Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cB6qrPVEJVIPqguS6dS5NndHGPA.roa
File: cB6qrPVEJVIPqguS6dS5NndHGPA.roa (raw, json)
Hash identifier: pXWbcOIdPhPzp3SuVWbekmu+YcX1uWLUz3cW8luItSg=
Subject key identifier: 70:1E:AA:AC:F5:44:25:52:0F:AA:0B:92:E9:D4:B9:36:77:47:18:F0
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018616620AD9F31FBD8419E72F8673948032
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cB6qrPVEJVIPqguS6dS5NndHGPA.roa
Signing time: Fri 03 Feb 2023 08:26:09 +0000
ROA not before: Fri 03 Feb 2023 08:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33387
IP address blocks: 188.255.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 20:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:62:0a:d9:f3:1f:bd:84:19:e7:2f:86:73:94:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 3 08:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701eaaacf54425520faa0b92e9d4b936774718f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:cc:7c:f0:da:01:c3:6b:fe:f2:26:fb:d8:
96:9d:4d:3b:21:e6:ff:f5:fe:d3:d8:c6:fd:19:1c:
92:62:56:e4:6d:e4:b5:61:41:9f:bf:9b:44:ec:67:
48:f8:66:99:7e:07:7a:95:21:ab:a8:72:16:1b:4e:
30:bb:26:a3:81:1b:0a:c4:82:5b:29:b9:e9:37:3d:
aa:b9:41:4c:39:e7:53:5e:34:37:4e:f8:0a:a8:2e:
4f:03:7c:e3:aa:c3:f9:b9:47:1f:86:94:fc:e7:2f:
d0:ee:ac:1b:0c:8f:2f:a0:87:0f:a5:52:c5:fa:e1:
28:4d:cf:85:12:e1:00:84:b4:ec:e7:d4:44:8e:5d:
fc:0e:ca:4c:52:c3:a7:9b:0e:73:9c:1b:9c:78:5a:
88:71:a8:f1:81:f9:21:38:26:77:39:40:f5:3b:90:
10:2d:26:4a:08:84:4d:2a:93:68:37:29:93:84:d2:
ed:20:c0:3b:58:32:fa:8b:db:74:ef:d5:3a:b5:e5:
1d:91:f6:54:02:3f:eb:95:66:77:ec:09:0f:7e:c1:
52:34:66:7b:fd:ed:6e:bd:97:ed:5b:ee:51:03:79:
28:07:80:77:ef:21:dd:21:73:33:cd:89:0b:7d:4c:
1c:9b:06:bf:b1:1e:64:f9:80:9e:e1:dd:c8:cd:77:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1E:AA:AC:F5:44:25:52:0F:AA:0B:92:E9:D4:B9:36:77:47:18:F0
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cB6qrPVEJVIPqguS6dS5NndHGPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:94:41:7f:10:04:cb:8d:df:c8:d0:bc:ed:2a:6b:27:82:88:
04:f7:59:00:53:c3:f6:a8:42:77:34:b9:7e:bf:8d:97:6e:59:
ba:0a:de:aa:22:3c:10:a1:3c:a4:2d:5c:a8:98:5b:f9:3b:c1:
4d:f6:8b:89:64:c5:d5:66:4a:38:59:56:e3:dc:70:88:28:b5:
cf:e6:37:bd:69:22:78:3a:67:0d:52:d1:b8:91:44:04:03:22:
85:ff:95:6c:d5:0f:63:f7:03:80:38:60:80:aa:42:2f:0f:44:
0a:ea:73:c0:63:9e:1c:be:ff:38:a9:ab:b5:b6:ae:ea:66:97:
5e:fc:6a:20:55:80:ca:42:dd:b4:26:ae:6b:64:f7:b6:36:99:
f8:0a:1e:42:7d:d2:0f:36:90:e1:ee:c0:86:1d:63:d0:f8:62:
61:f3:4e:9f:71:b6:49:fe:d4:65:99:78:00:9d:c0:05:82:66:
f3:28:02:88:b6:bd:e5:42:5e:d0:21:b4:e4:8c:fa:09:b5:aa:
3c:df:2f:86:4b:a9:47:92:65:71:aa:18:62:87:80:1b:5a:5d:
4e:05:ef:ae:83:17:e8:0f:c1:a3:b3:53:a2:36:0d:f2:1a:7f:
56:5e:07:73:ab:05:17:bd:15:77:ae:de:9d:d6:b4:5e:cb:d8:
b8:74:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org