Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/XwFjBPZwt1OSYGmblkBG-ANZuwc.roa
File: XwFjBPZwt1OSYGmblkBG-ANZuwc.roa (raw, json)
Hash identifier: NbXb5WCZIuJIc+9VmmV5hkCbZcjdsCKUxNpQbotR+vs=
Subject key identifier: 5F:01:63:04:F6:70:B7:53:92:60:69:9B:96:40:46:F8:03:59:BB:07
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01885130160927F0B1CA5C0F15A425EE0312
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/XwFjBPZwt1OSYGmblkBG-ANZuwc.roa
Signing time: Thu 25 May 2023 04:34:45 +0000
ROA not before: Thu 25 May 2023 04:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 188.191.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 11:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:30:16:09:27:f0:b1:ca:5c:0f:15:a4:25:ee:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 25 04:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f016304f670b7539260699b964046f80359bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:24:67:82:cb:4c:bc:50:1b:8e:f8:95:06:
f2:07:a7:c7:f8:2d:99:7b:9d:18:6a:fb:38:62:88:
33:67:54:b1:94:50:d5:9a:e5:0a:66:df:23:6f:62:
0e:0c:3d:0e:48:00:40:a6:ab:e2:5a:08:68:d0:d2:
14:cb:c7:82:e0:24:fa:3c:ad:6f:1a:3b:04:0c:e7:
68:f0:df:ff:7e:ae:f7:2c:bd:85:67:15:7c:6a:d4:
47:7c:24:af:a4:7b:08:e8:18:67:cd:78:88:f9:90:
42:09:58:39:a6:29:09:8d:91:a2:92:f4:8d:1a:48:
7c:93:02:39:cd:f3:b4:8c:21:e5:fc:65:47:3c:f6:
45:46:25:a4:ce:0e:48:cf:f5:12:e7:7e:c6:3a:a3:
cf:e6:38:33:24:cd:21:93:4e:ed:76:ad:94:e9:a7:
fb:7a:4f:87:f1:7b:df:70:61:4c:6e:f0:5a:fe:33:
b8:60:7d:0c:ca:50:38:b3:99:e8:ce:df:d5:cd:85:
48:47:0a:d1:44:f1:f4:a9:92:04:05:9a:3a:16:ee:
38:04:78:8f:75:bb:45:81:f7:bd:33:26:b2:ea:d6:
55:de:6d:66:47:b9:0f:4a:53:91:17:6b:38:4a:26:
27:20:5b:d6:e4:97:55:af:6d:7b:00:de:88:e4:4e:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:63:04:F6:70:B7:53:92:60:69:9B:96:40:46:F8:03:59:BB:07
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/XwFjBPZwt1OSYGmblkBG-ANZuwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.99.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f9:71:8e:a6:f2:ad:30:03:78:f6:4c:a2:d5:74:55:68:e2:
ae:fe:da:6c:61:6e:26:df:5f:08:be:fb:f2:18:99:94:08:ff:
95:83:33:32:e8:d0:91:e2:46:e8:19:f4:d7:a2:23:b7:c2:2c:
1c:3b:64:64:22:f9:55:09:8b:36:9e:34:e0:a2:b2:84:4c:cb:
c6:a9:6d:1d:40:1d:3d:81:19:9f:b6:25:69:1b:d7:cf:31:d8:
02:fa:56:36:a5:3c:e2:97:d0:68:12:4a:8b:86:2e:6d:95:de:
40:b5:39:be:0e:77:a1:c8:7f:d6:ba:4d:49:0c:e2:a5:60:24:
a5:4f:c1:1a:93:ef:c8:50:c6:33:5f:c4:49:85:9d:2a:fa:95:
75:d1:f7:24:b2:6e:4e:4d:23:12:cd:27:06:8a:4c:98:45:a1:
c4:91:9e:5f:33:49:d8:12:61:55:28:61:fc:02:fd:1c:96:ff:
9d:2e:d2:d6:92:9a:d7:ed:b1:18:79:40:67:92:fa:02:2e:23:
de:f5:83:ff:42:23:5b:5b:56:4e:e5:1d:04:dc:3d:13:a5:80:
b2:cd:6f:c4:7c:b7:a2:40:1e:77:53:a0:73:ec:3f:bb:04:db:
f4:e0:7a:c3:cb:d1:84:ed:0d:98:f8:10:3d:c9:86:73:a2:06:
64:10:d5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org