Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Mb55tBcpNiFbWKgD5Hxlt9KEwqY.roa
File: Mb55tBcpNiFbWKgD5Hxlt9KEwqY.roa (raw, json)
Hash identifier: vmB2CT0+iaffjhOWQvdYB61aEH2QBEoFQjnEjFyc/qE=
Subject key identifier: 31:BE:79:B4:17:29:36:21:5B:58:A8:03:E4:7C:65:B7:D2:84:C2:A6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01886CCBA29BC9349DEE89DBB0182505153B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Mb55tBcpNiFbWKgD5Hxlt9KEwqY.roa
Signing time: Tue 30 May 2023 13:14:24 +0000
ROA not before: Tue 30 May 2023 13:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 188.132.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:cb:a2:9b:c9:34:9d:ee:89:db:b0:18:25:05:15:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 30 13:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31be79b4172936215b58a803e47c65b7d284c2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:4f:e7:32:73:f7:75:fa:fe:c8:a7:e6:08:
21:cc:56:b0:82:b2:59:b6:a0:e2:c3:38:b4:27:f3:
64:b4:c0:9c:8c:84:b7:28:99:48:90:a1:18:25:9b:
e2:e2:26:f6:e2:fb:47:21:00:1d:22:95:55:f4:21:
59:2a:4f:59:c1:e0:8c:8c:40:48:ca:5c:f9:ec:99:
85:63:ba:a5:64:e0:19:9e:6e:75:97:90:0b:aa:a1:
54:0d:bc:29:d1:da:b5:b9:03:18:aa:3b:50:c0:8d:
11:90:cf:a2:b8:70:66:2d:19:a8:ab:da:45:31:fb:
d2:87:d6:c5:ff:c1:69:e4:59:44:0b:87:69:a8:c5:
c1:4b:85:c9:14:b1:30:21:d9:cf:8e:72:37:08:bb:
1b:d2:9f:d8:9d:89:9d:ad:30:8d:f2:ee:f2:05:42:
cd:45:e2:7a:a6:c8:d0:ce:d2:05:4c:65:70:9e:6a:
4d:92:e6:3f:78:d1:e9:63:1d:30:e4:38:0d:6c:e4:
5d:68:88:c4:04:a5:73:45:cb:c5:0d:98:18:70:91:
05:66:bd:92:a6:bb:8a:40:19:20:4d:ff:f3:8d:88:
1b:e8:f8:0a:4e:be:8f:0b:28:2d:cb:2e:9b:3d:f6:
d3:35:2b:98:2a:6b:ad:b0:20:5d:6a:d9:be:1f:11:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:79:B4:17:29:36:21:5B:58:A8:03:E4:7C:65:B7:D2:84:C2:A6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Mb55tBcpNiFbWKgD5Hxlt9KEwqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.128.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3c:1f:00:04:c0:27:36:76:b3:e8:8b:fc:70:e7:51:41:42:
83:f6:cf:d5:e4:0a:e9:9c:5a:4e:95:c5:c6:23:fb:59:9a:3a:
ea:78:21:3e:30:e7:a2:ed:df:25:9f:5f:78:e2:b9:d5:cc:91:
fa:21:c2:77:c0:64:d4:fa:f4:e1:b3:1c:36:2d:ba:a9:92:de:
0e:41:ff:90:86:cd:4f:73:06:a1:22:7c:4e:ed:46:1d:4e:29:
61:1c:82:a3:1e:3d:01:24:e6:87:91:b3:2e:b0:1a:7c:10:da:
3a:e1:5c:12:c7:bf:3a:b7:12:77:18:77:78:2f:2d:29:40:33:
2f:3a:d6:f8:16:5a:41:e1:fe:63:a8:bf:2d:ad:8a:82:cc:f6:
fd:d4:21:ff:75:7c:5e:0b:12:42:10:3d:8b:29:fe:fb:fa:e9:
41:8a:d7:d1:04:f3:81:2b:22:36:6d:3c:a5:de:4c:da:0c:87:
68:79:fa:5d:95:b9:1e:57:26:37:33:79:27:39:77:5c:1e:14:
8a:3b:e1:6d:51:53:c7:8f:e8:a7:2a:e4:5e:af:95:89:43:99:
3f:5f:7d:75:26:a7:67:9b:8b:42:ee:ec:04:fb:32:d0:4d:3a:
48:f7:8e:fd:2e:d4:fb:80:f8:0c:a1:f3:3a:2e:71:6a:52:00:
4c:68:a1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org