Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FgpLOXe76csr7HC-jF6TxeHn9LY.roa
File: FgpLOXe76csr7HC-jF6TxeHn9LY.roa (raw, json)
Hash identifier: PWHBMf/ZsjMGUltR2PowsNfUaG8ZMpePUuF0uNr7GcU=
Subject key identifier: 16:0A:4B:39:77:BB:E9:CB:2B:EC:70:BE:8C:5E:93:C5:E1:E7:F4:B6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0185A832465866ABEE15EE5C6A53BB02E661
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FgpLOXe76csr7HC-jF6TxeHn9LY.roa
Signing time: Thu 12 Jan 2023 22:55:45 +0000
ROA not before: Thu 12 Jan 2023 22:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205953
IP address blocks: 188.132.154.0/24 maxlen: 24
188.132.161.0/24 maxlen: 24
78.135.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a8:32:46:58:66:ab:ee:15:ee:5c:6a:53:bb:02:e6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 12 22:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=160a4b3977bbe9cb2bec70be8c5e93c5e1e7f4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:0e:aa:7e:a8:40:5c:23:e2:a9:bc:61:74:
ae:8b:7a:70:db:e2:1b:1e:de:82:54:07:4e:6b:50:
7f:4e:09:3f:af:09:08:60:cc:aa:bd:c5:51:4f:16:
bf:33:1c:4f:9b:6c:da:21:d7:de:7e:eb:f5:99:03:
dc:06:fa:27:80:2b:42:1f:f9:75:24:c8:cf:12:69:
36:b8:b0:ff:e4:0d:aa:5f:4c:43:41:23:d6:f7:d5:
c9:d9:f8:c5:ef:2a:97:88:86:41:e9:77:e5:a3:46:
f9:60:aa:7d:d8:f5:d6:26:2d:00:57:ea:b9:0f:8f:
79:a7:e2:eb:b0:77:5d:84:9f:ea:42:e2:a1:32:3e:
a8:d1:0b:7b:8e:c8:a7:89:82:cd:86:1d:10:05:78:
23:eb:92:bd:c9:9b:73:0c:7c:75:5d:55:48:ad:3d:
9e:9f:23:e0:36:34:a2:1b:0a:a4:67:bb:b6:3d:3d:
c9:9b:62:e3:78:81:59:87:1d:f4:94:eb:0a:5d:79:
09:62:c2:83:b4:d8:ac:34:3d:9b:c0:38:9c:fe:1e:
d3:81:9d:69:0f:0a:aa:d6:d4:25:88:49:39:46:2b:
72:32:b4:58:cc:77:b7:78:c2:d8:cf:96:a2:24:1c:
2b:db:bd:d0:a2:99:69:db:6c:5a:81:4c:85:ec:d4:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0A:4B:39:77:BB:E9:CB:2B:EC:70:BE:8C:5E:93:C5:E1:E7:F4:B6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FgpLOXe76csr7HC-jF6TxeHn9LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.69.0/24
188.132.154.0/24
188.132.161.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f0:c8:35:6b:4a:fb:a8:a1:a7:eb:c0:78:3d:87:7f:66:60:
58:ef:c9:46:b5:3f:af:9e:c7:47:67:ac:3a:bd:b4:63:76:48:
26:af:26:9b:1c:2c:68:a9:ea:06:7e:47:79:6e:4e:6a:e5:81:
4c:4c:02:5e:f1:e9:8f:8a:8f:48:95:40:86:b2:f8:b8:c6:08:
bf:06:14:78:42:cf:79:a1:b3:93:1f:bc:3c:56:e9:a8:08:b1:
22:2f:1b:1b:ac:10:23:03:04:1e:40:63:32:3f:74:d7:96:8e:
80:0f:32:80:3d:fe:23:c7:8c:48:80:ed:c1:20:8f:91:76:53:
93:7f:cd:80:d8:1b:5c:16:11:8b:55:c0:8a:1d:52:5b:15:26:
61:7f:20:55:85:26:2b:04:dd:cd:a0:91:8c:04:c4:f0:83:78:
eb:d8:7d:8e:75:28:30:3a:5c:07:2b:90:c1:26:4e:90:d4:c1:
30:4f:58:29:6f:c0:8d:86:7f:24:14:9e:fe:73:86:59:b8:05:
9a:c3:8f:74:6b:b1:5f:06:df:7d:94:4b:5d:c5:aa:c6:c8:c0:
87:f1:b3:fc:9f:ee:ff:7c:c9:dd:00:e8:96:29:84:de:3a:10:
5d:4e:22:a6:bb:5b:b9:d6:1c:d3:b1:cc:6a:6f:85:fc:79:e8:
fa:3b:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org