Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/l-CCPhqrmDk3yXsKnAX5_Z24UGo.roa
File: l-CCPhqrmDk3yXsKnAX5_Z24UGo.roa (raw, json)
Hash identifier: bRM2smd8anYVsn+CxXnm/Djy3NM4Cnm+5rbYu3baV2I=
Subject key identifier: 97:E0:82:3E:1A:AB:98:39:37:C9:7B:0A:9C:05:F9:FD:9D:B8:50:6A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188352B86FB8F5E5C14E7D1D67284F63262
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/l-CCPhqrmDk3yXsKnAX5_Z24UGo.roa
Signing time: Fri 19 May 2023 18:00:25 +0000
ROA not before: Fri 19 May 2023 18:00:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198786
IP address blocks: 188.255.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:2b:86:fb:8f:5e:5c:14:e7:d1:d6:72:84:f6:32:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 19 18:00:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97e0823e1aab983937c97b0a9c05f9fd9db8506a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:20:9c:8d:32:51:b9:32:51:85:e3:01:3c:
86:a6:69:75:e9:86:f4:0c:6e:be:78:b1:76:db:62:
28:fd:d4:59:04:e4:cc:58:e9:ef:13:a6:b0:cb:13:
83:60:b1:08:3d:e0:75:ab:f4:af:24:d9:f5:e8:c3:
81:a0:a1:46:d7:10:a2:37:bb:b0:c3:1a:a2:a6:9e:
5a:dc:d9:3a:cf:67:9f:82:3c:1f:60:98:ee:2c:d8:
d8:6c:5c:05:f2:41:dd:f0:23:d0:d0:1b:8e:f0:61:
29:bc:07:42:3f:91:97:6f:16:3b:b1:c7:ea:48:58:
ac:22:26:f1:af:22:52:c9:40:e1:f3:9c:48:53:3c:
f2:ef:64:0b:c0:85:39:c3:95:f9:ed:4e:84:6c:5c:
f0:3c:48:b9:e2:fd:78:1e:a4:38:b9:e9:64:91:61:
f8:18:4c:62:68:a9:c8:85:da:eb:cf:5a:a0:af:57:
f5:95:5e:83:24:73:ff:c2:9c:9e:72:1c:0f:83:d4:
95:d2:d6:8d:44:62:e6:71:69:b4:60:b9:8e:f5:43:
bd:be:ac:dc:1b:36:6e:40:b4:08:3c:06:69:e4:31:
e0:4d:cb:fc:13:08:47:2f:54:6d:04:d3:6e:af:6c:
24:af:5c:71:3f:6b:1b:7e:49:fc:73:1b:2a:f9:b0:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E0:82:3E:1A:AB:98:39:37:C9:7B:0A:9C:05:F9:FD:9D:B8:50:6A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/l-CCPhqrmDk3yXsKnAX5_Z24UGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.200.0/24
Signature Algorithm: sha256WithRSAEncryption
33:96:e5:e3:6a:c5:67:aa:dc:7a:2c:ec:7c:4b:4f:03:60:2a:
0c:d2:74:f5:36:1f:69:cf:01:65:25:37:0f:78:6d:0e:26:78:
1e:f7:93:8e:ea:4c:2f:15:6a:a5:8d:4c:92:52:0f:2a:25:d7:
94:28:e2:8f:c3:df:6c:44:33:d2:f5:90:39:d0:e2:35:a5:c4:
34:a0:f6:d6:23:81:49:ff:c2:92:70:c3:bc:a9:95:dd:7e:6f:
21:df:ab:f5:81:60:c3:d1:48:09:36:6b:36:1c:9f:fc:9a:e2:
5a:1c:8c:4d:4e:c7:a1:fb:55:60:8d:31:3f:29:57:b7:55:3d:
2a:35:37:e6:00:e5:47:91:59:5f:c9:06:38:5c:f1:03:16:c0:
bc:7b:46:40:09:b9:b3:e5:52:2e:53:a1:3b:33:17:f8:96:57:
48:76:ef:d3:7d:df:23:a7:f0:f2:21:1f:23:1e:f1:7b:87:14:
3d:b0:d8:f5:1e:eb:53:92:78:71:aa:e7:b1:8b:3b:bd:5c:a8:
b6:65:7c:1a:ce:de:95:f3:09:ee:11:b2:82:24:97:30:d7:a5:
22:d5:df:36:d2:bb:bd:d8:7a:6d:38:39:66:59:38:71:55:62:
6c:0e:af:21:32:d5:f9:07:7c:22:75:d2:4e:a6:79:ff:b4:ef:
f5:88:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:36 2024 by rpki-client on console-fra.rpki-client.org