7:85:aa:b0:b0:91:55:27:fc:ee:6f:60:
2a:c6:12:d0:38:29:aa:f3:a1:43:12:b5:2b:a5:72:cb:fc:3d:
f7:3a:75:ed:bf:ec:dd:9d:23:20:2e:8b:7f:dc:c7:01:5f:d7:
ba:6a:bb:ad:c1:17:5d:d8:46:0e:13:69:b4:31:3d:28:aa:c1:
ea:a3:5e:36:df:f1:d8:f4:fd:3b:41:94:e9:60:a6:f9:65:6e:
32:da:93:17:20:b9:17:d6:aa:52:0f:2b:50:44:b2:85:de:c5:
a5:38:70:b5:89:21:c1:99:92:f5:f5:a2:a7:63:ea:3e:bb:85:
eb:92:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org