Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OsOGQ5USdr3qk84vNcmcw9IKeKk.roa
File: OsOGQ5USdr3qk84vNcmcw9IKeKk.roa (raw, json)
Hash identifier: PRWwLjm89nev4AlSHcZGmtQndiX9Jd/aJSPGWfVqKIY=
Subject key identifier: 3A:C3:86:43:95:12:76:BD:EA:93:CE:2F:35:C9:9C:C3:D2:0A:78:A9
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570028DED900F1E68237EC33D76B947E0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OsOGQ5USdr3qk84vNcmcw9IKeKk.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201575
IP address blocks: 188.132.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8d:ed:90:0f:1e:68:23:7e:c3:3d:76:b9:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ac38643951276bdea93ce2f35c99cc3d20a78a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:69:a4:e9:2f:48:58:f9:14:92:8f:db:d5:
1f:b8:ff:f4:12:a4:74:3e:02:0b:2b:d4:f7:5e:9f:
61:1d:e5:5c:57:df:01:a7:03:8e:d4:53:73:0f:07:
f4:a6:ac:94:06:37:e8:b8:e7:4b:7d:8a:b1:83:81:
34:a9:f8:26:15:5e:24:6b:a1:ab:a1:f2:34:7c:64:
8d:10:da:12:c4:5d:9a:ee:ce:63:e7:d1:87:38:ad:
9f:b5:db:6d:5a:53:ad:95:fa:e5:78:31:73:30:f5:
41:5f:3a:87:ae:3f:17:97:0b:18:d1:1b:3b:b1:da:
6a:94:3b:0f:81:4b:f9:00:3b:0f:81:39:0f:c0:4f:
80:93:54:19:d2:4b:59:0d:44:a4:68:fe:e1:da:42:
2a:96:c0:55:56:ad:33:95:c6:c5:8c:f3:58:a1:69:
7d:b6:17:6d:15:2e:51:17:cc:ce:55:21:ce:e4:da:
f7:db:4f:e0:50:81:c4:77:49:6d:a2:e6:35:5b:f3:
4c:1f:63:6b:e1:1a:d2:e9:56:6c:c9:f7:64:3f:8e:
b8:bc:03:d0:ad:37:58:f7:7c:e6:6c:83:a9:95:53:
3b:ee:2b:72:75:d8:0f:be:2c:78:73:29:93:47:d0:
9f:ee:12:00:31:0b:27:a3:c3:61:96:ea:36:5a:04:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:86:43:95:12:76:BD:EA:93:CE:2F:35:C9:9C:C3:D2:0A:78:A9
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OsOGQ5USdr3qk84vNcmcw9IKeKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.192.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1e:9d:eb:4f:4a:46:ce:34:f5:36:f6:6d:4b:12:57:e9:2b:
c6:94:df:6b:7e:7f:c8:8e:30:22:cb:07:2b:be:a7:c0:4f:e3:
3e:13:94:fe:64:5e:92:34:70:74:3c:d6:00:8e:7f:6c:da:37:
3b:98:6e:79:7d:c2:31:39:38:09:0f:87:f6:36:ee:e3:a9:a1:
ec:2b:21:2d:da:b1:81:13:52:05:5e:7b:bf:43:f2:29:de:de:
98:ac:04:11:d7:fc:9a:cc:f7:57:cc:1d:c2:28:06:32:b1:67:
f5:ed:74:45:01:3f:3b:e4:2e:2a:9e:bf:73:19:25:9d:b0:e8:
82:81:e3:01:0a:02:1d:8e:1a:7d:58:d5:d9:c3:97:e1:b4:d6:
81:96:f0:b6:0a:85:23:d2:a1:6c:53:5d:ce:a1:f4:3f:3b:a8:
f9:f2:a9:fb:8c:a6:3a:a5:14:cf:de:65:a8:de:4c:fa:d9:57:
49:0c:80:54:1f:e4:1d:63:f5:ea:e9:d6:56:62:86:47:2f:7c:
b7:87:dd:18:d7:21:64:6a:e9:dd:b2:6b:f0:4d:ef:fa:dd:87:
61:cf:ed:b7:18:df:7e:80:6a:f2:55:7d:db:21:38:59:2b:16:
fc:e4:93:70:92:99:0b:84:2f:37:7e:ad:1d:47:e5:60:4f:c0:
5d:01:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org