Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_CRqD_97lcmZ00MxQ1ZaxgJpCRA.roa
File: _CRqD_97lcmZ00MxQ1ZaxgJpCRA.roa (raw, json)
Hash identifier: 9pO0l7JjcVy+73SkdqWHow/Uqpi+dAl1oZtSsvSzTpQ=
Subject key identifier: FC:24:6A:0F:FF:7B:95:C9:99:D3:43:31:43:56:5A:C6:02:69:09:10
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC49335CF6DE707A1DAFACA4B4127B8C7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_CRqD_97lcmZ00MxQ1ZaxgJpCRA.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 188.213.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:35:cf:6d:e7:07:a1:da:fa:ca:4b:41:27:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc246a0fff7b95c999d3433143565ac602690910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:f5:18:c7:f9:0d:e9:2d:ee:d1:ec:f1:0b:
68:33:13:b2:02:c5:4b:f4:c7:e0:76:67:38:d5:a5:
29:57:3d:76:05:84:fa:44:f7:ec:62:3a:86:15:7e:
1e:89:fd:ba:6c:de:36:a7:2a:92:69:bb:c6:9e:2f:
8d:9a:46:8c:2f:cd:fa:37:82:f7:30:3c:2a:f0:b7:
a0:8c:34:8f:3d:6b:a2:86:54:b6:b5:55:32:28:6f:
a2:ca:2e:a6:4c:6b:86:c3:d6:76:af:82:aa:09:33:
5d:4e:67:ca:df:ad:58:80:23:f7:fc:e4:a3:91:ce:
8b:75:28:76:91:1a:21:bc:c1:f1:d1:20:cf:8b:32:
b9:d3:58:00:bb:53:5b:16:99:48:ae:b5:27:af:c2:
ba:58:89:33:45:83:72:ab:13:01:c6:42:1e:39:37:
d3:16:55:0c:8f:82:be:33:52:ee:2a:b5:60:aa:35:
41:b0:b8:5e:2a:07:0a:c7:c6:0a:7d:c9:13:4e:9a:
90:f9:1f:96:20:19:8a:ce:cd:c6:88:36:8d:28:df:
bf:99:08:97:68:44:44:4a:93:4f:92:f8:b8:9e:b8:
45:61:a8:27:12:b0:c8:12:04:f9:07:11:69:b8:ec:
ae:6a:91:13:ce:d8:67:2a:cd:2a:05:cd:d2:6b:28:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:24:6A:0F:FF:7B:95:C9:99:D3:43:31:43:56:5A:C6:02:69:09:10
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_CRqD_97lcmZ00MxQ1ZaxgJpCRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fa:9e:70:ae:66:0e:92:c4:a8:94:09:44:23:73:3b:02:11:
3e:fd:18:80:af:44:b9:af:d3:cc:8b:73:5c:fa:76:ff:91:8b:
3a:d1:ae:8a:a8:90:c7:4a:59:66:79:b6:2d:5b:d9:5f:90:77:
41:02:d7:ba:2a:0b:c5:ca:2f:69:52:fb:42:82:50:c2:31:3d:
07:3b:2e:5f:e6:a3:77:5d:fc:8e:1b:ee:e1:92:0f:fd:f8:a9:
b5:29:b1:ca:fa:7e:bc:c3:9a:31:06:10:cc:42:a7:35:95:35:
3d:72:44:2b:1e:e9:9a:8e:40:af:01:f2:df:67:2a:e3:32:12:
3d:ea:78:2d:b5:7c:8e:4c:b7:b3:a0:5a:71:b7:f9:a4:8c:b5:
18:df:fe:ec:52:ba:38:d0:82:b9:16:e3:56:57:ed:9b:0f:1e:
91:df:8c:b4:7f:9e:63:9f:ac:98:24:e1:4c:51:a7:78:a3:66:
d7:0d:dd:42:c0:7d:bc:01:e0:ee:b9:58:13:4a:1c:27:bd:bd:
ae:0c:bb:aa:e5:ca:16:9e:50:b7:6d:73:ce:95:a9:9c:63:aa:
5e:8b:a2:5c:33:89:07:d9:07:28:53:d3:13:83:5d:33:7b:da:
3c:91:05:89:65:1e:a8:6f:1b:f5:80:b0:1f:22:b1:91:44:38:
c2:29:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org