Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/G-XQk57px3EWQBhGX6N0Ch5xMdA.roa
File: G-XQk57px3EWQBhGX6N0Ch5xMdA.roa (raw, json)
Hash identifier: 8oz7rQSy7eHFw4PI0cRTQWwforclO4hG3STfg9ujeI0=
Subject key identifier: 1B:E5:D0:93:9E:E9:C7:71:16:40:18:46:5F:A3:74:0A:1E:71:31:D0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7DFB47447B4E6F2754B56EF2DDB9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/G-XQk57px3EWQBhGX6N0Ch5xMdA.roa
Signing time: Tue 02 Jan 2024 06:32:19 +0000
ROA not before: Tue 02 Jan 2024 06:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56582
IP address blocks: 188.132.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7d:fb:47:44:7b:4e:6f:27:54:b5:6e:f2:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1be5d0939ee9c771164018465fa3740a1e7131d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:77:0b:d7:74:98:ed:c9:f6:15:34:f5:f7:
0d:20:f5:7f:17:f2:78:a4:6d:3c:4f:b3:ba:e6:15:
78:76:69:21:a2:97:e8:8c:42:fa:d0:cd:ae:63:59:
51:42:f4:3c:14:5d:a6:f0:aa:e3:a9:d3:65:42:14:
bc:75:e8:c0:c8:2a:11:bc:05:e5:5a:0c:1c:a0:cd:
48:db:95:2e:99:73:d6:0b:12:15:b2:7a:0c:4a:bb:
42:74:fc:e8:ad:54:e5:e2:8d:23:b9:5a:c6:28:05:
8f:11:1a:9c:ce:71:34:84:4b:c1:50:d2:d9:57:ee:
ca:f6:c5:8e:3d:7a:13:8e:89:8c:b9:dd:44:72:ca:
42:1c:10:fe:3b:88:74:bf:39:db:78:91:10:1a:c1:
7c:55:8f:9f:77:32:92:56:e2:ca:89:35:f7:11:9b:
d1:86:14:54:4b:47:fa:0a:3a:92:6a:6c:4f:b6:b7:
42:09:94:0a:bd:59:b9:37:c8:04:29:61:23:ef:aa:
1e:aa:df:d7:2e:4e:67:1d:45:5e:18:a6:73:14:81:
f1:a8:10:7e:86:17:a3:83:4a:aa:9a:26:b1:be:aa:
db:bd:5d:c1:e9:79:18:4c:1e:0c:c4:e8:02:9c:06:
29:80:d4:d8:fa:77:a1:ba:fc:36:6e:c5:c8:2f:0e:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E5:D0:93:9E:E9:C7:71:16:40:18:46:5F:A3:74:0A:1E:71:31:D0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/G-XQk57px3EWQBhGX6N0Ch5xMdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c1:78:da:56:15:b3:6b:fc:02:ca:d2:42:57:c5:7e:b3:40:
cd:b3:4a:e6:a0:f3:9d:b7:de:ba:8d:d5:a9:93:af:b9:6d:93:
18:d0:05:d5:f9:49:36:16:86:b9:9c:bf:b1:c0:29:e1:99:bc:
1c:61:ad:60:9a:e6:8e:a4:89:2f:aa:d0:ff:c6:27:a3:d9:de:
e4:5e:d5:52:5d:9c:df:8d:d3:4f:3c:60:22:d9:3b:ef:43:bc:
9c:88:cc:a1:ed:68:01:0e:32:5c:fb:ec:b1:43:73:09:94:00:
25:f6:a5:6c:b3:b4:aa:12:7d:ab:80:42:b2:43:a0:9a:ff:62:
fb:e1:a4:4d:8d:c9:c1:1a:9c:ab:12:79:42:7c:f4:72:bd:46:
a2:cb:fc:1e:80:df:31:1c:51:d5:17:23:77:6e:2a:d0:b2:82:
67:64:e1:cf:51:fd:d1:b4:70:12:95:e0:ef:71:ec:24:66:a4:
e2:92:d4:84:1b:c6:a3:43:11:df:23:4c:cf:84:3d:c5:e2:05:
52:55:07:0a:e9:46:ca:74:67:6f:1b:a7:94:09:15:8a:d5:7c:
21:fa:49:0c:e3:e0:a8:be:47:5a:df:4a:26:3e:95:71:1f:6b:
40:0e:75:8a:8f:28:1d:7a:ed:4f:32:ab:b2:a9:92:56:91:07:
22:06:ed:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org