Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/g-3xQHLDig-88VqaSFp6pZqwdnQ.roa
File: g-3xQHLDig-88VqaSFp6pZqwdnQ.roa (raw, json)
Hash identifier: dsl0BhCBuGraxxyfBA8ZqpRwi+9yj/GdSSzwrF+QUXs=
Subject key identifier: 83:ED:F1:40:72:C3:8A:0F:BC:F1:5A:9A:48:5A:7A:A5:9A:B0:76:74
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01883FC351B0B906B5D0310E7DA83B4601F5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/g-3xQHLDig-88VqaSFp6pZqwdnQ.roa
Signing time: Sun 21 May 2023 19:22:25 +0000
ROA not before: Sun 21 May 2023 19:22:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19318
IP address blocks: 188.255.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 07:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3f:c3:51:b0:b9:06:b5:d0:31:0e:7d:a8:3b:46:01:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 21 19:22:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83edf14072c38a0fbcf15a9a485a7aa59ab07674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:42:38:b1:b8:0c:a9:53:5e:fb:6c:17:82:26:
d5:00:4c:0f:33:88:ed:af:68:b7:79:1a:98:d7:65:
3a:00:5e:d4:8b:53:f8:35:13:20:03:39:9f:18:b4:
c9:b7:55:fd:59:7e:eb:c3:84:5d:99:3b:1c:05:74:
93:28:55:76:27:3e:6b:95:b8:94:a7:5f:1f:6c:f1:
24:1d:84:56:52:da:c7:36:73:24:76:72:31:d7:60:
1b:c4:18:8d:a7:15:17:b1:37:f4:52:0d:ae:79:a0:
73:7a:98:d6:9a:b4:ba:45:a7:33:c1:da:1c:8c:6c:
3f:dd:9a:a3:47:0d:18:6d:c5:e6:43:65:ef:f2:f0:
06:90:37:14:38:e6:b7:21:fd:f9:a5:5c:47:55:e0:
96:47:41:23:45:b2:05:9f:c0:be:24:c7:50:ef:fa:
2b:a6:f8:72:51:7e:28:17:4f:e6:9f:b0:47:55:ac:
ea:1c:d6:da:33:78:18:c2:db:04:23:28:a3:39:7c:
42:5c:31:1f:23:30:88:f0:de:a9:79:a0:09:dd:41:
3e:ec:2a:34:70:08:d6:3b:d0:eb:a9:f2:f6:10:11:
97:3f:ac:07:3b:3d:7d:a1:e2:df:8c:16:5b:82:de:
ce:d1:d8:0b:f1:32:df:b0:97:02:d5:76:4a:23:8d:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:F1:40:72:C3:8A:0F:BC:F1:5A:9A:48:5A:7A:A5:9A:B0:76:74
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/g-3xQHLDig-88VqaSFp6pZqwdnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.135.0/24
Signature Algorithm: sha256WithRSAEncryption
17:86:e5:29:c4:ea:02:5b:d8:bb:46:1b:a9:25:e2:0f:ed:12:
93:ff:1e:98:cf:1d:18:44:ff:ba:c9:76:8e:f8:3b:bb:b0:8d:
2e:f8:32:aa:0e:cc:6c:63:46:67:7a:ac:00:03:13:68:70:39:
56:bf:1c:1e:d5:5b:0e:44:6c:e3:97:a5:e9:98:67:41:f4:40:
92:cd:83:b3:f4:bb:33:71:3a:70:fc:b5:68:ed:ea:28:35:6a:
ed:ee:e1:b1:4c:c1:9f:5e:fc:26:1b:e9:6a:d4:e8:a1:cd:76:
67:c6:61:72:8b:62:82:b9:f1:16:6c:39:ef:8a:16:7a:d8:12:
fb:2e:d1:83:0c:07:5a:67:bc:0d:34:f1:e4:3c:32:4b:5f:e4:
4a:db:9a:3b:78:16:a6:14:b2:70:88:15:a1:55:3e:93:9c:44:
92:f3:31:d6:ff:6a:12:fe:b5:cf:88:9b:b2:ae:18:ab:a3:48:
e3:3b:55:84:aa:a4:e4:4f:5b:5e:91:61:e6:a5:ad:46:5a:ef:
e7:58:b6:ea:4e:d7:7f:5a:54:43:15:72:ef:7e:90:c8:01:da:
aa:3c:5f:85:8a:89:16:26:b4:a5:85:93:6c:57:63:c0:5e:7f:
74:2c:62:44:a1:2e:4d:24:b3:b8:5c:4d:b5:01:5f:d2:7e:31:
5b:c3:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org