Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/v9GXGdAcHIm87kg40WppVkGAsRI.roa
File: v9GXGdAcHIm87kg40WppVkGAsRI.roa (raw, json)
Hash identifier: mhOhQWrXqPYuc7NbRSmc8Dozm7hMEksz4+MNvoLSv9s=
Subject key identifier: BF:D1:97:19:D0:1C:1C:89:BC:EE:48:38:D1:6A:69:56:41:80:B1:12
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 0185728370622B70EC3F37691CA7807C8C76
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/v9GXGdAcHIm87kg40WppVkGAsRI.roa
Signing time: Mon 02 Jan 2023 12:44:54 +0000
ROA not before: Mon 02 Jan 2023 12:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47540
IP address blocks: 188.247.128.0/24 maxlen: 24
188.247.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:70:62:2b:70:ec:3f:37:69:1c:a7:80:7c:8c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 12:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfd19719d01c1c89bcee4838d16a69564180b112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:fc:b0:3f:d9:59:c4:17:9c:a2:b0:39:9d:
4d:91:22:1a:4e:5f:05:12:8b:31:03:05:58:d3:65:
5b:8a:ed:91:9f:af:94:e0:39:32:05:76:81:a9:c8:
9d:84:b4:88:05:5c:e6:9f:ae:d9:37:b6:31:86:ca:
fd:45:15:32:52:e5:b1:1b:77:fe:74:56:cd:64:68:
69:a4:94:25:b1:33:46:60:c6:33:79:bf:ba:6d:0d:
78:1c:e9:77:3a:e4:36:db:0f:3e:b6:c4:a7:e0:c7:
08:9b:e5:d6:a5:44:6e:45:7f:f2:4e:10:15:0c:4c:
31:81:34:c5:90:62:4d:6e:58:17:d0:d0:bd:2e:84:
a7:d2:ab:ec:a0:5a:b0:05:f0:4a:8a:e3:fa:7c:95:
f7:8d:4b:b4:05:f0:7e:ad:cb:07:6f:af:fe:6d:2a:
97:ca:39:f4:0d:ad:97:07:9e:28:83:8d:5b:42:a7:
10:7f:56:69:cb:0d:85:5b:e6:0c:a7:70:db:ae:b5:
96:2e:08:60:d3:0b:2b:31:f9:ce:71:b1:d3:09:16:
44:13:51:c0:b1:94:ab:fc:6f:78:f0:c3:3e:3c:1f:
80:eb:e9:43:f7:4b:e1:41:ad:12:57:fe:bf:4a:40:
ec:74:16:3d:c1:f6:93:35:b2:bb:a4:6b:17:1c:fb:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D1:97:19:D0:1C:1C:89:BC:EE:48:38:D1:6A:69:56:41:80:B1:12
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/v9GXGdAcHIm87kg40WppVkGAsRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.128.0/24
188.247.135.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:ec:d1:50:45:a1:26:11:88:6a:66:bb:18:bc:0e:3f:ed:cd:
5c:19:55:21:53:92:95:9d:9e:8b:8d:d8:82:48:04:d2:cc:de:
1d:9b:a8:46:ec:82:da:7e:72:de:21:7a:96:a1:1e:fc:be:94:
b3:ee:d4:83:1a:8d:6b:b2:1d:50:94:b8:48:21:75:ba:57:e3:
ad:98:d1:7a:c3:07:48:20:08:c8:59:19:eb:c1:54:bd:17:5f:
38:7f:d8:5e:b2:34:e2:01:35:10:68:eb:9b:fd:ba:1f:04:28:
6d:ba:b2:3a:5c:8e:55:1d:e1:25:b8:8f:99:5e:9f:e0:fa:49:
4b:4c:3f:a5:2b:14:f5:4a:8c:8c:73:f4:d7:1b:31:7e:4b:88:
b3:f3:e3:48:c9:a9:73:2f:31:90:45:9f:e3:ab:42:d6:16:1c:
39:79:0e:96:9d:98:58:a5:22:e5:43:fe:1a:4a:f4:0f:f4:9a:
c4:6b:79:cf:0a:60:db:12:bc:aa:f7:dd:74:04:05:31:9c:ad:
59:79:cb:5e:c4:11:d1:73:8b:f0:d6:cf:69:e6:7c:94:ce:5d:
4b:a4:e7:a0:8a:58:4e:6a:f5:bd:9a:4a:ec:72:f7:9f:1e:8b:
14:90:e6:9d:01:7b:8f:c1:4b:1f:54:16:d4:ee:ce:4f:b7:08:
6d:81:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:35 2024 by rpki-client on console-ams.rpki-client.org