Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/N4tTCt5gHDmsZ35TWJpsL_TXK_U.roa
File: N4tTCt5gHDmsZ35TWJpsL_TXK_U.roa (raw, json)
Hash identifier: 4br11CqUbi3FJA/BhaE6Zt1YErZJMA3Lo1ZeVjW+GqY=
Subject key identifier: 37:8B:53:0A:DE:60:1C:39:AC:67:7E:53:58:9A:6C:2F:F4:D7:2B:F5
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018B39F20FE1436346946B80BF81BFE1D4E8
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/N4tTCt5gHDmsZ35TWJpsL_TXK_U.roa
Signing time: Mon 16 Oct 2023 19:24:06 +0000
ROA not before: Mon 16 Oct 2023 19:24:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 188.66.27.0/24 maxlen: 24
188.66.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:f2:0f:e1:43:63:46:94:6b:80:bf:81:bf:e1:d4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 16 19:24:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=378b530ade601c39ac677e53589a6c2ff4d72bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1d:0e:f2:27:12:7b:a6:70:70:88:ac:5e:0a:
2f:27:17:18:ec:82:40:2d:0f:a6:55:f7:de:36:7d:
a2:6a:7b:1f:ec:b5:59:62:c5:ff:a6:bb:85:dd:21:
8f:97:5a:45:72:7a:87:bf:1e:57:c2:8c:5d:09:34:
41:5a:7f:bf:ea:a9:1c:50:11:fb:52:9e:f3:ef:2f:
8a:fc:46:58:4b:25:64:75:2b:43:12:ad:82:66:ed:
8f:5d:81:23:c1:03:0e:c8:c8:c6:2d:31:2b:38:a1:
49:01:94:15:91:39:c2:75:cf:58:98:a6:ec:2e:57:
4e:21:27:d2:4c:83:ab:8d:58:a5:0b:5d:d7:cd:a0:
f0:27:d3:e3:63:88:61:9d:b4:b1:99:52:5b:ae:09:
37:71:16:30:96:38:c4:8b:d0:85:0c:1d:1d:db:2d:
03:0d:2e:72:9e:7d:75:ec:46:32:06:a9:2c:2f:02:
d5:0b:94:9a:e2:08:c6:c6:25:58:26:c9:49:07:41:
ac:a9:77:09:e5:93:75:9d:0c:63:a8:c1:95:58:45:
9e:53:b1:62:19:86:04:d3:f1:ec:7a:a3:1c:57:a5:
05:96:56:03:5c:1c:5f:9f:52:42:6d:49:71:aa:68:
45:db:6a:0f:0d:b6:01:af:1b:71:80:42:54:e4:07:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8B:53:0A:DE:60:1C:39:AC:67:7E:53:58:9A:6C:2F:F4:D7:2B:F5
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/N4tTCt5gHDmsZ35TWJpsL_TXK_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.25.0/24
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
99:91:ec:61:67:35:54:7f:c6:0c:46:72:b8:f7:e9:bf:ca:a8:
27:cd:c8:48:f7:7f:13:b2:b7:e2:58:f4:81:a4:d5:01:ff:14:
4d:7b:be:a9:c6:ba:cd:44:78:64:4e:84:f4:c5:c7:c2:ed:d6:
44:75:f1:e7:11:d1:ee:90:f6:de:1f:c7:37:db:89:e0:28:ac:
51:7d:70:8f:98:6f:d7:1e:6a:a0:6d:77:96:72:ea:90:31:06:
f0:d8:76:06:29:6b:59:10:55:04:b2:38:5b:a8:16:5e:30:3b:
8e:76:4a:f0:20:cf:48:2c:ad:1b:68:f4:ab:ba:15:25:4f:24:
f4:64:00:08:fe:19:c6:dc:6f:20:08:87:41:47:99:10:fe:86:
c5:b7:24:ce:94:dd:01:30:5c:a0:42:b0:67:1a:ea:3d:ac:54:
7a:63:7d:60:cb:81:a9:20:3b:d8:9f:7b:55:15:0e:77:ab:f9:
6f:b3:f4:ac:a7:01:da:34:d7:fc:af:f0:49:1c:d2:2a:38:73:
21:18:c7:85:ad:04:82:13:8e:b3:f7:c5:78:5e:41:51:97:76:
3e:b7:53:84:57:8d:5b:5a:91:83:c3:56:27:a3:9b:09:64:15:
46:80:be:73:ab:24:3e:8d:1f:ed:35:25:d9:3b:db:ff:ad:04:
b1:98:1e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org