Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/s-YBSnzYKuv5ouVQ0LfL60_qUuc.roa
File: s-YBSnzYKuv5ouVQ0LfL60_qUuc.roa (raw, json)
Hash identifier: 0zCrmucKWMoLFbU1sp7Eq1D7cQcSnxfJLO7Zjuf0Urw=
Subject key identifier: B3:E6:01:4A:7C:D8:2A:EB:F9:A2:E5:50:D0:B7:CB:EB:4F:EA:52:E7
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0186C0F4E73D44F3EA2BAC49CF1352B70876
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/s-YBSnzYKuv5ouVQ0LfL60_qUuc.roa
Signing time: Wed 08 Mar 2023 11:22:00 +0000
ROA not before: Wed 08 Mar 2023 11:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 188.191.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 18:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:f4:e7:3d:44:f3:ea:2b:ac:49:cf:13:52:b7:08:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Mar 8 11:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3e6014a7cd82aebf9a2e550d0b7cbeb4fea52e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:03:e2:3e:99:c8:1a:33:6d:12:73:3e:0f:
53:48:e4:27:ae:85:68:a2:93:7e:6e:6e:17:05:d0:
90:67:83:20:b8:94:5f:b2:54:35:f0:bc:2b:2e:77:
d5:b4:21:92:78:0c:d0:17:da:88:8d:36:f9:bd:cd:
49:0c:1b:bb:d7:9c:c1:52:d2:71:21:52:0e:fc:ec:
c9:5c:46:23:fb:99:92:2c:d5:6c:e7:4b:95:d8:9c:
98:1b:83:d2:80:1d:ad:c9:7a:74:c9:a6:20:77:5c:
63:0f:24:0b:f4:aa:a3:bd:35:d0:92:19:26:db:a3:
f6:59:c5:4e:3f:be:c1:30:f2:18:8b:0b:78:d4:0b:
b5:c0:79:09:fc:92:38:df:5e:df:96:92:d6:12:46:
e7:47:e1:6b:e0:d1:92:f5:6e:76:ab:8a:f4:b0:2f:
94:55:da:bd:57:4b:94:6a:e1:59:2a:fe:10:22:eb:
69:e0:04:43:eb:44:11:9a:f1:27:61:fa:4d:72:4a:
fd:e6:0e:f9:fa:97:5c:84:93:f1:72:33:c9:41:40:
2f:25:2a:df:b0:6f:16:43:8a:e8:b2:3d:50:20:83:
36:ba:43:f6:d3:11:c4:5d:92:90:57:45:22:be:9f:
5c:04:43:53:3a:07:88:73:91:7f:d4:a0:f9:de:5c:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E6:01:4A:7C:D8:2A:EB:F9:A2:E5:50:D0:B7:CB:EB:4F:EA:52:E7
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/s-YBSnzYKuv5ouVQ0LfL60_qUuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.106.0/24
Signature Algorithm: sha256WithRSAEncryption
30:48:70:0e:ff:42:47:84:7b:d2:6f:e9:66:4a:f7:66:d1:6d:
b8:f0:07:8a:11:34:7a:a1:78:ef:30:32:33:1f:83:e8:1a:d6:
9f:52:65:8e:cc:14:16:8d:db:96:df:20:c8:ed:ff:21:6b:0f:
a3:48:09:f1:96:06:b5:58:28:3f:09:39:3b:f7:fb:0c:55:62:
e6:5c:35:8a:80:dd:db:98:6f:ff:08:2e:e3:67:6b:3b:cb:8d:
02:3b:d5:ff:d7:71:fb:89:29:f6:3c:ca:47:99:3d:58:8d:ea:
5d:63:f2:7c:40:97:3d:c6:6a:20:61:91:7b:c1:00:13:0a:15:
95:fa:8e:22:ce:3f:72:2b:fe:0e:6b:7b:32:e5:8b:a4:11:55:
9c:9f:9f:c0:25:f2:ae:d0:91:42:fa:34:96:e1:03:7b:b4:72:
c1:21:84:77:13:20:47:ef:b6:f6:1f:7c:06:28:1f:db:e3:a5:
14:1b:82:f5:42:36:c4:2b:ae:c8:8b:f4:f9:52:af:20:27:66:
3b:3c:68:8d:7a:03:49:77:0e:1b:d8:47:a5:18:ab:b0:72:f9:
ec:e9:12:78:13:09:14:90:bd:48:42:21:cb:0f:c7:f9:4c:21:
02:13:02:a2:f8:a8:12:ae:20:aa:50:d2:66:6a:84:7c:47:65:
d8:4d:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org