Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AQWuKCsFBDU-3F6AfSLUDQUeaMo.roa
File: AQWuKCsFBDU-3F6AfSLUDQUeaMo.roa (raw, json)
Hash identifier: 21Wx3Bwa9ANIrLoBGxhO3prMnV5IHrlXxgcEN7ifh6o=
Subject key identifier: 01:05:AE:28:2B:05:04:35:3E:DC:5E:80:7D:22:D4:0D:05:1E:68:CA
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0191D2A128C69E1EFCE97223BC3C33305182
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AQWuKCsFBDU-3F6AfSLUDQUeaMo.roa
Signing time: Sun 08 Sep 2024 17:14:22 +0000
ROA not before: Sun 08 Sep 2024 17:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214447
IP address blocks: 188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 11:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d2:a1:28:c6:9e:1e:fc:e9:72:23:bc:3c:33:30:51:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 8 17:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0105ae282b0504353edc5e807d22d40d051e68ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:b4:38:03:5d:57:b8:88:51:87:a4:17:ec:
c4:06:d5:c4:56:98:5b:0b:3c:16:b3:7d:a0:29:04:
5c:4b:92:5e:e7:f9:43:79:42:22:74:72:5a:b9:c9:
6b:46:c6:5c:bc:ec:55:d1:6c:d8:97:98:76:cb:98:
fb:f1:b1:8c:b7:16:80:c1:81:3d:6d:67:4e:00:41:
53:d3:7c:a6:74:63:3d:47:8b:b5:86:62:a5:4d:c8:
25:f2:75:f3:8f:ed:ef:0d:db:0e:20:b1:9a:e5:ed:
26:bb:a1:b9:0a:f2:c1:18:b5:b9:09:70:2d:f7:bc:
db:8a:dc:e0:d6:cb:5d:1f:43:2a:b4:0f:4c:90:77:
fd:a7:ed:12:37:28:4b:e0:24:2a:e6:b6:cc:1b:25:
d6:98:ce:a6:1d:79:5e:d0:11:91:e8:5b:36:45:d0:
6b:3d:fc:9c:4c:6a:49:b9:d2:49:cb:7b:36:9e:34:
9c:8a:66:fd:f5:09:bf:fb:07:22:0a:57:eb:e6:77:
8c:6b:d3:f3:0c:4e:ff:52:9c:06:c1:a8:d3:dd:5a:
07:f6:9b:dd:59:70:e7:0e:35:5f:54:e0:3f:a9:23:
1d:84:9e:e5:cf:13:94:19:6d:16:10:e3:36:55:f9:
01:7e:8c:e3:49:ad:9d:04:4e:a2:63:26:39:9e:f1:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:05:AE:28:2B:05:04:35:3E:DC:5E:80:7D:22:D4:0D:05:1E:68:CA
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AQWuKCsFBDU-3F6AfSLUDQUeaMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.212.0/22
212.68.35.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ba:a5:d3:2b:48:95:64:b8:b2:16:23:3b:ad:f1:a3:ff:84:
c8:c6:8f:30:5a:e5:58:2d:b5:49:aa:19:b0:53:e6:dc:89:05:
d0:e4:5d:c0:8e:12:68:54:6f:97:3c:2b:2a:44:68:d4:b9:d9:
da:ff:93:be:67:8b:b6:28:02:93:c8:dc:4d:9d:eb:b0:0b:9b:
69:f2:43:38:3a:d8:b1:f7:b2:fd:a3:57:be:23:cb:e1:1c:80:
70:67:0c:15:f4:ac:73:5b:80:d7:62:63:57:66:cc:1f:75:fd:
4f:bc:8d:b0:da:6e:71:93:12:39:37:93:d9:ea:65:75:be:87:
ab:63:36:a8:cf:29:b0:f4:7a:74:c1:b0:63:83:e6:08:7e:69:
01:66:82:8d:5e:7b:9f:0c:81:cf:37:7f:93:f9:28:75:43:d9:
84:09:77:c9:af:84:b5:03:25:df:e9:b8:b1:9c:9f:d3:54:a1:
54:62:e7:56:65:5b:81:bd:16:ff:da:fe:70:f8:ad:6f:64:4f:
88:ab:58:1a:a1:1f:99:2b:ee:86:e1:6c:78:ef:5c:5c:f5:cb:
9b:c6:d4:1c:d7:bc:8b:9e:0e:d9:10:6d:a7:a8:d7:46:2e:49:
b0:fc:d3:9f:88:04:f8:d2:db:c2:89:73:32:9c:83:a6:73:15:
27:48:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 14:04:23 2024 by rpki-client on console-ams.rpki-client.org