Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Bdzu93YsWD0GNJNiTPUptyriy_Y.roa
File: Bdzu93YsWD0GNJNiTPUptyriy_Y.roa (raw, json)
Hash identifier: RCv0qdwdfPXXNQnNfKIzVWO4UJVFRnygssqq9uJbIHk=
Subject key identifier: 05:DC:EE:F7:76:2C:58:3D:06:34:93:62:4C:F5:29:B7:2A:E2:CB:F6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CA1E12E90A50FBBA3656744E60E08B194
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Bdzu93YsWD0GNJNiTPUptyriy_Y.roa
Signing time: Mon 25 Dec 2023 16:48:58 +0000
ROA not before: Mon 25 Dec 2023 16:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199797
IP address blocks: 188.132.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a1:e1:2e:90:a5:0f:bb:a3:65:67:44:e6:0e:08:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 25 16:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05dceef7762c583d063493624cf529b72ae2cbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:73:57:0a:6a:bf:e6:38:7e:5f:93:b0:2d:
84:64:17:81:32:32:3e:dd:75:61:8a:9a:c1:53:2a:
43:01:62:73:5f:20:40:d3:f2:b8:e6:aa:06:72:04:
92:65:8a:b0:3a:0b:eb:e0:f1:cc:54:3d:0a:5d:d6:
d7:5b:32:2f:4c:4f:fb:3a:bc:ef:c0:39:8f:79:c4:
44:f0:5a:bf:7a:4d:9f:a7:9b:f8:7f:81:3d:f6:b0:
9a:36:a8:d9:3a:7b:62:db:36:09:e1:bf:10:ed:3d:
3f:e1:4e:ba:63:18:9e:9c:c6:9c:dd:ae:db:8e:d5:
d3:a2:48:71:6f:44:c0:e4:1a:b9:97:22:e9:c6:67:
ac:55:66:3f:e5:a3:88:b9:1c:76:94:49:74:fb:cd:
70:f3:e8:92:90:21:d5:f3:ac:80:4e:aa:00:97:9c:
48:b0:b8:22:25:9b:a5:a7:f1:d3:dc:c0:76:0a:ac:
80:1d:07:05:57:97:11:57:6f:70:91:3b:49:ee:b0:
b9:0b:89:5c:92:c0:b9:e2:79:98:4c:47:ea:be:02:
07:b6:65:3d:93:24:ff:fb:bc:50:59:42:26:c1:d9:
41:09:b6:d3:ef:9e:bf:bd:a6:84:7a:b4:b7:87:67:
79:62:5e:b2:cf:f1:24:ea:e0:c2:e1:80:8f:96:1f:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:EE:F7:76:2C:58:3D:06:34:93:62:4C:F5:29:B7:2A:E2:CB:F6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Bdzu93YsWD0GNJNiTPUptyriy_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.151.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f5:45:89:97:27:a3:0c:25:ab:c6:ac:a5:37:56:16:aa:7b:
91:01:eb:df:c5:5e:2d:bd:4b:a9:fc:3c:97:e9:1c:a1:4d:c9:
e6:38:98:19:34:25:14:71:e6:57:ba:32:54:40:ce:1d:64:bc:
06:5e:3a:20:36:2e:9e:f3:05:2a:6a:55:19:e0:02:6c:9e:f1:
83:9b:95:55:5e:f0:39:33:ee:0c:ca:3e:8f:4e:5b:7e:07:85:
a9:69:1d:74:bf:04:15:e1:2b:6f:23:68:d2:67:59:ed:a8:be:
4f:0b:36:3f:98:60:31:49:4f:33:3a:84:7a:f1:6f:78:4a:d6:
79:ab:3c:6b:bb:e6:36:7f:2b:d6:48:27:7b:6e:c6:51:ec:ef:
fe:26:5a:f1:91:6e:9b:39:1f:46:54:68:d7:4f:84:5a:91:b2:
8e:6b:a1:90:d3:17:2b:ec:ca:e6:36:c3:9b:73:8d:88:08:b1:
13:d3:a2:1f:cb:d7:dc:ec:68:d2:26:c4:df:09:60:bc:d6:f0:
b6:61:c0:bd:c2:72:d8:66:64:04:07:74:a0:b6:d3:5f:50:4a:
a3:5a:44:5c:67:ae:f4:5d:33:f2:1d:58:8e:10:d0:cd:b1:00:
03:c6:e0:10:ef:22:c2:a4:3c:e5:b3:32:01:c9:43:76:c4:de:
05:19:8d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org