Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hZpu-u99cKbAoxACrnfRxU-zEwM.roa
File: hZpu-u99cKbAoxACrnfRxU-zEwM.roa (raw, json)
Hash identifier: Ud8z2/8De02l5eF1juewMuECF1sqQQDkZFLRpCzoY/k=
Subject key identifier: 85:9A:6E:FA:EF:7D:70:A6:C0:A3:10:02:AE:77:D1:C5:4F:B3:13:03
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01886CC451821143DB2D1ED2B4B2D7F3B236
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hZpu-u99cKbAoxACrnfRxU-zEwM.roa
Signing time: Tue 30 May 2023 13:06:25 +0000
ROA not before: Tue 30 May 2023 13:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198662
IP address blocks: 188.132.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:c4:51:82:11:43:db:2d:1e:d2:b4:b2:d7:f3:b2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 30 13:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=859a6efaef7d70a6c0a31002ae77d1c54fb31303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:a3:f8:37:e8:5b:86:69:e5:ec:e5:8a:19:
d0:6e:c3:1a:40:c0:b5:f6:36:08:2a:82:33:07:34:
11:4e:e0:6f:38:f4:0e:de:7d:8e:37:1e:65:5e:19:
c4:55:aa:61:8c:64:e0:e3:f0:52:c5:50:ed:9a:5f:
1d:ff:70:c2:64:ac:b4:ae:62:54:4c:83:82:cb:23:
25:a5:33:dd:10:12:d5:a1:d0:5b:9b:48:36:66:77:
74:07:25:34:a5:b4:e9:4d:ec:3f:94:94:62:2c:24:
9a:d6:bd:0c:d6:37:d3:af:0a:a8:94:d6:c6:bf:8f:
dd:8f:29:f8:17:4e:c1:66:be:6a:c1:58:48:f9:b3:
99:4c:0a:19:20:8c:b4:46:9a:69:79:c2:84:ae:5c:
11:2a:1a:ec:17:45:c4:d4:3f:4a:00:5a:54:1e:3d:
ee:52:16:b9:26:86:04:be:77:69:d9:a8:47:a7:52:
0a:af:95:fd:63:5e:5a:fd:43:f6:58:94:d5:3f:5d:
fc:42:e1:6b:9e:83:8c:51:9f:b1:12:e5:e3:56:8a:
d9:23:34:0f:c2:eb:00:23:74:5c:da:14:36:d8:01:
e2:de:cd:30:48:c7:5d:fd:70:6c:42:1b:c7:b7:4a:
53:19:f3:f5:94:dd:d6:b6:17:20:90:c5:31:92:24:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9A:6E:FA:EF:7D:70:A6:C0:A3:10:02:AE:77:D1:C5:4F:B3:13:03
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hZpu-u99cKbAoxACrnfRxU-zEwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.164.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c2:5e:ae:9a:0d:90:f2:c7:66:72:a6:2e:01:5f:1d:0a:ee:
85:47:16:76:3d:40:49:68:61:5b:4e:c3:f1:3a:08:13:4d:bb:
1b:98:0e:02:14:ea:6d:0b:70:80:ac:54:68:2f:ad:46:d9:69:
c0:72:fd:45:91:cc:55:53:3c:bd:06:1e:09:eb:67:10:4f:2a:
ed:07:fe:1a:af:65:08:ae:37:98:32:fc:08:80:07:61:5c:a2:
9e:88:d6:8d:cc:80:21:b6:27:62:1f:8d:87:92:d3:5e:79:0e:
3c:92:e9:3b:13:a0:2f:de:3a:91:0d:8d:6b:5d:53:fd:fa:e1:
4b:47:64:fa:c2:9a:f5:ef:11:ab:7f:ac:b7:02:07:36:c8:e8:
d7:12:42:c1:7a:2f:a8:c5:51:ba:ce:ce:30:a8:ba:60:9c:db:
56:56:66:2e:74:6b:6a:4a:5a:30:7d:63:7a:e6:37:3c:8a:e7:
63:db:39:60:6f:b8:a9:60:3a:2a:52:62:eb:9f:33:73:5d:e6:
05:de:f8:fa:a1:42:5c:37:4e:77:40:e7:46:18:1f:10:17:6b:
9f:9b:5d:c1:0f:2c:0f:d7:9f:cc:a9:fb:aa:b7:fc:aa:18:ac:
6c:98:72:dc:08:e1:20:7b:a0:5b:33:cb:7d:c1:05:cf:73:94:
ff:05:3f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org