Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/0a-zfdyaaZ9Vj0BWtoBDqWSAFxw.roa
File: 0a-zfdyaaZ9Vj0BWtoBDqWSAFxw.roa (raw, json)
Hash identifier: DcNRkCFJk+0ARW4frak+ICPDhY+qkQBi9hF1m5tmL9w=
Subject key identifier: D1:AF:B3:7D:DC:9A:69:9F:55:8F:40:56:B6:80:43:A9:64:80:17:1C
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018A7427AF0B1BD6E67A5B5B51A345D0749C
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/0a-zfdyaaZ9Vj0BWtoBDqWSAFxw.roa
Signing time: Fri 08 Sep 2023 09:37:52 +0000
ROA not before: Fri 08 Sep 2023 09:37:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 188.191.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:27:af:0b:1b:d6:e6:7a:5b:5b:51:a3:45:d0:74:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Sep 8 09:37:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1afb37ddc9a699f558f4056b68043a96480171c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:25:f3:7c:08:a6:3e:d6:f4:1a:e5:b8:e2:
09:ab:af:53:2a:15:ac:73:cf:66:a3:72:90:88:16:
31:b8:17:0a:c0:6b:52:0b:91:cb:d8:41:39:ab:e7:
c1:e4:92:6a:f8:38:ac:a2:63:27:32:35:92:bc:a7:
d8:d9:a7:d2:c9:ee:b8:fe:0d:8d:66:5b:98:82:ba:
52:40:15:1d:dd:84:94:97:5f:93:f0:8a:3e:b4:e7:
d6:f7:6b:af:5f:02:62:5a:9b:4f:d8:fc:c2:84:1d:
56:3a:c6:07:13:be:e1:98:9d:17:ef:a8:e7:b6:51:
32:bc:dc:65:27:8c:4b:01:77:56:5c:b4:ac:7c:2b:
03:58:3c:54:c7:a6:3d:54:1d:49:b2:20:5a:4f:d4:
0c:5b:a9:83:af:bd:e8:f1:52:f6:98:e3:71:bf:f2:
4f:d0:ee:3c:02:53:94:04:8c:d0:79:a1:0f:d2:9d:
86:b3:e9:41:2d:73:ac:7a:26:28:4a:73:80:94:69:
53:f5:91:85:4e:fe:04:a5:89:e0:d4:59:6b:ec:88:
20:9e:fc:14:35:98:5a:8f:7c:d9:3f:98:8f:95:f5:
d4:09:f1:64:22:be:a5:3f:5d:cb:14:e5:d3:96:21:
10:91:fb:a5:4d:09:a6:00:15:ba:d3:6c:b9:06:ea:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AF:B3:7D:DC:9A:69:9F:55:8F:40:56:B6:80:43:A9:64:80:17:1C
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/0a-zfdyaaZ9Vj0BWtoBDqWSAFxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.111.0/24
Signature Algorithm: sha256WithRSAEncryption
23:52:23:da:33:c8:db:48:df:d3:85:69:e6:44:1b:52:7f:4f:
64:d5:b1:dd:26:9d:78:59:2f:93:4a:65:02:17:d0:d5:28:88:
d3:86:15:4f:d7:20:5a:39:6b:9c:47:a8:5b:3d:33:a0:e9:a8:
e5:3f:00:f7:1e:7c:e6:3c:f2:e5:9d:d5:c7:d6:c5:59:7f:73:
c5:0b:e7:68:1b:43:c2:d3:28:2d:4f:83:04:94:76:82:e2:c9:
fe:8d:b3:24:a2:9b:26:a7:46:13:1d:5c:06:41:a1:73:cd:ee:
08:df:8c:d8:65:74:55:af:fa:73:83:2d:ee:e8:9e:19:fa:88:
31:4d:47:f1:fa:2f:cb:4b:af:be:37:47:bd:c0:43:eb:c4:7c:
0c:6f:5a:b1:fb:0f:73:f0:d2:d4:3c:ef:b4:c3:cf:49:c9:e4:
ad:d9:9a:a1:04:b6:f3:aa:37:0d:7a:a3:bc:33:fb:2c:cd:db:
55:6e:85:04:9d:38:62:3a:4a:42:e1:d6:e8:33:b0:fd:ed:b3:
cb:86:aa:f4:10:0b:be:1d:9c:b8:96:17:60:4d:0c:9a:3c:eb:
e1:b9:76:93:77:35:d6:af:a6:36:9e:85:a2:43:9c:ae:e0:6b:
17:01:60:e0:09:e6:78:f0:60:f4:75:d1:0d:ac:66:5a:cf:e0:
18:12:55:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:05 2024 by rpki-client on console-fra.rpki-client.org