Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WkOGnZH_qnZL23TsxerNOoBJLWc.roa
File: WkOGnZH_qnZL23TsxerNOoBJLWc.roa (raw, json)
Hash identifier: Lz5OAEeFWhc1KItmkV7d3z9jE+t3zI6BhzmCeARbYu8=
Subject key identifier: 5A:43:86:9D:91:FF:AA:76:4B:DB:74:EC:C5:EA:CD:3A:80:49:2D:67
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01864021E5BA3C4EF1255B7CD8EA6DB4321D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WkOGnZH_qnZL23TsxerNOoBJLWc.roa
Signing time: Sat 11 Feb 2023 11:00:08 +0000
ROA not before: Sat 11 Feb 2023 11:00:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200194
IP address blocks: 188.132.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:40:21:e5:ba:3c:4e:f1:25:5b:7c:d8:ea:6d:b4:32:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 11 11:00:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a43869d91ffaa764bdb74ecc5eacd3a80492d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:b1:09:71:54:e9:63:d8:35:6e:70:66:1c:
91:56:ca:61:70:92:8a:66:99:fa:ff:1d:68:66:20:
ba:6a:16:df:19:b0:c2:ba:fb:73:31:99:db:45:20:
92:0e:75:ef:67:e2:7c:4e:64:cb:e9:4d:9f:c4:64:
bb:ec:0d:61:b5:35:70:59:2e:be:ee:e1:b4:bc:dc:
46:aa:17:7d:6e:e2:0f:76:38:18:0e:42:af:a8:83:
4c:d3:27:d4:ac:f3:60:72:1e:2c:d4:8e:fd:2d:61:
87:91:ab:3b:f5:eb:97:91:7c:a6:b6:91:8c:12:b1:
30:90:b0:3b:68:dd:05:84:b5:93:11:5e:75:26:d6:
ba:cb:b5:89:86:1d:65:1a:11:59:8e:30:ff:65:3c:
8e:e9:74:d1:00:96:c1:b4:d1:dd:3f:7f:40:93:bd:
2e:67:a6:33:50:f9:1c:99:e5:94:4c:52:ae:ed:ca:
b2:7d:8b:f9:a1:d2:92:9f:9f:aa:e7:9e:cb:3e:c4:
71:60:e4:96:85:f2:07:f1:66:2d:95:55:ce:ea:65:
61:04:7b:14:8d:77:0a:25:2b:dd:ac:31:fe:1d:e1:
26:50:f2:af:2d:e6:7e:be:32:66:60:16:32:b9:21:
28:20:e1:37:54:a4:86:ba:b5:50:18:d1:ba:4a:3c:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:43:86:9D:91:FF:AA:76:4B:DB:74:EC:C5:EA:CD:3A:80:49:2D:67
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WkOGnZH_qnZL23TsxerNOoBJLWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.237.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7b:82:ce:6e:c4:04:4b:a3:c4:e8:75:d2:e3:57:fb:8e:af:
64:9b:bb:81:4a:99:1f:d4:12:84:83:d0:a6:dd:52:14:e6:91:
db:5e:6e:24:06:e0:ae:a1:3d:97:6a:03:a3:53:a8:ed:23:35:
c6:76:f9:c5:88:fa:b7:a8:c4:f7:b9:e5:29:38:f1:e1:a1:cb:
00:fe:a8:27:93:96:ec:3d:e9:46:3a:f1:e9:d7:bc:74:d0:76:
b0:00:f7:d3:6d:dd:a9:a2:7a:1a:aa:b1:81:4b:b5:43:c9:ff:
29:21:0b:0f:40:82:44:05:26:97:5f:f9:8c:00:98:ac:90:0a:
20:25:d3:97:ed:40:39:de:23:5c:7b:d0:15:1c:ff:0d:ed:35:
07:6c:5d:e9:ae:7b:57:cb:95:06:87:32:06:75:87:17:1a:0f:
70:7d:34:4b:c8:a7:71:8f:85:b8:e3:82:35:e8:bc:0d:01:6c:
5e:76:b9:ec:a6:64:b6:c6:51:66:6b:9a:3f:3b:31:49:4c:f2:
60:b3:ab:f7:b0:17:e4:d9:9c:cd:2c:fb:94:b2:0f:91:64:e6:
33:2a:9d:bf:df:a7:de:a0:9f:f8:2c:86:27:0c:26:b7:dd:39:
cf:e3:9e:82:be:c5:6c:a5:80:c5:3c:51:90:5a:76:c2:05:54:
a3:2f:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org