Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/1-zC-Ln-Qz5pRzuYzcUfOe38kXOs.roa
File: 1-zC-Ln-Qz5pRzuYzcUfOe38kXOs.roa (raw, json)
Hash identifier: zmP+ODNz/fBVuTMwT51SDs/6dT7RKczQVp2YI6qIYsE=
Subject key identifier: FB:30:BE:2E:7F:90:CF:9A:51:CE:E6:33:71:47:CE:7B:7F:24:5C:EB
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019020A617D74E483CA370A4C82B601978B7
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/1-zC-Ln-Qz5pRzuYzcUfOe38kXOs.roa
Signing time: Sun 16 Jun 2024 10:44:34 +0000
ROA not before: Sun 16 Jun 2024 10:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.66.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 18:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:20:a6:17:d7:4e:48:3c:a3:70:a4:c8:2b:60:19:78:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jun 16 10:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb30be2e7f90cf9a51cee6337147ce7b7f245ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:01:1f:fc:f3:6f:6e:69:04:08:53:fb:08:
e9:7e:87:07:29:72:3f:7f:33:76:bf:fb:da:60:b0:
33:6d:97:26:c5:17:49:3e:7b:14:9b:52:a6:0b:34:
59:1b:d0:9f:2d:4b:ac:e2:18:a6:cb:3f:d3:d8:98:
12:4b:48:3f:38:a1:a3:a2:9b:62:74:94:8e:c4:c6:
9c:a1:03:60:b3:dd:e9:11:67:0f:8f:85:26:0e:00:
6b:f5:94:8c:c2:05:7e:aa:cb:d1:49:9e:37:a7:96:
88:90:5e:f1:75:c6:d4:02:cf:5d:6c:d4:0f:98:d0:
44:e5:d8:8b:39:8a:c3:4f:97:12:bb:e0:6c:94:57:
c6:44:37:2b:da:b5:3c:99:b7:7f:0b:eb:ed:82:27:
89:80:69:2b:66:1d:78:3c:fa:7d:00:bb:57:7b:57:
e8:04:25:69:0a:a9:4f:9f:bd:bc:eb:c6:f1:90:71:
7e:af:e9:7d:1c:33:bb:f8:8b:3e:31:df:69:90:16:
57:46:fd:10:15:c8:fe:29:18:26:d6:4f:d1:06:f7:
4a:ed:74:d8:77:81:4c:01:90:6f:80:ef:51:0b:78:
7e:0e:e0:03:66:93:4a:b6:03:a3:a3:3f:70:7a:58:
01:03:35:fc:bc:7b:fd:8b:1a:3f:41:00:91:27:a0:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:BE:2E:7F:90:CF:9A:51:CE:E6:33:71:47:CE:7B:7F:24:5C:EB
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/1-zC-Ln-Qz5pRzuYzcUfOe38kXOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.26.0/24
Signature Algorithm: sha256WithRSAEncryption
80:53:b6:79:2f:b3:4e:98:de:1e:8c:62:d6:cd:ad:ce:5c:d9:
19:ca:95:fe:d9:25:c4:51:42:08:34:5b:92:ed:06:8f:ba:53:
13:7f:39:24:e1:28:a9:4b:3c:c1:db:a0:ab:26:df:2c:86:76:
d9:0d:d1:91:c8:45:58:5b:b5:d0:82:22:f4:3b:5c:3a:2b:22:
e8:3f:00:e8:53:3e:e8:23:c3:5e:8b:67:98:9e:61:a5:08:f6:
59:05:72:d8:2e:76:33:b8:0f:a2:73:49:46:3f:40:de:90:72:
3e:1d:6d:d5:5b:06:07:94:c1:8b:89:18:2b:58:76:05:93:9d:
6c:cd:f0:16:55:96:65:08:b7:c7:f1:df:c5:7b:c7:17:a3:b8:
e3:88:87:16:e6:d0:41:f8:41:4f:a7:76:04:44:94:ed:3b:68:
8b:6c:d1:21:4a:6c:da:56:a9:ec:ce:51:71:62:1d:71:03:ac:
7e:57:7c:ff:34:90:a9:6a:61:70:e2:03:5b:03:a3:a7:13:9b:
f8:fb:73:e1:da:09:94:c3:56:de:10:4f:3c:16:4f:c3:a0:66:
61:c5:ef:5b:d3:39:62:ea:a7:8d:f8:1b:fd:d6:09:be:55:71:
17:bd:8f:be:b3:7d:f9:00:40:e2:c4:a3:70:35:d5:b8:ad:89:
01:a1:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 20:41:17 2024 by rpki-client on console-fra.rpki-client.org