Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/O-EjRr_t5T5TGFQnwsRfvmz_IVQ.roa
File: O-EjRr_t5T5TGFQnwsRfvmz_IVQ.roa (raw, json)
Hash identifier: hMSt/uCWnh/N0yYr4x6D/MYAawWKajaZjjhvlcimUEU=
Subject key identifier: 3B:E1:23:46:BF:ED:E5:3E:53:18:54:27:C2:C4:5F:BE:6C:FF:21:54
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC4933742B7CEF9063BEA5FC8F75EA656
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/O-EjRr_t5T5TGFQnwsRfvmz_IVQ.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44103
IP address blocks: 188.214.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 04:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:37:42:b7:ce:f9:06:3b:ea:5f:c8:f7:5e:a6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3be12346bfede53e53185427c2c45fbe6cff2154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:19:6b:cd:1a:33:73:30:77:63:ef:03:df:
a2:ba:78:d3:01:09:e3:16:cb:a0:d5:01:86:30:99:
2e:f1:a0:27:5b:5a:5d:ec:f2:1a:36:ee:40:80:ab:
55:50:22:ca:96:97:7a:b3:db:3f:29:67:26:08:54:
40:8d:df:5a:e8:b6:8f:12:98:cb:fd:45:1c:c2:89:
d9:1e:5e:d1:7a:b3:fa:69:34:2b:a4:0f:5c:2b:f7:
67:d6:db:88:fe:f4:00:c3:51:f5:30:f2:11:9f:2d:
b2:d2:e9:ba:f1:f2:ea:74:1d:2b:74:77:1c:b7:12:
cb:0b:80:02:57:b3:db:92:ee:49:f6:1b:b2:f4:dc:
c2:ca:d9:18:ef:ed:6b:a5:5a:60:ca:20:2c:8a:54:
0e:b5:3d:ce:b0:7b:a5:55:dd:19:98:7f:65:bb:43:
ea:9b:2b:f7:c9:e8:bb:72:c2:78:3f:da:a9:37:b7:
77:bd:03:dc:98:a8:21:1c:e2:74:ac:13:f1:d8:47:
ee:e3:d9:73:38:5c:13:47:27:7d:60:37:cf:1b:e4:
17:f5:5e:f3:2c:5b:e2:60:19:60:c0:a7:8f:e8:ef:
6b:9a:b8:86:a5:b1:cc:b9:a2:69:7d:e5:8a:18:66:
1e:c8:6c:1e:09:63:5a:a5:17:91:96:14:08:3e:7c:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E1:23:46:BF:ED:E5:3E:53:18:54:27:C2:C4:5F:BE:6C:FF:21:54
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/O-EjRr_t5T5TGFQnwsRfvmz_IVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a0:09:96:aa:15:db:eb:b1:1b:9c:c5:eb:8b:16:6c:0c:57:
39:56:21:81:64:40:8a:b8:e5:a9:ce:6b:ae:03:b9:f4:d6:54:
78:c7:94:8c:63:98:6d:eb:81:e0:54:77:d5:d7:e0:f3:4e:f3:
ed:1a:d4:06:f0:11:9e:a6:15:fe:9a:1d:0f:2f:0f:fe:de:f9:
fe:11:9a:9c:2d:07:2b:a8:67:c3:07:70:09:30:9a:df:e6:05:
6b:e9:d1:cb:a4:f0:1b:3b:2d:63:b9:07:32:85:5f:78:ca:66:
0e:4d:b5:c2:96:fc:dc:a2:54:c7:19:ed:76:b7:13:86:a2:0d:
73:70:6f:48:ea:3c:31:29:e0:bc:4d:2f:f0:de:3d:18:5e:6b:
68:06:86:30:55:e6:74:60:6f:a7:5f:5d:f0:54:ff:0f:f0:e6:
3c:91:17:d3:01:0b:d7:af:b0:75:f1:60:cb:8e:b2:42:ff:e8:
73:de:d8:be:66:61:df:e0:2a:64:05:06:5d:4d:ac:16:61:11:
57:88:07:de:42:53:e9:bb:3a:ae:03:75:35:92:76:2d:01:d0:
a5:33:fb:ac:25:75:e4:89:37:4b:a9:94:b5:8b:0b:f5:39:2e:
be:47:ee:7e:ad:06:31:12:f3:23:a5:39:ef:64:d1:5d:7f:da:
50:99:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org