Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/39g1hiknrw0U4U4E8Y5ZTrkIV88.roa
File: 39g1hiknrw0U4U4E8Y5ZTrkIV88.roa (raw, json)
Hash identifier: 01nAce2dJouBJFzuX7tqFZ6dcoBm6oYxzDzmrDreFJU=
Subject key identifier: DF:D8:35:86:29:27:AF:0D:14:E1:4E:04:F1:8E:59:4E:B9:08:57:CF
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 01856D0AC79D0C1F82EF720B04F236543528
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/39g1hiknrw0U4U4E8Y5ZTrkIV88.roa
Signing time: Sun 01 Jan 2023 11:15:01 +0000
ROA not before: Sun 01 Jan 2023 11:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206063
IP address blocks: 185.188.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:c7:9d:0c:1f:82:ef:72:0b:04:f2:36:54:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Jan 1 11:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfd835862927af0d14e14e04f18e594eb90857cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:d8:4a:f0:9f:89:22:cf:7c:b5:4a:30:12:
75:81:27:0b:6e:c1:e7:c6:c2:4c:37:fb:c1:a4:46:
c6:3f:c1:e5:d2:6f:d0:d9:9f:95:f6:3b:98:a7:69:
87:a3:f8:a7:06:30:1d:fb:ab:a8:36:7d:37:5b:da:
e8:81:b5:9a:ec:1c:61:c1:8d:58:89:5d:ad:64:fb:
e7:7c:5f:c1:22:2c:a7:42:b8:27:41:d9:b6:19:a8:
d5:a0:3f:f4:94:79:d5:0e:ad:45:34:81:8d:51:0b:
3e:7b:c7:a6:e0:09:27:21:06:9e:4a:f7:64:42:fa:
e5:8b:ed:81:af:35:6e:8e:82:14:35:4d:0d:cc:68:
7b:90:8d:3f:f7:dc:af:b4:aa:14:fe:bf:4a:20:ee:
3c:37:0a:66:ce:c1:0b:34:82:69:7f:94:b6:8f:f9:
f1:01:5c:b8:02:d7:7d:d0:f9:f3:e3:18:c1:d7:88:
64:54:09:02:aa:47:4f:ee:c6:05:6b:7f:5e:d4:cd:
c7:67:c0:0d:64:e5:75:87:da:60:c8:c5:8d:87:9f:
27:eb:5a:e9:61:95:ba:4c:10:7c:60:31:e8:d1:82:
b7:62:3b:66:c4:1f:67:a3:d9:57:12:f5:19:26:93:
86:52:c1:ee:45:75:e1:c2:3c:cf:07:16:7a:f3:87:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D8:35:86:29:27:AF:0D:14:E1:4E:04:F1:8E:59:4E:B9:08:57:CF
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/39g1hiknrw0U4U4E8Y5ZTrkIV88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.0.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:76:12:a4:f2:f5:51:56:b8:f9:67:1c:be:8c:10:7e:9d:63:
9a:2c:62:68:71:ac:9d:87:35:ad:65:8f:d4:3c:31:ac:cb:78:
e6:9c:72:65:9f:e6:57:94:37:a0:52:91:05:28:37:df:c3:db:
7c:5d:ce:ac:46:12:e3:28:96:27:9f:eb:32:f6:55:d6:ec:c1:
f0:2e:42:4d:36:93:cb:8f:1c:ce:aa:09:18:44:c3:ac:c0:86:
ae:b7:3b:98:99:cc:0e:47:64:49:02:a6:c6:65:36:98:b9:a2:
43:ab:e1:29:3a:81:8a:bb:8f:64:c9:b7:04:99:02:97:93:eb:
c3:6d:8b:9f:04:12:4e:53:9a:e8:f7:68:ce:d4:eb:fd:fa:c9:
82:20:0e:10:f2:99:2b:3e:bd:32:81:12:de:35:7d:9e:9e:fe:
8b:9f:6b:f7:c1:36:2e:5a:41:4b:72:53:1c:7a:6e:77:d0:45:
d5:a5:d9:45:c1:fe:5c:24:08:11:ae:62:c6:3c:5b:21:6c:a2:
6f:e3:58:8a:d2:d3:25:a7:94:0e:42:21:06:97:ca:e7:34:fb:
72:5e:57:7f:b9:bf:15:6f:6f:d3:d5:f9:fe:c5:2c:b7:5e:50:
c8:74:dc:64:32:7a:be:4a:5e:61:16:34:59:84:94:54:ba:d7:
85:65:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:21 2024 by rpki-client on console-fra.rpki-client.org