Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/tF76BzCOyvlRTuc-aZK3Ha9KYqA.roa
File: tF76BzCOyvlRTuc-aZK3Ha9KYqA.roa (raw, json)
Hash identifier: EESWofZgfC2wHzkwRZy+9a0Iw0rFVFno/Q39qRHh1R0=
Subject key identifier: B4:5E:FA:07:30:8E:CA:F9:51:4E:E7:3E:69:92:B7:1D:AF:4A:62:A0
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 018572711B2BDA612B7DD09BDB1BCB672FCB
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/tF76BzCOyvlRTuc-aZK3Ha9KYqA.roa
Signing time: Mon 02 Jan 2023 12:24:53 +0000
ROA not before: Mon 02 Jan 2023 12:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211857
IP address blocks: 188.214.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:1b:2b:da:61:2b:7d:d0:9b:db:1b:cb:67:2f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 2 12:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b45efa07308ecaf9514ee73e6992b71daf4a62a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:ed:dd:bd:d4:6e:47:a9:d0:be:c5:ae:69:
65:ed:a2:45:13:3e:e2:b5:69:95:d7:1f:a4:4a:48:
f0:a6:0d:03:24:32:65:6f:ed:d4:3e:20:da:7e:7a:
43:a9:9c:3c:14:32:fd:f7:3f:e3:ee:69:d6:87:58:
0a:f2:a9:45:26:5f:fc:61:0a:a7:7e:36:94:46:16:
fe:ea:ba:6c:70:55:8c:e0:5d:01:03:61:53:35:54:
1e:af:36:ca:8c:2e:6f:46:b7:9b:a4:f9:95:71:7e:
4e:ec:5b:2e:bb:c3:6a:63:9e:6f:12:df:32:2a:03:
f2:68:19:d2:cc:d1:b3:a0:a4:a0:1c:46:42:24:ae:
e6:73:59:ca:89:1c:7b:ef:cf:14:7a:fb:94:69:1b:
22:dd:dc:02:33:05:9e:15:23:e3:ea:e6:5e:ee:0b:
53:36:1e:00:7d:a6:4e:da:fd:be:0f:fa:a8:cf:56:
47:a5:a3:d3:80:c1:1f:6f:eb:e3:5d:25:bf:34:95:
9b:d0:da:01:af:02:5a:ca:9d:e7:e8:5c:c9:4e:21:
82:95:51:d9:97:b3:fd:7e:a5:18:11:60:e0:b5:23:
2a:85:5e:a1:e1:3f:b6:2e:9a:90:97:2f:fb:1a:e0:
7b:95:80:c5:59:c8:0b:3e:e8:e6:62:da:d4:a9:5a:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5E:FA:07:30:8E:CA:F9:51:4E:E7:3E:69:92:B7:1D:AF:4A:62:A0
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/tF76BzCOyvlRTuc-aZK3Ha9KYqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e9:32:b5:76:2a:49:bd:24:ee:dd:b2:37:8d:0a:0a:1c:d1:
c5:4b:ab:d1:74:1c:a6:ea:9c:1a:cc:4f:01:9a:11:fb:0b:9c:
73:b0:6f:ac:dc:04:c1:18:75:0b:19:54:a3:4a:ac:64:fc:24:
11:2f:81:dc:5f:f3:8a:5d:ac:69:0b:cc:ec:47:23:e5:3d:84:
40:e4:02:70:16:7c:d1:fa:a7:e7:4b:9e:a1:dc:66:cd:4a:3c:
da:7a:e1:46:86:45:1a:19:62:12:dc:f1:26:4d:96:72:75:f4:
f4:15:63:e4:a2:e0:de:a3:6c:4a:28:dd:95:07:4a:ed:01:a8:
8e:7c:45:57:83:9d:70:b7:98:02:3b:9e:6a:65:8f:e4:d3:87:
db:96:36:d7:17:fe:d5:23:95:dd:4e:33:eb:b1:bd:5f:0f:50:
7f:a2:c2:12:b0:6a:eb:bf:19:df:fe:14:85:37:37:b9:b5:68:
53:ce:4b:b5:93:85:b9:f7:41:ef:36:55:05:9a:e4:ed:37:f7:
e3:1e:c7:63:00:07:e6:64:0c:3b:62:d6:a5:f7:fb:e6:e1:38:
4e:9e:f0:01:9a:f6:af:44:7b:95:a4:bc:9d:f1:c4:bd:52:8e:
61:6d:07:4a:e3:e6:da:f4:38:ed:83:20:eb:3c:6b:92:00:91:
82:5f:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:24 2024 by rpki-client on console-fra.rpki-client.org