Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/02nHDezwskUbDUrlez7ojHGXXwY.roa
File: 02nHDezwskUbDUrlez7ojHGXXwY.roa (raw, json)
Hash identifier: N0+LujW88i4+jSt+lcp9y3kIp7jbaYJ7QBTMK3icdpI=
Subject key identifier: D3:69:C7:0D:EC:F0:B2:45:1B:0D:4A:E5:7B:3E:E8:8C:71:97:5F:06
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0188DFCBCF8F1C94545E928BF309F21471A7
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/02nHDezwskUbDUrlez7ojHGXXwY.roa
Signing time: Wed 21 Jun 2023 21:10:56 +0000
ROA not before: Wed 21 Jun 2023 21:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 188.191.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 19:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:cb:cf:8f:1c:94:54:5e:92:8b:f3:09:f2:14:71:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jun 21 21:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d369c70decf0b2451b0d4ae57b3ee88c71975f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:e5:06:d1:4b:3a:be:98:2a:ca:ad:ca:ed:
bb:7f:1b:e1:83:6e:08:8c:94:38:c0:54:78:f2:d5:
2d:12:05:5a:9b:39:4b:cf:65:5c:73:6f:0a:45:12:
e3:0a:b6:ce:68:ba:c8:cc:0a:14:f1:ac:ad:b6:1a:
c2:4a:4c:ed:7a:0d:a5:36:e8:0e:7e:02:7f:06:73:
90:a8:ad:c0:c3:37:69:62:01:3e:0e:bb:44:d9:c3:
3d:a3:fb:c4:bb:cf:d9:51:99:4c:6d:d2:de:54:e0:
d9:86:09:b0:89:1c:79:ef:b5:e2:6a:d7:aa:9e:bc:
be:ab:aa:01:62:88:3a:7b:ad:cc:41:12:93:b9:48:
47:89:72:b7:77:85:27:d8:ab:da:a8:8f:56:62:f2:
e3:70:27:eb:51:0b:15:37:0f:eb:9c:71:b3:27:e5:
f0:24:d9:20:a3:30:b8:3a:33:04:f4:4b:4a:cb:4e:
fc:6d:19:b9:c8:9b:d6:53:73:db:25:6e:06:06:dd:
27:50:f4:db:3d:cb:9e:44:ad:80:78:f4:8d:5f:e5:
b8:f2:32:5f:83:47:cd:cb:a2:e6:bc:97:16:3d:e0:
7e:8b:46:d6:eb:39:ea:9e:2d:7b:4f:aa:bc:68:05:
d9:39:18:f4:f5:d6:e1:77:ca:12:fe:98:9d:01:82:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:69:C7:0D:EC:F0:B2:45:1B:0D:4A:E5:7B:3E:E8:8C:71:97:5F:06
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/02nHDezwskUbDUrlez7ojHGXXwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.104.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0d:80:7f:65:55:e0:29:dd:47:82:1a:ad:f2:95:c5:f3:c9:
fc:9a:a2:de:78:25:90:5f:b9:03:09:2d:61:89:bc:12:b9:91:
ff:e4:78:70:b6:f0:b6:e2:74:39:7c:7e:0a:c1:9f:5d:7c:2a:
6b:ee:89:c0:23:9c:72:85:f7:3b:81:18:b8:de:30:c2:0a:99:
0a:53:3d:c1:96:f3:d3:ce:7b:54:f9:b4:65:8d:4e:68:bc:2b:
08:ae:c4:8e:2e:40:d2:46:26:b5:b4:0c:83:52:66:bf:53:36:
64:fc:71:7a:74:51:1a:9c:c2:09:85:b5:39:81:b1:2b:2f:01:
86:bf:8f:56:aa:5e:83:c1:35:de:12:e4:d3:dd:de:2b:63:31:
67:c7:df:b2:ef:b5:23:34:9e:66:db:e2:d2:11:51:fe:7e:9b:
3e:df:6d:fc:1d:3d:27:a8:d1:e9:8e:0b:e8:43:64:04:dd:41:
4f:64:de:d7:38:eb:32:71:19:12:ad:94:c7:a5:09:f5:9a:19:
e2:20:49:e6:07:8e:11:03:02:ba:de:b3:00:b7:34:a4:85:a1:
2c:57:8a:4a:b6:89:f6:75:0c:f5:bd:91:c7:cc:0a:cc:cf:91:
58:42:82:77:20:66:a8:88:bb:61:26:c6:50:d6:01:1d:93:9c:
7f:6c:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:48 2024 by rpki-client on console-ams.rpki-client.org