Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SlVHHbyt-SrIVOt3OEjJmGY1lhQ.roa
File: SlVHHbyt-SrIVOt3OEjJmGY1lhQ.roa (raw, json)
Hash identifier: xESesUquWKMoul5KR7Y2JlM21xOGsR+a6UDk1CLDH8M=
Subject key identifier: 4A:55:47:1D:BC:AD:F9:2A:C8:54:EB:77:38:48:C9:98:66:35:96:14
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8C6CDCBAC9AF93AEF64F85C950C9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SlVHHbyt-SrIVOt3OEjJmGY1lhQ.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208425
IP address blocks: 188.132.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 19:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8c:6c:dc:ba:c9:af:93:ae:f6:4f:85:c9:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a55471dbcadf92ac854eb773848c99866359614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:35:f9:a1:fd:cc:60:6d:ca:ce:0a:9b:83:
18:f2:ff:26:93:6c:f5:ea:d6:ca:c2:ca:d9:c7:c9:
cc:99:51:ac:ff:b2:d0:8c:15:99:7c:69:dd:9a:07:
30:99:90:b0:55:dd:78:b4:b5:61:bd:5b:97:7d:23:
25:d8:8a:56:aa:8a:a7:d1:19:93:01:d6:f0:d8:98:
99:8b:8a:60:8b:11:9f:c8:79:2a:85:17:7f:55:31:
90:4c:db:71:7a:4a:27:db:45:2d:1c:d3:44:47:37:
bc:49:1b:96:46:27:a6:a5:dd:e6:36:56:fd:0b:6b:
d5:a5:0b:08:2b:80:3f:34:12:1b:0d:42:1c:ce:90:
9d:86:74:3a:cd:fe:27:bf:9b:2f:7d:bd:64:87:78:
8d:81:a0:78:16:86:76:c9:26:f1:d2:77:de:38:e2:
b5:30:ea:14:98:44:f3:67:55:49:9c:82:99:00:fc:
6f:f7:ca:25:52:18:94:fd:10:21:ad:fc:b9:77:34:
4b:48:c8:3c:b7:c7:62:c7:96:cf:e9:52:a3:7b:a2:
11:4e:d0:86:d4:13:71:51:33:af:e2:d6:49:7e:8b:
86:58:c4:b5:a9:19:b3:02:ef:f2:75:f4:f1:23:bf:
a3:46:f9:32:fd:4e:e8:43:6a:04:1a:bf:49:53:8d:
86:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:47:1D:BC:AD:F9:2A:C8:54:EB:77:38:48:C9:98:66:35:96:14
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SlVHHbyt-SrIVOt3OEjJmGY1lhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.128.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e3:ba:eb:08:f2:58:23:6d:77:30:f5:b5:a4:f3:91:3f:89:
e5:fb:b8:40:09:37:b3:65:99:c9:37:5f:2e:56:f8:dc:6d:b2:
2d:db:ae:07:04:5b:c0:42:61:e1:8f:27:d8:0e:3b:ac:4c:1d:
b7:b9:a2:a5:25:82:dd:72:97:ee:3d:57:38:c9:ba:95:21:0c:
a5:4f:78:af:29:1e:03:d0:67:e2:e9:79:c5:a4:b0:36:86:7a:
f7:38:f2:da:f1:a7:49:f1:0a:99:78:16:dc:2d:44:54:50:f3:
9b:08:f0:72:1a:ae:1b:46:28:bf:52:79:33:14:83:4c:fe:4d:
cb:1f:94:4b:da:3d:cf:27:67:22:d5:0a:1a:43:32:cf:20:dc:
b5:ee:b8:65:da:1c:be:b3:56:a5:ca:3d:a0:62:a2:7b:c1:26:
73:d7:0f:3d:15:90:05:7f:29:13:ce:ea:28:c0:c4:9d:9b:5e:
44:cb:8b:79:a3:7e:da:31:7c:d4:0d:13:5a:7a:06:65:ee:7f:
00:30:20:40:f7:42:62:8e:54:92:0d:5f:b3:a3:ed:8e:d9:b1:
05:8e:b9:3d:35:0d:df:bd:3c:3b:5d:58:23:64:41:6d:a8:c3:
60:20:1a:c5:2f:a4:98:03:6f:1e:12:b6:b1:69:62:cb:29:ac:
b0:25:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org