Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/rX7U9T1qFblvZTOHBUmPMywHd-8.roa
File: rX7U9T1qFblvZTOHBUmPMywHd-8.roa (raw, json)
Hash identifier: CrDTpmzFaFTt+gJ46uDDE8uQ5HIBfrQXqCRDCqK5Dgw=
Subject key identifier: AD:7E:D4:F5:3D:6A:15:B9:6F:65:33:87:05:49:8F:33:2C:07:77:EF
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 018F9ACFDC10F8B779AB9BE5142C3308F083
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/rX7U9T1qFblvZTOHBUmPMywHd-8.roa
Signing time: Tue 21 May 2024 11:01:04 +0000
ROA not before: Tue 21 May 2024 11:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46450
IP address blocks: 188.227.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 21 May 2024 15:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:cf:dc:10:f8:b7:79:ab:9b:e5:14:2c:33:08:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: May 21 11:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad7ed4f53d6a15b96f65338705498f332c0777ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:ca:4f:33:67:35:d7:6e:5f:9d:3b:e2:52:
47:65:02:13:91:89:97:a0:29:07:f9:28:74:bd:74:
c4:37:cf:7e:23:16:fb:7b:5b:77:b7:cd:d4:eb:56:
39:16:80:64:63:b5:50:6a:f4:95:32:4a:5a:95:99:
43:93:fe:5a:6c:a5:18:60:32:f5:63:1a:d1:1b:f6:
73:4f:10:ec:8f:ee:f9:ef:39:ac:b9:77:76:ad:64:
43:01:a0:5a:bc:df:bb:d4:8d:77:42:e1:3a:1a:54:
e0:61:f8:b2:b3:44:46:44:80:77:13:2f:50:4d:96:
62:26:6e:9f:c8:c3:f6:81:54:66:38:f2:13:b2:e0:
26:14:47:7e:de:8b:95:b3:64:24:5e:0f:b8:20:92:
32:9d:ba:04:cc:08:3f:66:ab:b8:3f:3e:d4:81:91:
af:30:07:f0:27:f3:af:a7:3d:47:56:01:95:a1:e7:
34:ea:4a:b0:2a:7d:13:71:76:45:e2:87:6b:5d:ed:
56:63:b0:46:9f:80:39:1a:d8:92:57:ae:c6:e3:63:
a4:f1:bc:34:3c:3d:b2:20:fc:d3:a2:f6:cd:a7:53:
28:31:6a:b0:a8:eb:c6:f7:27:41:89:8f:8e:a6:6b:
ad:e2:24:4c:80:79:05:d0:ca:4f:0a:6f:7c:6e:fb:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:D4:F5:3D:6A:15:B9:6F:65:33:87:05:49:8F:33:2C:07:77:EF
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/rX7U9T1qFblvZTOHBUmPMywHd-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.196.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:fb:e5:fd:bb:7e:21:6f:71:5c:dd:74:48:9c:82:28:93:0f:
e3:89:26:7f:72:c7:79:68:ae:cf:6a:43:ad:92:54:5a:c7:fe:
8d:b2:93:0e:2d:0b:59:c1:90:36:85:57:7c:61:c3:6a:50:35:
37:d5:e3:0b:49:6b:d7:c9:d6:fd:b2:9e:b4:95:ab:8d:d3:9c:
17:de:1f:6f:be:71:95:47:cc:75:10:1f:fb:a4:5b:bf:89:28:
78:6b:96:39:6d:4f:65:be:57:8f:78:ce:f4:f2:58:23:e1:4b:
6f:c2:0f:ce:fd:c3:4c:2c:15:98:ae:17:42:27:86:4a:1a:47:
0d:8a:14:a7:ed:b5:16:07:c4:86:ce:2b:99:9d:84:9f:fa:a7:
7f:d8:bb:a7:2a:fc:c9:3d:55:c6:22:0c:86:81:00:24:59:10:
13:f4:08:9f:96:ed:4d:77:d2:32:56:a1:17:33:73:3f:f6:0c:
c5:12:a9:02:38:57:75:73:63:88:9a:cb:58:3a:cc:ca:cf:8d:
8c:1b:77:90:0d:8a:e8:93:d4:0a:d9:03:f1:25:eb:ee:74:b3:
29:38:ea:d8:a3:ae:4f:55:0a:0b:1f:0b:70:f2:10:a5:6a:cd:
64:bb:c1:2b:d0:d4:57:5e:7e:dc:3c:1f:66:d3:79:e2:e8:5d:
c0:69:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org