Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/sg9KNoSS9NE-wJws-uHOYhPzE58.roa
File: sg9KNoSS9NE-wJws-uHOYhPzE58.roa (raw, json)
Hash identifier: BRzswhdzqTx8On7dkuNR7AGwwhi5FDE6XgJ7Qv/FGM4=
Subject key identifier: B2:0F:4A:36:84:92:F4:D1:3E:C0:9C:2C:FA:E1:CE:62:13:F3:13:9F
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019176A04DB63F2492D35440B3605705459C
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/sg9KNoSS9NE-wJws-uHOYhPzE58.roa
Signing time: Wed 21 Aug 2024 20:28:22 +0000
ROA not before: Wed 21 Aug 2024 20:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62442
IP address blocks: 188.240.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 09:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:76:a0:4d:b6:3f:24:92:d3:54:40:b3:60:57:05:45:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Aug 21 20:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b20f4a368492f4d13ec09c2cfae1ce6213f3139f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:0a:08:d5:d8:5b:18:77:62:08:d4:f0:d3:
64:1d:72:df:9a:56:a1:f9:bf:c9:62:cb:c7:09:66:
83:89:19:6c:f3:06:d1:96:55:05:a1:4a:1d:52:a0:
9b:df:cf:6d:42:b1:81:9b:0a:3e:f2:53:95:97:2c:
be:28:1d:91:ff:28:21:9d:23:72:d4:65:46:c0:2b:
88:d2:31:c7:f7:ad:c6:7c:0d:7e:5c:33:13:22:45:
60:d9:2e:41:28:57:9d:29:7a:0f:5f:19:95:f3:12:
0d:07:ad:a3:43:e1:95:5a:d8:89:5c:63:ca:9d:62:
fb:12:7b:86:ab:b8:99:5b:ba:19:f9:61:05:fd:bf:
8e:95:71:7e:39:4e:61:7d:d5:41:a5:8c:6a:2d:3d:
7c:13:15:73:ee:ea:1c:97:a1:6d:d8:bc:88:27:75:
bb:5a:da:38:1a:f4:9d:60:91:2c:35:f3:2d:1c:f3:
93:cd:9a:7c:5a:d1:4b:8b:69:9f:79:55:ad:27:10:
df:a2:3a:56:a7:eb:4d:95:dd:e0:c4:d9:26:a7:81:
02:96:5f:4b:7b:0c:d1:1c:a3:fb:25:f3:92:9e:a9:
37:fa:44:55:b7:62:6d:85:59:74:f2:9d:ac:cf:34:
57:1b:6d:82:cc:38:14:35:6f:0b:b1:5c:46:bd:9a:
c6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0F:4A:36:84:92:F4:D1:3E:C0:9C:2C:FA:E1:CE:62:13:F3:13:9F
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/sg9KNoSS9NE-wJws-uHOYhPzE58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:38:2f:7a:fb:77:c7:f8:0f:30:a5:80:dc:5d:6b:bc:03:44:
0d:e5:96:cf:b9:65:f6:20:93:c6:ff:f6:69:5d:d0:2a:e5:66:
c7:97:4c:69:20:37:b9:52:5d:64:63:70:82:76:04:86:1b:0d:
81:bc:2a:b4:3a:07:21:d3:b6:be:02:b2:30:a0:0b:94:31:f2:
42:93:ad:5f:e9:39:aa:f8:38:89:c6:f2:42:80:1e:83:56:39:
f7:1e:0b:c7:d4:c3:d3:d6:2c:ed:c4:48:73:94:b7:fb:20:23:
a0:48:72:e4:ee:36:38:25:45:8b:5c:45:4f:28:c2:c9:fc:3f:
30:99:bf:b9:94:40:05:c4:41:ca:ab:0b:09:59:2f:42:8b:1d:
a0:32:7d:58:ff:98:e9:36:65:77:a5:6d:62:bd:29:f5:40:ca:
90:64:6c:5f:27:cd:94:3b:a3:bf:56:c0:a4:be:e1:7b:d4:04:
72:12:2c:61:9c:a3:77:7b:0a:07:56:e9:63:73:b8:5f:2a:e9:
40:c2:c1:d0:eb:aa:2a:67:be:13:49:f3:b7:82:24:11:a7:21:
da:5a:b2:76:73:1b:99:32:64:d1:a7:c3:dc:80:6d:7a:62:49:
ca:c1:42:6e:15:fa:e0:69:6f:aa:d0:84:a6:21:d1:06:5c:81:
5f:23:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 10:00:35 2024 by rpki-client on console-fra.rpki-client.org