Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/dgasdTmb5Fbc0Ys-7GHb9as77fg.roa
File: dgasdTmb5Fbc0Ys-7GHb9as77fg.roa (raw, json)
Hash identifier: GkGv3YA+btcGDj6y8yS4n+G2Fte+GKC99PkGzgz++MY=
Subject key identifier: 76:06:AC:75:39:9B:E4:56:DC:D1:8B:3E:EC:61:DB:F5:AB:3B:ED:F8
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018BC7ED453337C1A7530EA1312A800C7319
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/dgasdTmb5Fbc0Ys-7GHb9as77fg.roa
Signing time: Mon 13 Nov 2023 09:04:57 +0000
ROA not before: Mon 13 Nov 2023 09:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211804
IP address blocks: 188.132.129.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 13:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:ed:45:33:37:c1:a7:53:0e:a1:31:2a:80:0c:73:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 13 09:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7606ac75399be456dcd18b3eec61dbf5ab3bedf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:17:17:5f:e0:ae:61:48:e8:40:a5:b5:fc:
a4:2a:d0:bd:99:03:f6:8f:ec:a5:84:da:59:e1:ff:
29:83:a1:29:12:45:93:5f:a5:d0:fa:ca:75:6c:72:
9b:8e:a5:d0:e4:c4:01:35:66:05:da:f6:1e:84:99:
6a:15:14:34:80:ee:f8:96:ec:ed:40:18:32:28:17:
98:46:f0:e5:52:ca:03:cc:a3:6b:84:92:08:66:4a:
ab:a1:88:6e:6d:1d:cb:6d:43:65:b7:9b:de:f7:84:
00:ed:56:4d:1e:f4:76:a2:98:5b:34:b7:e9:5f:6d:
69:50:02:d1:19:ef:4a:0d:c8:f3:88:e7:ea:47:48:
ad:be:6f:4b:fe:42:47:41:91:a3:a7:91:17:62:2e:
13:8f:59:49:b2:2b:b4:9f:97:d4:4c:9b:a4:75:f6:
23:ef:62:17:f3:e3:5e:c5:45:74:ec:0a:c2:65:6a:
f9:7f:43:29:54:66:84:87:aa:1d:1c:17:9e:76:a5:
13:35:8e:49:c0:92:67:d7:73:fb:e3:35:55:49:cb:
0d:9a:12:1e:9f:6c:52:5d:11:bc:b4:15:17:0b:ea:
09:57:3d:63:93:4c:c0:28:37:89:ff:f5:b9:bb:1d:
ab:5f:a8:c3:99:3a:38:7c:e7:f0:51:71:70:58:2e:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:06:AC:75:39:9B:E4:56:DC:D1:8B:3E:EC:61:DB:F5:AB:3B:ED:F8
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/dgasdTmb5Fbc0Ys-7GHb9as77fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.145.0/24
188.132.129.0/24
188.132.153.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8a:9c:95:42:f6:7d:d8:7a:3a:39:47:51:2c:90:8f:2b:28:
72:1b:00:40:b8:d3:1a:09:80:21:7b:11:10:70:8e:19:4d:f5:
80:c8:26:3b:17:54:66:b5:b2:11:50:97:14:51:6a:2a:27:86:
0c:97:aa:14:91:57:92:c5:19:92:59:5d:67:14:1c:28:15:34:
76:13:cf:2d:77:02:11:d8:da:5f:78:17:2b:93:8b:d2:e9:2b:
83:84:d8:f4:ea:22:a6:0c:eb:72:a8:22:bf:3c:47:cf:0c:a7:
df:3e:e2:16:d4:7b:b6:5b:e7:06:e1:a0:67:cc:a3:20:63:89:
6b:2e:53:52:e6:59:b9:fb:72:ab:83:3a:9b:56:61:ed:01:ac:
75:ce:de:16:c6:0a:46:12:59:c2:a5:d3:b6:fe:ea:ec:cd:70:
e9:ce:48:a8:df:c9:93:ae:ff:38:e5:f2:bd:63:90:da:ee:81:
cd:8f:3b:0a:c6:20:69:65:8b:e8:2e:20:fa:f2:7d:8c:6e:14:
05:4a:f7:55:95:d4:da:32:26:67:d9:99:62:d6:c5:76:4a:af:
0b:87:f7:db:d6:08:5b:0d:e0:e9:bb:00:43:dc:cc:3b:9a:b6:
48:79:79:5d:6b:07:56:5f:78:85:12:80:1d:08:1b:a1:d7:4b:
a6:ed:4b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org