Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/rovr8gZqYWJ_mTmkB6XFB1ER0HE.roa
File: rovr8gZqYWJ_mTmkB6XFB1ER0HE.roa (raw, json)
Hash identifier: /DDkj37V7cG8QdoJ28PJ7jw0p7KzSgyZLTiu46KYzeo=
Subject key identifier: AE:8B:EB:F2:06:6A:61:62:7F:99:39:A4:07:A5:C5:07:51:11:D0:71
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0189DBC17D60B5D981300F181A1D4FC99A11
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/rovr8gZqYWJ_mTmkB6XFB1ER0HE.roa
Signing time: Wed 09 Aug 2023 19:23:58 +0000
ROA not before: Wed 09 Aug 2023 19:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 188.191.99.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:c1:7d:60:b5:d9:81:30:0f:18:1a:1d:4f:c9:9a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Aug 9 19:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae8bebf2066a61627f9939a407a5c5075111d071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:d1:b0:71:c1:42:16:e7:ff:38:e0:e4:91:
85:c1:4f:43:08:3c:04:1d:ae:c1:d3:51:c5:02:df:
67:33:f4:8b:c4:43:0c:ad:9d:e7:56:93:b1:db:3b:
77:e1:4d:d7:32:15:cf:c8:10:86:e4:9a:1b:bf:c0:
a9:53:88:9d:b6:31:0a:d0:79:12:18:2c:43:7a:4b:
54:b0:6f:53:74:74:4c:94:aa:09:fb:60:3f:79:1c:
98:e8:90:b5:f9:3e:20:6b:0e:29:ed:38:d9:80:74:
b3:62:a0:c0:93:49:91:41:df:72:32:7d:e9:63:b9:
10:42:1a:09:46:a7:d4:e2:c8:d3:4a:c0:81:b9:57:
b0:33:9b:b9:50:e9:ec:17:06:8d:f6:65:e2:61:71:
0e:3d:40:93:1e:53:95:27:73:cd:bc:9c:50:3f:8a:
97:cb:5b:34:42:a3:61:2f:11:88:09:0c:08:55:1f:
df:40:31:c5:e3:b1:ac:7d:e5:c8:99:47:17:75:56:
ca:a9:ff:4d:74:ca:1c:ab:ab:7a:ba:b7:33:e7:fb:
dc:2c:d2:fe:14:ec:d6:5e:34:47:73:fe:e9:b6:06:
0a:bd:ca:80:f6:07:d3:0c:b6:57:90:fb:75:e3:5d:
e8:61:b2:75:df:f6:6a:b3:a0:cb:57:b5:bf:ab:b0:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:EB:F2:06:6A:61:62:7F:99:39:A4:07:A5:C5:07:51:11:D0:71
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/rovr8gZqYWJ_mTmkB6XFB1ER0HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.99.0/24
188.191.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a5:55:09:8a:ea:b5:d2:a8:21:9a:b7:f9:65:4c:4c:6f:82:
15:2e:88:08:44:78:19:84:08:72:7b:bd:b7:f8:c2:6c:e5:2e:
8b:75:97:af:01:f1:b6:96:ed:bc:0d:df:e7:0f:4d:b4:21:ac:
88:b7:8e:5e:42:04:32:79:d3:06:86:8e:b8:95:57:94:7b:24:
c3:ee:c5:ca:ad:d8:ee:e0:d0:d9:6c:d5:be:1b:aa:41:92:b4:
b5:8f:b8:33:a2:0b:c8:74:55:03:73:5b:5f:99:92:03:fa:a1:
d9:4d:dc:d5:6a:08:05:75:90:a3:d1:14:da:dd:68:92:14:aa:
45:58:1f:61:b6:25:a1:a1:38:87:10:30:b1:50:0b:47:00:c1:
43:4d:df:f1:d3:d5:7d:0a:c6:62:60:30:74:f7:95:04:98:6f:
ee:1c:a6:75:5e:db:c3:17:d3:a8:d8:84:f5:e2:13:33:1f:75:
44:8f:d1:09:78:4c:58:b2:49:1f:62:be:c8:e0:78:da:97:7f:
6e:92:d2:ae:b6:00:b0:9e:0a:80:4e:88:99:d9:e5:9b:20:f1:
a6:38:2a:c4:ea:c5:39:eb:d1:d5:e6:ca:3f:3b:ea:0f:93:cb:
41:de:0c:ce:fd:fa:93:1c:96:e6:b6:c6:95:f1:92:64:f2:51:
ca:27:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:49 2024 by rpki-client on console-fra.rpki-client.org