Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/GI4cVOK9HkxtU1O6UxiwEKBYY2k.roa
File: GI4cVOK9HkxtU1O6UxiwEKBYY2k.roa (raw, json)
Hash identifier: vcNiHB3aWlmS/psraqSxSRd0O9RJEpE+J/sBU3dbiZQ=
Subject key identifier: 18:8E:1C:54:E2:BD:1E:4C:6D:53:53:BA:53:18:B0:10:A0:58:63:69
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018EE0E0B6B54B6E431C862D77F9E95D21FA
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/GI4cVOK9HkxtU1O6UxiwEKBYY2k.roa
Signing time: Mon 15 Apr 2024 08:30:06 +0000
ROA not before: Mon 15 Apr 2024 08:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.66.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 07:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:e0:b6:b5:4b:6e:43:1c:86:2d:77:f9:e9:5d:21:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Apr 15 08:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=188e1c54e2bd1e4c6d5353ba5318b010a0586369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:8e:21:32:16:e6:8e:c7:56:57:8c:08:7c:
4a:38:95:da:5b:16:ce:11:79:1f:a7:84:18:a5:83:
63:ba:44:c3:a2:2b:d2:6d:09:c6:69:79:d3:20:3b:
7e:7f:9b:6a:51:67:52:04:bb:e3:6a:fa:84:ef:d4:
0b:65:2e:43:94:f3:24:22:d8:b0:46:28:01:fc:0b:
8c:fe:78:47:ef:ef:c3:6c:a5:c4:5c:1d:ee:5f:ba:
d7:55:ca:1b:92:75:60:70:b8:2b:26:e0:1e:2e:08:
a9:a2:9e:a9:73:2b:63:61:7e:25:2e:9c:01:f8:56:
eb:ba:03:86:75:4a:bc:03:60:12:c7:43:66:cd:36:
93:2c:1f:9f:4d:8a:29:67:f8:b0:0f:38:6d:ae:0b:
39:1a:1d:7e:8b:b1:b6:3b:d1:b7:0e:68:15:c0:8a:
80:16:fd:bc:cb:d7:d9:bb:9a:c9:d4:84:49:98:5a:
d5:f9:24:47:60:11:6a:db:47:19:8f:21:9e:ee:66:
39:9b:f1:71:3a:18:a1:e0:89:e5:4f:1c:e7:8d:37:
e0:62:68:13:e2:d6:64:9f:fb:ad:f0:bc:dc:d0:7d:
fa:61:e7:03:43:1c:8b:b0:6a:58:0a:49:bf:27:03:
97:9a:8c:4d:ef:5b:c6:78:40:64:2b:e1:61:5d:ba:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8E:1C:54:E2:BD:1E:4C:6D:53:53:BA:53:18:B0:10:A0:58:63:69
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/GI4cVOK9HkxtU1O6UxiwEKBYY2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.26.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:91:c0:df:0d:8d:ef:ab:da:d2:2a:e0:6a:e0:4f:dc:67:1e:
f1:33:7c:69:94:96:c2:60:8e:bd:1e:83:8f:91:2a:c2:92:ef:
bf:38:c1:ad:2c:1b:4e:37:0e:35:82:17:dd:3c:4b:cd:0c:05:
af:f3:88:bc:98:5b:72:e2:4e:c5:e7:04:8f:5e:e9:05:c5:2d:
ad:50:7f:00:1a:f3:16:97:2c:8f:3c:4c:76:5b:82:e7:fe:b0:
7c:4e:9f:90:03:e8:bc:97:34:db:12:61:f6:66:62:10:39:f1:
7d:7b:8c:07:cb:80:5f:46:a2:26:f3:04:8a:f8:f0:58:8d:06:
1a:06:04:73:96:d4:e7:6e:81:54:ff:15:1e:37:68:6b:f8:6e:
c0:3d:aa:a1:4d:3b:20:91:33:bc:45:75:0d:df:7f:85:11:41:
73:af:8d:db:c5:47:ae:ac:d1:b7:15:6a:13:76:47:d2:93:2f:
a7:e5:c9:4f:cd:af:5e:5a:59:26:67:f7:ff:bf:72:25:50:ea:
96:0a:17:e4:b5:ef:ef:7f:e2:23:a1:fd:9c:b8:30:19:40:79:
56:b2:82:4b:23:f1:a2:a2:a6:6a:c0:92:e4:f6:26:05:9b:80:
ba:55:56:4e:0b:3c:9d:3e:bf:a6:b5:3b:71:02:ee:45:fc:40:
71:be:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 09:59:45 2024 by rpki-client on console-fra.rpki-client.org