Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YuGmM8SPcIAupeT0OdFg2S5CfZ8.roa
File: YuGmM8SPcIAupeT0OdFg2S5CfZ8.roa (raw, json)
Hash identifier: 3pEFWOaZyvnqf/fFp2rhu49unEdCkwDFMXZ1xTCV7Ow=
Subject key identifier: 62:E1:A6:33:C4:8F:70:80:2E:A5:E4:F4:39:D1:60:D9:2E:42:7D:9F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018AACB97602E2C948C85BB6512D12022D0A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YuGmM8SPcIAupeT0OdFg2S5CfZ8.roa
Signing time: Tue 19 Sep 2023 09:15:50 +0000
ROA not before: Tue 19 Sep 2023 09:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202561
IP address blocks: 188.132.221.0/24 maxlen: 24
188.132.222.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.167.0/24 maxlen: 24
188.132.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:b9:76:02:e2:c9:48:c8:5b:b6:51:2d:12:02:2d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 19 09:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62e1a633c48f70802ea5e4f439d160d92e427d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:8c:d8:a1:25:1f:ba:10:83:b8:3f:f9:16:
9a:b8:24:61:25:06:c4:a9:2e:e0:75:02:fa:d6:33:
b5:0f:42:5d:c2:2a:ec:47:2d:ea:70:ba:2b:95:c0:
02:26:1d:30:2e:92:ef:08:51:aa:5d:43:83:d3:59:
7b:a7:9d:62:da:ee:88:42:87:62:0a:b9:23:b4:aa:
36:93:0e:25:01:ae:d1:a7:b1:5a:dd:c9:5f:61:58:
4b:c5:80:11:8c:05:1d:b8:3e:49:83:20:c1:f4:49:
44:b7:c1:bf:67:ac:82:38:b1:dc:ae:7e:40:5a:1d:
f4:76:06:4f:66:8c:e5:5f:36:7e:05:2a:7f:14:13:
a6:db:0d:f0:f5:9e:f4:2a:e3:32:9a:2f:73:85:a4:
8c:88:39:be:1f:ef:23:8e:ce:0a:75:76:67:96:c8:
60:0a:9f:6d:03:73:e3:c0:06:f5:77:31:b9:4b:7c:
27:57:59:e8:d8:1f:c2:d8:d0:10:46:d8:5e:0d:9b:
4a:56:74:fc:5b:6e:6d:4b:7d:a4:f7:2a:c6:6e:04:
4b:10:0b:e8:8b:9e:7f:17:1e:76:4b:41:5b:78:df:
aa:39:e1:36:38:04:6a:06:52:f9:79:7e:99:59:a1:
ec:5c:b1:dc:50:db:cb:e0:c6:7b:9d:35:8e:b1:44:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E1:A6:33:C4:8F:70:80:2E:A5:E4:F4:39:D1:60:D9:2E:42:7D:9F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YuGmM8SPcIAupeT0OdFg2S5CfZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.152.0/24
188.132.167.0/24
188.132.203.0/24
188.132.221.0-188.132.222.255
Signature Algorithm: sha256WithRSAEncryption
63:43:e1:76:b9:20:3e:79:e7:27:d7:18:8d:f3:e4:4d:86:6a:
80:e8:36:01:a5:e8:6e:4e:ae:bf:e3:65:be:51:2c:af:2d:c0:
3f:1f:78:24:0b:61:7b:f8:23:20:40:4c:1a:89:1b:28:0f:20:
a2:fe:58:94:c7:af:72:10:55:27:ea:7f:dd:34:40:32:ef:91:
fb:2c:ac:f3:53:83:dd:ac:4c:a8:b8:2e:bd:b9:a6:d0:1f:ab:
c2:3b:60:c5:9d:5e:ad:2b:c2:6e:89:1a:3e:82:9d:8e:5d:9e:
8d:bb:36:91:26:20:04:9d:e1:ea:02:ba:a1:e8:0d:15:b8:2d:
a9:81:3f:dd:6c:42:08:09:d2:ee:5e:31:d6:1c:7d:55:77:d7:
51:74:32:c5:7e:d4:d3:d9:03:65:a0:57:93:13:19:1b:c4:31:
0b:cf:81:1d:d7:23:d3:c1:59:8c:bf:6f:b5:75:b1:57:00:62:
b9:5a:57:2e:8d:6a:59:9d:75:84:2e:6b:dc:d4:d4:84:ba:02:
c6:5b:08:cf:3c:f4:c5:87:b8:e3:4a:de:2d:5a:3b:ba:e2:28:
0a:89:58:9d:df:80:dd:4f:76:8a:22:b4:7f:30:c4:e1:75:1e:
f5:31:af:2e:3c:77:a1:7f:21:24:eb:51:ab:6c:e9:75:75:78:
f3:65:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org