Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/lJEEeUvms1VyvoOw6sASTkQyPCs.roa
File: lJEEeUvms1VyvoOw6sASTkQyPCs.roa (raw, json)
Hash identifier: ticVGK2qGkfihKbEMJGPe3dSn0xfF/ApcMaBCaS2Jy0=
Subject key identifier: 94:91:04:79:4B:E6:B3:55:72:BE:83:B0:EA:C0:12:4E:44:32:3C:2B
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0188D6E4473E2ED9D063E88F1BDAB8C5E468
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/lJEEeUvms1VyvoOw6sASTkQyPCs.roa
Signing time: Tue 20 Jun 2023 03:41:04 +0000
ROA not before: Tue 20 Jun 2023 03:41:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 188.191.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d6:e4:47:3e:2e:d9:d0:63:e8:8f:1b:da:b8:c5:e4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jun 20 03:41:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=949104794be6b35572be83b0eac0124e44323c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c1:dc:e0:8e:fa:97:49:e4:3a:68:c1:f2:86:
c0:53:dd:3a:b7:1a:67:05:58:31:8e:28:43:21:4c:
72:21:09:73:c8:79:36:3f:47:ed:4c:2e:ba:4c:c7:
14:db:57:63:5d:a6:84:c0:9d:55:c5:1e:e8:71:61:
ab:08:79:cc:88:66:8c:a7:c2:9e:be:41:ea:8d:a1:
31:b3:ea:35:c4:c8:4a:7c:77:b2:b2:e9:97:ae:f1:
c0:7f:60:36:1f:69:52:1e:62:9f:8a:fc:3e:f6:49:
c3:5e:20:7f:da:c6:89:20:e3:8e:85:a2:a0:9b:39:
a4:3d:60:19:e9:c0:c9:db:7c:37:d7:6b:27:9f:5f:
6f:82:33:5e:e4:3c:fb:1c:0d:9a:8a:47:f5:68:99:
e8:c1:85:4c:16:44:19:ba:fb:40:e2:d9:1c:a5:a0:
1e:4e:68:f0:74:f6:7c:8c:15:0b:95:5c:24:f5:c3:
16:22:9d:20:5f:ec:b9:1b:aa:29:37:64:f3:45:84:
8f:eb:fe:d3:1e:f4:ac:8d:c6:2a:5b:17:97:54:6e:
7d:5e:6f:93:a0:75:0f:e9:ed:3b:5f:3b:4d:b1:64:
02:ad:58:98:16:ae:83:22:ec:12:e7:b4:53:30:f6:
36:b9:5b:92:42:a8:dd:65:fa:e2:b4:f7:c4:64:b4:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:91:04:79:4B:E6:B3:55:72:BE:83:B0:EA:C0:12:4E:44:32:3C:2B
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/lJEEeUvms1VyvoOw6sASTkQyPCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.108.0/24
Signature Algorithm: sha256WithRSAEncryption
49:61:79:74:dc:07:19:96:c9:ce:3c:e0:25:29:29:d4:c2:ce:
45:9f:dd:34:64:5f:01:45:25:05:09:17:e7:c3:77:fe:fc:80:
3d:30:03:af:17:ea:2e:6c:51:3d:64:40:8b:ae:52:0b:48:b2:
d2:23:d8:5d:6b:3d:b7:55:fb:ba:c1:6e:b3:23:8b:9a:33:b6:
1a:d4:b1:db:d7:9a:93:ce:97:00:21:ef:62:ca:de:2e:c2:cb:
0f:f2:74:6a:b1:65:1d:a1:cf:2a:f2:d5:90:ac:9b:ce:7f:a5:
2a:0c:09:9d:1d:0e:03:b0:bb:b1:44:c7:95:74:23:4a:c5:f1:
2d:34:a3:36:8f:f2:d6:c8:52:4f:96:f6:eb:67:24:74:a6:5f:
61:2c:59:93:c5:a8:31:fd:d8:4c:a2:88:22:ea:ed:6a:e2:65:
a1:95:76:86:60:3b:f8:68:6c:be:c0:98:52:e8:96:6e:8c:10:
41:06:1f:34:92:9e:97:1c:d9:14:63:f0:7c:5f:13:1d:37:7c:
60:5e:f0:31:11:31:17:80:3d:f5:f3:44:cd:5b:11:01:a1:83:
e4:de:0f:d9:44:02:02:6f:0e:88:8c:01:3f:f2:2f:61:f8:04:
ed:50:a2:3c:06:c2:ac:fe:68:d3:4f:c9:ed:5c:5f:f0:31:b2:
b2:81:05:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:49 2024 by rpki-client on console-ams.rpki-client.org