Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Jdy3qqCNq1hkfGxM_EKswRINQYE.roa
File: Jdy3qqCNq1hkfGxM_EKswRINQYE.roa (raw, json)
Hash identifier: pX8BFhMxtjVGJkMALwsMlPC3VHDiDq/92k7C9xEjOrs=
Subject key identifier: 25:DC:B7:AA:A0:8D:AB:58:64:7C:6C:4C:FC:42:AC:C1:12:0D:41:81
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01897838F99A911D534D06144C604A8316EF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Jdy3qqCNq1hkfGxM_EKswRINQYE.roa
Signing time: Fri 21 Jul 2023 11:32:27 +0000
ROA not before: Fri 21 Jul 2023 11:32:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197748
IP address blocks: 188.132.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:38:f9:9a:91:1d:53:4d:06:14:4c:60:4a:83:16:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 21 11:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25dcb7aaa08dab58647c6c4cfc42acc1120d4181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fe:0d:5a:72:f2:e1:56:02:cf:f3:e6:73:de:
0e:93:91:2c:ff:89:f7:0d:0c:75:21:c0:6a:b2:9f:
b5:8e:60:be:db:7c:e4:05:ac:af:25:1d:0c:d9:cd:
b7:a0:d0:23:e9:ae:dd:50:97:ae:77:86:6b:7f:66:
ad:06:93:02:5a:cd:ac:d2:74:9e:2d:3d:15:ef:04:
4c:44:a0:60:20:a5:be:49:a4:4c:30:c4:1d:3f:b7:
6e:6b:27:0c:bd:3f:29:a6:36:25:97:f5:8b:91:8e:
ef:79:a4:b6:a6:1e:23:a9:7e:c9:4d:36:12:9b:c5:
ab:24:ef:26:75:65:13:d3:93:40:7a:b4:27:4c:2b:
a1:e5:c5:82:95:65:0a:3d:06:a1:c3:1f:98:3b:0f:
c4:35:e8:2a:62:29:3e:12:32:12:52:6e:a5:1f:7c:
7e:59:00:73:51:ac:a1:0b:2e:47:0e:ad:d9:90:2b:
9f:b9:35:5a:ef:58:15:da:41:2e:86:e7:6a:6d:a1:
d0:ed:5a:eb:8c:39:eb:40:3a:d1:00:95:64:ef:c4:
b5:b3:98:a7:99:25:5c:50:bf:6c:0a:b3:a9:8a:15:
e0:25:30:33:2e:04:f9:28:94:b0:55:b0:61:64:de:
44:97:fd:85:67:b9:51:68:23:fc:66:eb:15:a7:16:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DC:B7:AA:A0:8D:AB:58:64:7C:6C:4C:FC:42:AC:C1:12:0D:41:81
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Jdy3qqCNq1hkfGxM_EKswRINQYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.141.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cf:79:ee:6b:6a:26:75:28:4a:46:82:c8:af:55:f9:8f:3e:
1b:03:43:75:05:0b:4c:30:30:11:02:59:75:ba:e9:2d:71:13:
07:3d:be:98:06:e1:ed:5d:f1:10:c3:95:4b:f2:ed:14:de:0a:
f8:54:67:39:e3:bd:46:b8:3d:60:9d:29:f9:5a:62:eb:ac:53:
7c:15:55:de:af:f6:f4:17:2a:27:d2:56:07:35:aa:89:80:38:
de:a9:40:fa:94:20:59:ec:de:e1:50:ad:b0:6c:93:ad:c6:27:
c2:de:53:3d:cd:a5:f0:6e:34:f9:72:82:e3:c1:6d:8d:34:4c:
a7:ce:b5:aa:5c:be:39:d7:12:4d:f8:a5:5e:9e:e6:8c:6c:ae:
97:d4:82:6b:f7:64:5e:65:db:ac:69:f3:b2:53:bf:c4:b8:3e:
6b:1c:17:74:8c:e8:42:ef:cf:e6:ee:77:c7:52:db:0d:06:65:
91:50:81:a0:34:72:13:02:b0:0f:a1:1c:b8:7a:89:0d:a1:4f:
03:02:d7:92:e9:4d:cc:9f:b7:53:20:5e:60:c7:6e:50:51:67:
4a:d3:65:41:b8:df:99:7e:e7:bd:72:6a:ae:ed:43:b4:4a:25:
0d:08:09:bf:5f:27:cf:b3:b4:e1:20:2f:39:26:bd:62:bc:f1:
31:ee:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org