Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/FfPjgZxKTCpqA3yvKBHdtP5TzM8.roa
File: FfPjgZxKTCpqA3yvKBHdtP5TzM8.roa (raw, json)
Hash identifier: VFCJzNxmHKta2LYgOAntxYEj3aG5ZIYU6//aFoIklyU=
Subject key identifier: 15:F3:E3:81:9C:4A:4C:2A:6A:03:7C:AF:28:11:DD:B4:FE:53:CC:CF
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC794246D9739ECB8FB77770AF0D27A8A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/FfPjgZxKTCpqA3yvKBHdtP5TzM8.roa
Signing time: Tue 02 Jan 2024 00:30:23 +0000
ROA not before: Tue 02 Jan 2024 00:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209973
IP address blocks: 188.130.245.0/24 maxlen: 24
188.130.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 11:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:24:6d:97:39:ec:b8:fb:77:77:0a:f0:d2:7a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15f3e3819c4a4c2a6a037caf2811ddb4fe53cccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:2a:02:72:c8:d0:1a:f1:e9:a8:b3:0b:41:
e8:ea:af:a1:09:26:1f:6a:1f:f3:9c:27:11:1f:1c:
df:16:d7:cb:1b:92:9b:66:36:bd:bf:c2:65:ee:98:
1a:d5:c7:95:1a:52:18:93:d7:d9:90:01:67:78:4c:
1a:da:a4:cd:49:7d:c5:7b:e6:3b:24:e9:c6:f6:2d:
d5:4b:4f:9c:9e:ef:dc:6a:b8:25:d4:84:fe:c2:0d:
43:7a:a6:87:b3:85:3b:e7:24:28:28:d7:b8:d6:3e:
09:9e:79:28:db:f6:b0:4d:b9:5b:63:fd:7f:8c:eb:
5c:f2:73:7f:f1:b0:33:9b:e1:35:95:c5:42:39:f2:
b0:0e:a1:af:91:21:ab:97:bb:85:df:b3:43:d6:b1:
43:dd:9a:69:01:f0:b0:2a:d4:66:6a:e2:21:b4:85:
b8:59:b9:ce:56:49:a0:50:fb:fa:e9:11:83:87:03:
d8:62:7a:95:71:c4:75:7f:bf:13:85:45:f6:b5:53:
43:5a:bc:46:c8:60:22:ee:7b:a7:ca:bb:01:57:1d:
c3:cd:3c:f8:c9:8a:3b:ca:97:83:62:7b:65:e0:30:
d5:7b:7e:ea:1c:ac:24:98:ac:54:de:c1:29:da:6c:
e9:fb:81:c8:83:bc:ae:1e:fb:b0:82:bf:2f:68:e1:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:E3:81:9C:4A:4C:2A:6A:03:7C:AF:28:11:DD:B4:FE:53:CC:CF
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/FfPjgZxKTCpqA3yvKBHdtP5TzM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.244.0/23
Signature Algorithm: sha256WithRSAEncryption
24:08:24:7d:c5:63:d8:6c:17:5c:87:cd:c5:17:70:1b:8c:21:
a2:48:d1:14:d0:74:a0:31:19:26:0e:79:db:40:e4:31:be:ce:
9d:9f:34:a5:37:a1:ae:c8:0d:a0:e8:9c:84:be:c6:18:36:c2:
fb:34:bd:81:c8:c7:26:47:92:77:0c:92:8d:f1:46:ed:6d:29:
3c:24:34:20:fc:db:1f:09:c7:5b:cf:67:61:30:8d:39:67:31:
6e:cc:7e:62:7d:68:6a:70:da:48:07:ed:24:87:aa:4e:77:af:
79:d9:09:90:27:37:5d:ab:6a:e6:b0:84:c3:da:65:62:bc:a0:
df:32:5f:ab:21:d9:0f:1a:17:55:2f:c7:60:75:1d:ea:fb:a6:
0a:9e:fe:9e:ac:56:68:ec:5d:17:0b:81:99:fe:ef:dc:b1:a9:
09:bc:68:37:18:2c:b8:7b:d5:d5:3f:14:9f:b9:e6:d5:d8:d1:
8f:30:8a:37:51:74:cf:00:63:e2:97:32:8f:15:34:cf:55:86:
6b:69:30:78:f5:66:2f:7a:61:3a:dc:af:a7:82:d0:d9:83:e3:
ed:7c:fe:08:8b:93:f3:60:8b:23:fc:a8:e5:59:62:44:09:62:
01:aa:9c:f8:49:bc:75:b3:99:6f:47:c0:27:0e:fb:f9:6e:a5:
14:32:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org