Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/4thHECigxi0fT30ZkW8qki5RfMA.roa
File: 4thHECigxi0fT30ZkW8qki5RfMA.roa (raw, json)
Hash identifier: SYSTnARI4ygtLyBABpFKkQEb95uJW68+TYuWdjT0CAc=
Subject key identifier: E2:D8:47:10:28:A0:C6:2D:1F:4F:7D:19:91:6F:2A:92:2E:51:7C:C0
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 0190D49F293B56E410049EE64F9253B88286
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/4thHECigxi0fT30ZkW8qki5RfMA.roa
Signing time: Sun 21 Jul 2024 09:28:38 +0000
ROA not before: Sun 21 Jul 2024 09:28:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.66.26.0/24 maxlen: 24
193.108.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 08:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d4:9f:29:3b:56:e4:10:04:9e:e6:4f:92:53:b8:82:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jul 21 09:28:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2d8471028a0c62d1f4f7d19916f2a922e517cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:dc:bf:71:aa:f4:16:e4:79:db:41:bf:c4:
30:91:4e:55:26:93:11:fc:48:a2:90:86:bb:07:c4:
b2:87:64:98:3c:81:e4:91:82:d4:92:16:7c:92:3e:
7a:44:eb:cb:d0:16:ba:79:39:8c:3e:ef:be:4a:83:
a6:1a:a6:c9:5e:68:67:4e:c3:00:af:b4:68:7f:0b:
dc:fc:c9:ab:39:e0:08:4e:87:1d:b3:bb:f5:ad:83:
2f:dc:8e:0e:33:f6:62:e4:27:51:b0:20:cd:ad:8c:
27:f2:33:8e:26:d7:9c:55:09:f8:ff:8a:c6:43:5b:
b0:fc:b0:4d:69:a0:57:59:40:8e:9e:40:55:9d:99:
da:d1:e5:30:fa:35:da:6e:1c:95:a5:a1:98:a3:63:
7c:d6:ad:99:2b:fc:86:20:3f:66:55:a6:59:65:bd:
fb:6d:54:5e:38:b9:6f:76:ab:b1:62:b5:be:f5:ec:
6b:13:9f:d1:c2:e0:a0:04:f0:32:f5:6d:90:f0:b2:
ee:e4:ab:4d:af:a8:1b:a4:fe:e8:83:9a:2d:9a:51:
92:9b:e2:80:cc:c9:f5:4f:de:80:38:8a:62:3b:44:
88:69:31:22:80:a3:8a:1d:86:2f:95:90:75:23:bf:
1c:8d:26:16:3f:82:0a:2b:89:e6:32:05:90:45:b8:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D8:47:10:28:A0:C6:2D:1F:4F:7D:19:91:6F:2A:92:2E:51:7C:C0
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/4thHECigxi0fT30ZkW8qki5RfMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.26.0/24
193.108.59.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ad:47:e3:d0:c7:17:18:a0:7f:3e:e2:f5:af:7d:a0:71:99:
80:b8:a6:f2:d4:81:9a:da:84:9d:67:f0:6c:28:98:0b:bd:c0:
0a:9e:dc:da:56:21:47:61:95:c7:3a:a6:78:cd:4b:ad:b6:3c:
c3:86:9c:4a:99:5d:01:78:f4:ec:ea:a6:6e:33:6e:00:f1:99:
81:27:fb:b7:69:38:43:d0:69:e0:ff:a7:f9:24:1a:ac:5d:ff:
7e:73:3b:6c:3b:e1:2c:45:e1:7c:a0:85:d0:c5:30:dd:40:6a:
f9:b6:07:c1:0f:9e:15:fd:90:70:0b:58:25:89:70:e3:8b:3d:
c4:e3:11:38:47:98:84:69:f6:15:77:fd:f1:60:45:17:ed:b5:
3d:ce:7e:67:ae:25:7c:fa:1e:7c:85:6b:8f:e0:dd:0b:10:45:
3f:83:27:d3:fa:f2:80:02:60:82:4e:ee:02:3a:6a:4a:0b:47:
cb:0e:2c:b5:24:3b:b8:25:8d:72:db:72:35:e4:ea:04:fd:d5:
61:ec:d1:9d:31:8f:ce:ac:ac:75:de:6b:a2:6a:a2:cd:eb:43:
4d:e4:9d:b9:f1:0a:bc:88:b3:4c:c0:70:85:af:50:8c:f0:ef:
02:b6:99:86:f3:6c:38:98:2e:7b:73:a2:54:8c:97:31:e5:9e:
07:7b:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 10:50:31 2024 by rpki-client on console-fra.rpki-client.org