Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/cc08JsTrCu_2sbTZOvdzhcfPwh8.roa
File: cc08JsTrCu_2sbTZOvdzhcfPwh8.roa (raw, json)
Hash identifier: NvHuRRncovYvRmi/HZ2rjr72otleGbnZdFa2wyHk33g=
Subject key identifier: 71:CD:3C:26:C4:EB:0A:EF:F6:B1:B4:D9:3A:F7:73:85:C7:CF:C2:1F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01867FC22E06B25E9AF7250D6037DC1D25F4
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/cc08JsTrCu_2sbTZOvdzhcfPwh8.roa
Signing time: Thu 23 Feb 2023 19:31:17 +0000
ROA not before: Thu 23 Feb 2023 19:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211804
IP address blocks: 188.132.151.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 13:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:c2:2e:06:b2:5e:9a:f7:25:0d:60:37:dc:1d:25:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 23 19:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71cd3c26c4eb0aeff6b1b4d93af77385c7cfc21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:47:fa:d0:41:03:e5:d5:e4:08:83:82:79:
ba:91:9b:a0:9a:36:09:6a:d1:d0:76:63:ac:8c:7d:
67:f7:12:af:af:6c:1e:7c:c1:b4:8f:08:f6:bb:9b:
a1:b0:50:c2:29:61:ba:b4:80:3f:e4:a7:3f:15:f7:
b0:01:87:3c:8a:61:0d:7f:23:43:80:44:e8:a1:f9:
fe:87:56:a7:c0:1d:32:19:0e:dd:e9:87:26:b8:61:
93:63:a2:a1:ad:c3:f8:54:04:56:c0:58:a7:b4:65:
c9:39:fc:a1:72:cc:90:5b:33:40:58:af:1b:14:9f:
50:dd:dd:e2:54:3a:6b:7e:a9:6b:86:80:19:a8:91:
ff:8a:1e:06:03:9a:a1:c7:48:ba:f7:d3:d9:91:fd:
78:53:98:90:81:2c:05:b2:bf:3a:3e:59:79:e9:66:
b3:43:ec:c6:d0:ce:1b:41:0b:75:a7:71:72:75:76:
40:0b:2a:5f:3c:fc:02:90:85:a5:ea:b7:5b:8e:26:
4d:46:61:f3:3c:0c:41:a9:f0:5e:de:22:dd:02:1e:
7c:27:ff:84:b6:a9:1b:b3:56:be:4f:1e:42:2a:83:
c5:ba:05:bb:1f:87:e6:30:6c:6c:f9:b1:98:c8:05:
8f:97:9d:94:78:fd:9a:93:bd:c8:eb:84:d4:dd:38:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:3C:26:C4:EB:0A:EF:F6:B1:B4:D9:3A:F7:73:85:C7:CF:C2:1F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/cc08JsTrCu_2sbTZOvdzhcfPwh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.151.0/24
188.132.168.0/24
Signature Algorithm: sha256WithRSAEncryption
07:41:52:67:d5:f7:bb:44:07:e7:e6:31:59:63:f4:11:43:d3:
1f:6f:b0:00:4f:75:b0:78:49:5b:00:30:89:31:c3:68:c3:8f:
b0:b6:cd:ab:3a:79:06:89:e6:0f:4c:81:12:51:c9:41:57:57:
e6:0f:e1:ab:6c:b5:7c:fe:a5:b2:8c:17:5f:2e:44:68:cf:0c:
29:f3:d3:19:7c:6d:25:de:fc:17:62:ac:30:f3:01:43:8a:63:
3b:7a:39:cc:19:5a:a6:5f:16:4a:b7:f4:82:51:08:1f:6e:cb:
0f:bd:84:bc:15:42:33:f2:c5:da:f1:2b:56:ba:6c:ab:d0:75:
3b:85:1f:7c:85:d3:a9:46:2a:b8:a7:cf:8f:9a:31:8f:e8:13:
e8:c9:81:d9:13:e5:d2:29:c4:62:7b:ba:6e:1c:63:53:cd:a9:
23:41:d1:7b:1c:19:05:cd:66:d5:a5:26:5a:54:54:d1:04:d1:
50:57:72:77:ff:ef:7b:51:ab:d2:d4:c6:f2:df:64:ca:e5:fb:
aa:73:29:7d:39:6a:d4:be:a6:65:44:b4:98:cb:09:88:2a:6b:
12:25:dd:5d:b1:51:36:a3:ed:d6:e1:81:a3:4a:28:7b:49:98:
26:4c:43:5c:9d:f7:86:d9:ec:de:01:c7:00:b5:ad:a2:5e:fc:
dc:cf:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org