Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HXu3r54ANu5iFz3Vp9NYc0Neg7M.roa
File: HXu3r54ANu5iFz3Vp9NYc0Neg7M.roa (raw, json)
Hash identifier: 5IEtl6Zy+i/V6q8ruo9i7CnkXAbwpvyzSbDKglmpS2g=
Subject key identifier: 1D:7B:B7:AF:9E:00:36:EE:62:17:3D:D5:A7:D3:58:73:43:5E:83:B3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01876A8BD909E276BC87FF337CE9128B8020
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HXu3r54ANu5iFz3Vp9NYc0Neg7M.roa
Signing time: Mon 10 Apr 2023 09:42:42 +0000
ROA not before: Mon 10 Apr 2023 09:42:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199100
IP address blocks: 188.132.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:8b:d9:09:e2:76:bc:87:ff:33:7c:e9:12:8b:80:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 10 09:42:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d7bb7af9e0036ee62173dd5a7d35873435e83b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:ba:62:d8:4c:71:f4:4a:a4:f1:33:c7:d5:
c8:66:aa:a2:a2:f0:b1:30:c3:36:d9:39:8e:80:a3:
69:10:20:97:1c:a7:18:f0:a0:d4:1c:2b:8b:ca:16:
1c:8d:62:83:ef:d5:b8:a6:20:a3:76:da:d5:cc:5a:
10:d8:2d:1b:97:4c:15:52:20:7e:94:38:31:2c:5d:
8d:60:46:0b:22:4b:59:15:25:08:d7:da:63:6d:a7:
28:8a:d2:04:e5:ad:75:92:50:86:3d:95:09:3d:af:
ae:88:3d:8d:34:60:8b:3e:30:38:02:a3:37:50:ee:
92:03:25:68:c9:c6:0f:5c:b8:15:45:45:3a:57:1e:
48:61:9b:99:d5:00:71:97:f2:e8:6e:06:fe:ec:3d:
61:d8:39:80:dc:cf:27:5e:78:6e:df:f2:c2:01:e4:
09:80:dc:3c:2d:57:cb:a2:05:88:45:b1:5d:06:a8:
f5:ba:9c:69:00:1d:e9:23:65:57:f3:04:e6:b6:6f:
35:ca:30:ae:b6:b3:74:33:24:9a:c8:63:e2:0f:5c:
91:6d:95:21:e2:a5:2e:cf:30:1c:89:e3:ed:78:ba:
61:99:7c:71:e7:99:08:88:51:3a:4c:43:a5:3a:e6:
ea:24:a5:38:17:65:fb:cf:b8:c3:d1:67:ee:70:80:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7B:B7:AF:9E:00:36:EE:62:17:3D:D5:A7:D3:58:73:43:5E:83:B3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HXu3r54ANu5iFz3Vp9NYc0Neg7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ca:7f:b5:04:38:47:b5:62:07:65:fa:27:2d:d4:4a:71:00:
4d:9b:d8:0e:88:c5:fb:a6:7d:bd:24:53:66:79:99:ca:2b:f2:
3e:f8:30:18:73:02:49:8d:5f:b4:12:95:4c:73:a1:1f:bb:8d:
6b:61:fb:49:43:d6:f6:de:e2:25:47:9f:7d:72:2c:10:85:f7:
6a:37:fa:77:29:c2:7c:98:4a:87:a5:19:9e:f1:6a:e7:b5:92:
96:d4:51:d1:e7:87:31:b3:c3:55:8c:91:b3:be:e9:ab:c3:3d:
78:85:c2:0d:ad:fa:fb:4c:5e:bb:a1:85:89:54:5f:89:3b:7b:
80:24:74:c4:c7:e8:39:5e:14:04:78:a9:f7:3b:a8:cb:65:3a:
37:dc:1c:bf:4f:02:17:a7:eb:1f:a3:28:4c:52:02:f7:9b:3a:
34:c7:1a:fe:bc:d6:55:04:c4:45:8e:5b:66:27:18:77:20:6b:
2a:45:fd:0e:11:15:c4:33:20:38:5f:ef:32:12:7e:69:0e:59:
76:0c:1c:c3:43:e9:ad:7e:a1:72:dc:79:42:77:04:b7:88:1e:
fd:69:64:c1:e9:91:d1:d9:c2:1e:02:0a:05:4f:f4:21:87:66:
c5:95:d8:52:98:67:f0:de:99:d8:76:c5:e9:a6:63:1d:63:a9:
bc:b7:72:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org