Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/STwMUfw-4JGu3UkU1H2zENxHw4o.roa
File: STwMUfw-4JGu3UkU1H2zENxHw4o.roa (raw, json)
Hash identifier: gnALh3Gw/WkHjdG0Oe+Bl2r0d7aFu2HQW37e30jPCBs=
Subject key identifier: 49:3C:0C:51:FC:3E:E0:91:AE:DD:49:14:D4:7D:B3:10:DC:47:C3:8A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CA1E12E40B1A985CAABE2C0EE5EB69068
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/STwMUfw-4JGu3UkU1H2zENxHw4o.roa
Signing time: Mon 25 Dec 2023 16:48:58 +0000
ROA not before: Mon 25 Dec 2023 16:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199724
IP address blocks: 188.132.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a1:e1:2e:40:b1:a9:85:ca:ab:e2:c0:ee:5e:b6:90:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 25 16:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=493c0c51fc3ee091aedd4914d47db310dc47c38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:ad:31:ad:93:e1:ab:e9:a6:eb:71:25:56:
cb:a9:7e:f0:78:3c:c7:ab:2b:e0:38:d2:6f:92:49:
60:6a:bd:28:e4:0d:16:6e:b9:88:f6:68:fe:d8:a1:
4a:bd:f8:d1:23:d4:48:7c:63:e1:2f:c3:e0:40:fc:
0a:47:50:1d:8d:df:5e:a0:c7:fd:f9:e4:b1:65:c0:
39:a2:a5:d5:54:53:03:7d:be:92:15:2d:9f:b0:ac:
31:7f:1d:d3:24:e2:d7:cb:82:e5:79:21:ef:d2:1d:
7f:6f:c1:a7:c2:1a:99:1b:eb:70:ed:ef:b4:d4:fe:
b2:0b:c0:cd:92:d4:47:56:07:c2:c1:a7:11:af:c1:
8e:8f:f5:d0:4b:71:1b:92:21:6e:6a:48:73:6a:45:
83:b5:e6:9c:65:da:f9:96:65:cd:9a:c8:77:e2:ce:
f4:15:e9:7a:50:5a:dd:90:a3:44:9a:e2:63:b8:f1:
3b:da:8b:cd:28:2d:08:57:49:b7:a9:09:10:81:1a:
7e:58:38:d1:2f:e6:9f:a4:91:30:18:c3:03:aa:d5:
71:b2:79:89:0d:a9:14:9a:34:e1:45:ce:9f:f5:b7:
97:20:1b:9c:5c:78:aa:ee:a0:1f:e9:56:65:6c:a4:
ce:fd:cb:56:94:73:f5:64:35:97:bb:0b:bd:63:ef:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3C:0C:51:FC:3E:E0:91:AE:DD:49:14:D4:7D:B3:10:DC:47:C3:8A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/STwMUfw-4JGu3UkU1H2zENxHw4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b1:cd:04:74:bf:2a:05:8a:17:79:61:fb:54:02:45:b6:d6:
27:a5:17:48:10:99:cb:d1:84:4a:3f:d0:ec:87:f4:3c:75:98:
80:d8:90:55:26:6f:0b:e8:be:4f:6f:3e:53:0c:62:74:bd:4a:
ef:6b:0b:56:a4:29:8c:a3:cf:00:cf:b7:03:de:55:81:33:74:
a5:f5:ce:b1:13:cd:35:ef:73:f0:4e:16:9d:7f:fc:74:ed:14:
ad:00:3f:8b:3d:b5:ce:f2:41:68:8a:eb:b0:44:16:6e:16:5f:
68:e6:45:99:b3:33:44:03:78:fd:94:82:d3:cc:93:bc:2a:25:
ed:0d:cf:f4:26:0b:54:14:bf:9b:4b:62:b8:62:c5:28:02:32:
37:4c:f2:d1:34:c4:0c:44:16:5b:b5:dd:32:37:8e:9b:c3:52:
9e:5c:c8:a4:2f:82:81:cb:59:95:13:bd:28:67:e9:79:84:07:
2d:be:93:99:89:ee:b5:f7:d6:3d:d5:2a:5b:d4:01:e4:3a:b6:
bc:46:9d:3a:51:24:44:c3:d2:b6:18:be:f9:46:4d:4e:78:35:
9b:a9:c0:7f:fe:81:b4:47:27:17:45:4f:bd:aa:69:60:60:06:
2a:df:f2:fd:1e:e8:1b:6b:4e:f6:10:3e:13:56:f8:c8:ec:ad:
5a:e2:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org