Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/42JN0Sx5StqaAW63ez5zgz3Kdsc.roa
File: 42JN0Sx5StqaAW63ez5zgz3Kdsc.roa (raw, json)
Hash identifier: trRNGnIogLAuSCO+1+ZKMuXEmUc5iQ9iIk/9ZYL9/uA=
Subject key identifier: E3:62:4D:D1:2C:79:4A:DA:9A:01:6E:B7:7B:3E:73:83:3D:CA:76:C7
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01866DBBEC6B128CB1D29CF81B6F46F3FA73
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/42JN0Sx5StqaAW63ez5zgz3Kdsc.roa
Signing time: Mon 20 Feb 2023 07:31:17 +0000
ROA not before: Mon 20 Feb 2023 07:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 188.191.100.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:bb:ec:6b:12:8c:b1:d2:9c:f8:1b:6f:46:f3:fa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Feb 20 07:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3624dd12c794ada9a016eb77b3e73833dca76c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:fe:5f:54:4e:ab:11:6c:0c:53:d3:bf:f7:
25:8a:b9:00:81:ff:29:8d:65:56:05:1d:0c:9f:35:
3a:cc:a0:f7:3b:ce:e4:6f:fe:e8:1c:d9:c0:87:e7:
54:8a:b4:7b:ec:c9:f1:7c:1d:4a:45:eb:e2:dd:36:
a5:67:bd:4b:c6:e5:ed:65:0c:35:b2:b3:61:78:ad:
02:cf:36:d0:64:03:06:f4:43:f1:c1:d9:50:0c:03:
d5:97:ae:35:a1:a4:1e:55:da:2e:e2:a2:0c:26:12:
4f:35:f7:ba:fd:71:b5:d5:cb:55:15:73:ac:e1:91:
13:c8:a8:8f:34:b5:8a:6d:c8:e3:13:fd:02:1a:9c:
bc:4e:c3:79:a1:63:89:f2:c8:02:77:28:66:09:97:
a1:94:a9:2c:ed:12:f5:fa:37:2e:72:50:d4:4f:72:
6e:c2:35:0d:7b:d6:b7:b4:71:43:77:b8:10:64:a4:
84:2e:71:dd:83:8e:ce:d4:a7:67:01:00:c5:d7:b2:
e0:e6:43:53:97:c9:ab:e6:a4:5c:fc:9f:42:d8:d4:
b9:d6:8e:3f:3d:13:d4:b7:10:2b:a2:1f:37:70:6d:
ad:c7:5a:05:b7:14:ff:9b:df:ea:46:c4:65:b0:2a:
79:7f:9e:43:b0:c2:03:97:b9:c4:3a:5b:d3:da:65:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:4D:D1:2C:79:4A:DA:9A:01:6E:B7:7B:3E:73:83:3D:CA:76:C7
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/42JN0Sx5StqaAW63ez5zgz3Kdsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.100.0/24
188.191.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ea:97:44:3e:fe:24:7d:1d:1d:85:3e:94:aa:d4:2b:2e:b8:
4a:8c:dc:b5:26:81:9e:e0:7e:c8:e6:07:b7:f9:65:5b:3e:92:
0d:67:67:e9:c0:e7:22:52:e0:1b:08:a2:9d:d8:e9:6e:e0:79:
1f:d2:6e:fe:5c:bc:2f:77:19:c3:10:24:3b:fd:6c:cd:e3:63:
48:9a:70:7c:34:6d:df:fe:f4:73:d5:92:f5:ae:69:1f:38:17:
5f:03:a2:f3:cc:f0:fe:a4:ef:ba:cd:0e:4c:34:db:b1:93:bc:
13:12:f5:12:07:ae:cb:54:a7:b2:5f:d7:b1:64:1e:8b:74:93:
2b:32:af:56:83:4d:72:f6:97:2b:a1:bf:3a:5c:6b:4d:78:91:
35:d8:c6:c3:49:65:ca:57:d4:16:92:a1:cd:2d:f3:a9:0f:ab:
d5:37:f5:b1:26:8f:7a:a1:0c:0c:58:53:22:28:a9:a8:77:68:
68:75:dd:4e:62:1c:3d:b1:99:55:f1:72:25:8c:56:b7:18:3b:
40:0e:22:40:8d:d5:2a:9c:ae:7f:6b:63:7e:c4:0c:12:4b:c9:
e1:f2:c1:cb:6b:05:c5:fd:8a:b6:e3:1f:59:b6:81:af:77:d8:
37:65:28:c3:ab:5a:9a:8f:06:5b:35:58:54:1f:f3:d1:13:4f:
70:4e:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:58 2023 by rpki-client on console-fra.rpki-client.org