Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/BAITxuRO7MsBSwAYg49N1VCxL5I.roa
File: BAITxuRO7MsBSwAYg49N1VCxL5I.roa (raw, json)
Hash identifier: Z1FyYVArgtpZy0Z8tAr0vgHg49oLF6URj15HTli5Xsw=
Subject key identifier: 04:02:13:C6:E4:4E:EC:CB:01:4B:00:18:83:8F:4D:D5:50:B1:2F:92
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018B39F21079A7C6FEDEC9BED8509BC4EBCA
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/BAITxuRO7MsBSwAYg49N1VCxL5I.roa
Signing time: Mon 16 Oct 2023 19:24:07 +0000
ROA not before: Mon 16 Oct 2023 19:24:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216159
IP address blocks: 188.66.27.0/24 maxlen: 24
188.66.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:f2:10:79:a7:c6:fe:de:c9:be:d8:50:9b:c4:eb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 16 19:24:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=040213c6e44eeccb014b0018838f4dd550b12f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d4:16:e2:0a:8a:94:47:e0:4b:4f:41:75:dc:
51:7f:0e:43:8f:7e:16:d6:92:4f:a3:21:90:31:fc:
95:d4:0c:11:c3:22:09:d5:2b:4d:e2:28:a5:12:19:
86:10:96:a0:10:b3:c2:b7:24:e3:f2:ba:ef:2d:b9:
53:8a:a4:48:17:fa:58:1f:bd:bf:b7:66:c5:0d:7e:
75:b2:99:8c:e6:af:33:3b:07:02:cd:9c:ec:6e:16:
fe:16:72:9e:23:36:6e:a9:e6:6a:43:17:f9:ef:26:
31:56:0d:c7:1a:f8:54:df:e9:59:07:87:cf:41:49:
06:a1:9f:24:07:07:ab:36:de:56:5f:6a:63:0a:42:
33:1c:af:ce:4a:d7:f4:3f:35:72:b3:a7:ce:08:9f:
fb:95:b9:5d:c5:49:15:70:bc:5a:d1:24:b0:bc:db:
ad:ef:19:91:e3:5a:f9:ef:c6:6e:0a:2a:9a:0d:6a:
b2:75:85:28:1f:94:3c:44:64:34:62:7a:c6:4d:81:
b6:61:0b:b7:16:35:96:bb:7a:74:40:07:95:8e:0d:
02:a8:48:11:13:b6:f4:45:3c:2a:01:66:95:42:1e:
4a:08:a7:80:72:2e:cd:f5:bd:40:4b:9e:ba:df:35:
28:9f:f5:d4:68:b3:6c:5d:da:45:23:e1:8b:4d:5f:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:13:C6:E4:4E:EC:CB:01:4B:00:18:83:8F:4D:D5:50:B1:2F:92
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/BAITxuRO7MsBSwAYg49N1VCxL5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.25.0/24
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d5:0c:1c:73:dc:b7:8b:cb:b0:e8:57:65:98:a5:fb:04:e7:
29:eb:66:ed:3a:a3:a1:cb:10:18:d1:99:f0:d7:59:8b:6f:65:
b4:7c:e4:42:d4:47:09:7f:af:4c:3a:72:18:53:d8:79:94:ef:
95:fe:ab:0a:a8:12:25:36:97:67:30:57:a2:ce:6f:7a:0d:27:
3c:6d:3d:0f:4d:eb:17:ae:07:b6:5b:dd:1c:9d:5e:e9:70:07:
6b:5e:4a:27:f2:94:17:eb:90:1b:d9:42:aa:f8:2e:04:aa:47:
c4:76:27:88:c6:9d:c1:25:84:89:a1:a1:a9:1b:9e:a0:d1:bb:
4b:13:0a:79:c9:9e:70:e7:39:9f:d6:19:84:43:94:b3:7e:d9:
b3:13:79:b2:ac:7d:d6:54:95:2d:50:e9:e7:43:b0:ef:db:ac:
ba:39:fe:44:13:67:0e:4a:df:d2:7d:ae:43:ff:db:c9:8c:c2:
d4:72:c7:39:c5:c1:f5:be:0b:21:db:8d:d8:ae:4f:f9:57:da:
d7:2a:18:81:3a:8f:0c:68:6f:49:ba:93:15:97:c2:be:23:58:
29:19:8f:69:21:09:2c:0a:f4:25:b0:a3:5f:57:94:aa:d7:d9:
9d:70:0d:89:f9:85:71:a5:fd:2b:5e:96:d6:1b:49:7b:92:ea:
d5:b7:b4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:36 2024 by rpki-client on console-ams.rpki-client.org