Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bGJ6GvofZDhe1QOQNupgASvne3A.roa
File: bGJ6GvofZDhe1QOQNupgASvne3A.roa (raw, json)
Hash identifier: hXdeOgy0TB5nOQgipo+5MwHoqG/o/bWJeX0Jq+qYI3g=
Subject key identifier: 6C:62:7A:1A:FA:1F:64:38:5E:D5:03:90:36:EA:60:01:2B:E7:7B:70
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018C635B234A829C722D59B61A16DC4769B9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bGJ6GvofZDhe1QOQNupgASvne3A.roa
Signing time: Wed 13 Dec 2023 13:26:06 +0000
ROA not before: Wed 13 Dec 2023 13:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211804
IP address blocks: 188.132.129.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 09:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:5b:23:4a:82:9c:72:2d:59:b6:1a:16:dc:47:69:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 13 13:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c627a1afa1f64385ed5039036ea60012be77b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:bd:e6:67:09:26:2f:5f:76:3c:e2:8b:a4:
a5:28:88:c1:e2:e2:f8:ac:d5:c3:4e:02:04:77:de:
47:60:61:d6:59:22:ba:c1:7e:be:25:a6:ac:9f:02:
64:44:02:f3:62:c9:c1:c6:9d:79:8c:bb:de:fe:53:
e7:2e:8c:28:2c:e0:38:a1:a0:8e:2d:2a:91:ee:13:
84:70:eb:a0:23:96:77:7e:99:91:32:a7:7d:c8:27:
6e:4b:d8:e2:62:8f:71:28:50:64:00:ea:d8:1d:ea:
3d:2c:73:4e:57:1f:2d:70:d4:4c:cd:b0:9c:c7:62:
e5:16:fc:57:0f:ab:65:20:c0:a4:d9:f9:8e:7f:e1:
87:ca:47:51:55:5f:ae:63:e8:4d:7c:e7:8b:b3:03:
46:c6:e6:5e:2b:08:0b:9b:e1:4e:75:45:f5:30:74:
09:1e:be:56:19:ec:25:84:c3:90:99:41:50:46:e4:
ef:ab:f6:9f:08:03:d1:d4:a7:41:26:d2:89:35:c5:
15:70:93:db:1f:15:fe:4d:1d:b4:9c:06:4f:6e:a8:
c0:19:d5:9c:0e:4e:09:6d:1d:41:9d:fb:cb:02:78:
a5:7c:6a:56:01:3c:6a:9f:ad:74:fb:6e:c4:89:d7:
74:b5:52:1a:b4:8a:7c:f0:7b:b0:67:25:18:cc:8e:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:7A:1A:FA:1F:64:38:5E:D5:03:90:36:EA:60:01:2B:E7:7B:70
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bGJ6GvofZDhe1QOQNupgASvne3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.145.0/24
188.132.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:73:2a:02:89:53:b9:a9:da:9e:93:c5:f7:c5:5e:f7:4f:61:
3f:2f:e9:d6:c5:d8:22:81:22:df:6b:fd:13:16:84:ab:66:da:
1b:56:bb:ec:77:f3:b2:ee:e7:5e:a3:48:cb:28:68:e2:86:1f:
de:cc:6f:a5:dd:61:66:c8:bc:92:b1:c2:32:89:f0:ef:3d:b1:
ee:9b:33:59:83:d7:13:f2:aa:cd:11:98:17:e9:5b:5f:34:3d:
02:87:5f:1e:9f:90:4c:1c:ee:45:3f:94:20:17:ca:62:ea:e1:
12:0c:22:87:1b:24:65:af:f4:7a:ef:ec:04:23:e6:5b:3a:74:
e9:71:a6:9c:fd:45:03:33:9d:bf:4d:6a:b4:15:8e:4b:ac:d4:
7b:74:9a:1a:61:f3:29:38:7a:5a:87:37:b6:e8:42:08:52:c2:
ac:30:58:73:1d:37:2c:09:0a:cc:f5:14:62:a3:8b:49:dd:46:
bc:c3:39:f9:6e:2c:9b:25:85:01:51:b2:61:a5:95:f3:2f:f0:
f3:ba:d3:8d:08:36:c6:b1:6b:0b:66:95:b6:fc:03:c2:73:4c:
81:6c:db:46:e8:9c:60:8f:dd:36:1f:76:c3:38:8b:9e:e6:08:
3a:8d:61:1c:b1:e7:e3:c8:0a:40:54:13:27:83:dd:51:be:ea:
dd:7d:14:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org