Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GneyWIap8RUQ4oo1FJUqINxBHI8.roa
File: GneyWIap8RUQ4oo1FJUqINxBHI8.roa (raw, json)
Hash identifier: vEeIfQ4l2ccUSzgeJU6n8OpOOYS7SaOEBnen7o1OXG4=
Subject key identifier: 1A:77:B2:58:86:A9:F1:15:10:E2:8A:35:14:95:2A:20:DC:41:1C:8F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018C87A73BD140347DF127310F91DC35CFB5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GneyWIap8RUQ4oo1FJUqINxBHI8.roa
Signing time: Wed 20 Dec 2023 14:35:33 +0000
ROA not before: Wed 20 Dec 2023 14:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199724
IP address blocks: 188.132.151.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Dec 2023 16:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:a7:3b:d1:40:34:7d:f1:27:31:0f:91:dc:35:cf:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 20 14:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a77b25886a9f11510e28a3514952a20dc411c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:c8:d8:79:b8:81:9d:9c:5e:c1:ac:f4:ed:
79:b7:5e:d8:4e:d0:9f:88:6d:f0:2e:72:87:eb:91:
c1:88:fb:4c:ae:4b:b9:6f:af:20:83:78:6f:aa:07:
b0:3b:17:52:d0:a7:3a:ff:8b:c2:cf:e7:a2:62:56:
5f:67:f8:39:8b:1f:ac:24:4b:cd:fb:9e:61:65:39:
e6:88:0e:11:92:86:6e:2f:7c:91:1f:24:b6:e1:02:
58:03:58:62:35:d1:7a:18:85:c9:1e:92:c2:64:a5:
1c:92:63:a9:f2:2f:74:33:e0:d0:c6:d3:68:02:3e:
86:9c:1f:5c:d5:7a:92:00:e0:ef:62:4c:99:06:71:
13:29:a1:dd:5b:ec:dd:ac:5f:7c:68:31:87:8b:6a:
ad:68:0e:d6:a1:14:04:53:f2:2c:45:92:ea:7a:d0:
ee:8b:44:c7:af:92:8c:fd:fa:31:31:61:fe:6b:b1:
92:fe:57:59:38:bd:80:29:14:0e:f9:ae:89:b6:95:
97:10:3f:61:cb:b6:fe:98:1f:70:cc:38:a8:f5:35:
ca:5c:ae:2f:1a:9f:93:c1:a8:ca:2f:29:c9:54:d7:
89:9d:9e:a4:97:b0:cc:4a:b6:f0:fe:f9:9d:a0:cd:
cc:d8:79:d4:f0:c3:0d:58:e7:a6:95:e2:4e:fa:b8:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:77:B2:58:86:A9:F1:15:10:E2:8A:35:14:95:2A:20:DC:41:1C:8F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GneyWIap8RUQ4oo1FJUqINxBHI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.151.0/24
188.132.199.0/24
Signature Algorithm: sha256WithRSAEncryption
41:78:a3:e7:f9:85:4f:ee:30:42:5e:3b:45:a1:c9:b1:43:1b:
26:ff:14:96:41:1e:11:12:2b:8e:36:1f:50:74:73:4e:11:e3:
7f:1a:15:5a:3e:04:65:7b:e2:c0:aa:66:57:e4:e6:30:ab:81:
6b:cf:e1:77:c0:46:38:41:2b:2f:d2:82:18:0b:ee:9a:d1:e7:
d5:af:71:56:68:53:e9:6d:95:50:64:8a:0e:9d:39:be:25:0c:
38:a0:c2:bc:bd:c0:f6:d2:c8:3b:81:4a:e7:92:eb:9b:73:78:
57:80:f4:4d:1b:0a:7f:c3:2f:f7:ba:38:ab:20:66:6f:83:1a:
d6:36:b0:c4:39:5f:4c:a4:f5:8c:96:3e:2d:f8:65:55:66:da:
10:ca:38:1c:00:96:0d:37:b5:11:67:20:ad:67:b6:b5:8d:4f:
46:16:d9:d2:ca:50:f2:00:6f:fd:8c:f5:7c:02:ed:c8:3a:c9:
be:ac:d8:d0:44:77:74:a8:b4:a0:88:67:06:50:88:a4:76:58:
ec:da:79:bf:18:6f:57:ec:62:a2:4c:eb:4a:68:ec:72:ac:36:
7c:e5:6e:52:f6:8a:97:82:3c:44:06:0b:84:e3:29:25:fd:35:
72:f9:55:cb:b0:37:8c:81:de:91:4f:3e:86:c8:fe:3c:0c:b4:
56:33:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org