Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zWPNXrkTTOOZ4cAJr_smbGJPJVQ.roa
File: zWPNXrkTTOOZ4cAJr_smbGJPJVQ.roa (raw, json)
Hash identifier: sRk42Ry7vHiv26kTUbzN4N8FvGO7Cr0qL0cC5DteaBQ=
Subject key identifier: CD:63:CD:5E:B9:13:4C:E3:99:E1:C0:09:AF:FB:26:6C:62:4F:25:54
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8308A7A4FDC7363986D7830F33D9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zWPNXrkTTOOZ4cAJr_smbGJPJVQ.roa
Signing time: Tue 02 Jan 2024 06:32:20 +0000
ROA not before: Tue 02 Jan 2024 06:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200075
IP address blocks: 188.132.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:83:08:a7:a4:fd:c7:36:39:86:d7:83:0f:33:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd63cd5eb9134ce399e1c009affb266c624f2554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:0f:b5:81:8b:2f:3f:fb:2b:dc:76:ab:06:
26:d1:67:a9:17:04:f4:80:76:61:a1:76:66:46:0a:
1c:3b:25:41:5a:45:cd:63:a3:21:d4:58:3e:01:f4:
3f:d7:e5:28:f3:d1:fa:cf:bd:52:c7:fd:10:60:d3:
14:b1:20:93:c9:4f:cb:2a:34:fc:25:48:1c:c3:2d:
cd:8d:e2:19:c8:af:22:5f:7b:a9:2b:16:ca:ee:4f:
66:30:b1:78:4f:d9:41:a7:e2:e2:87:16:71:0b:4a:
49:d7:41:9c:59:46:b3:97:02:b7:e4:05:77:8f:0b:
9b:37:30:d9:26:22:e5:9e:8e:d3:ff:90:e2:37:36:
0b:f5:71:4b:1c:b1:76:26:df:ba:ca:75:23:ce:6f:
6e:6b:14:ec:e9:22:05:26:27:9b:f4:64:6e:f0:eb:
1f:5e:0d:cc:1d:54:06:2e:55:f3:4a:6c:cb:39:f9:
5c:6b:06:c2:e8:d9:b6:17:1b:89:15:79:2f:e8:65:
b7:d7:35:1f:3b:b9:ad:5b:43:71:60:4e:59:41:0f:
ee:a9:f2:2b:52:a1:f1:02:81:6a:ca:1b:87:d7:39:
fd:ec:c9:96:d5:d4:a4:5d:56:02:68:a7:f3:d9:20:
90:db:11:8a:80:da:af:9b:30:fe:67:0c:5b:fe:93:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:63:CD:5E:B9:13:4C:E3:99:E1:C0:09:AF:FB:26:6C:62:4F:25:54
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zWPNXrkTTOOZ4cAJr_smbGJPJVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:25:1f:1c:f7:60:ba:f8:0c:94:0e:09:f2:6a:99:bf:88:cf:
ba:e7:60:9e:e6:ef:f2:41:b8:50:5b:d4:c8:a0:ab:ec:c0:0a:
4e:70:2d:be:ad:21:9f:3f:14:2c:0e:82:90:62:bf:14:47:bf:
b5:d2:ab:62:25:cc:ba:b5:ac:14:d6:bd:53:e9:a6:75:e8:de:
fb:1d:60:40:c5:2f:48:62:74:2c:6b:75:63:c2:32:ce:49:d5:
51:f7:2c:8f:de:08:57:1d:62:45:2f:bf:ee:f1:76:7f:bc:51:
c7:22:d1:32:9e:ea:c7:5a:2d:21:a3:be:80:f5:32:61:d8:28:
1e:5b:1c:e7:f8:9a:54:da:25:97:d0:ef:aa:b7:0d:71:8a:eb:
66:81:1b:05:c4:2d:07:85:05:57:16:36:da:ce:fb:b3:41:6c:
25:93:4e:a6:a5:ef:77:23:38:3e:b7:ac:58:94:e5:9e:30:30:
d0:35:4a:44:5c:15:24:d6:38:87:97:87:21:fe:a5:0a:41:8d:
4d:98:29:99:df:96:ed:29:d2:a8:c0:32:78:77:c7:22:8a:38:
ab:69:b8:1b:a7:8c:7b:3f:9b:2c:5d:da:67:24:1a:6e:8a:b3:
b1:20:cf:63:ff:89:d3:ad:e4:c9:cf:ac:d8:99:0d:cf:46:cd:
b3:38:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:19 2025 by rpki-client