Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jC-6LckKsOKGtsT8YHJ7TTwWeBs.roa
File: jC-6LckKsOKGtsT8YHJ7TTwWeBs.roa (raw, json)
Hash identifier: xa8gC6awlJXf7BmGhsn1moBiZAlmr+7Hj9VrE/l5yPE=
Subject key identifier: 8C:2F:BA:2D:C9:0A:B0:E2:86:B6:C4:FC:60:72:7B:4D:3C:16:78:1B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188FBF7D3105227F641E8FCBC2EF58441D6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jC-6LckKsOKGtsT8YHJ7TTwWeBs.roa
Signing time: Tue 27 Jun 2023 08:28:22 +0000
ROA not before: Tue 27 Jun 2023 08:28:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 188.213.0.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 08:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:f7:d3:10:52:27:f6:41:e8:fc:bc:2e:f5:84:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 27 08:28:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c2fba2dc90ab0e286b6c4fc60727b4d3c16781b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:b0:2b:45:6e:a2:d0:26:30:83:21:64:cf:
e6:d8:9f:34:7d:02:ba:75:fb:5c:2c:fa:1c:69:44:
e7:8b:2d:8c:29:ec:de:42:33:6c:13:0c:69:51:1c:
68:94:dd:05:3b:b0:1f:cd:79:3c:39:da:6f:41:82:
1b:18:cc:d2:80:3e:78:17:9d:a5:34:a8:7a:d4:27:
66:b3:e7:ad:1a:97:80:7f:1f:80:2b:29:40:87:bb:
ed:cc:04:52:64:fa:1b:3e:3a:99:97:95:1f:ab:33:
13:54:af:3d:d1:08:05:0a:04:e9:57:7c:16:fb:97:
16:9b:73:bd:c4:fb:01:00:6c:e8:5d:42:0d:83:fc:
c0:3f:8c:bd:4b:c4:bf:8c:9e:51:b4:66:6f:c5:85:
ed:64:d1:e4:04:17:29:3a:b9:9c:d4:50:94:b9:7f:
18:e3:56:20:f9:35:ff:01:fc:ae:72:30:d4:40:42:
e3:15:d3:6d:32:f7:5e:8a:31:ca:91:55:4d:b4:97:
71:21:00:15:48:22:70:6b:8a:84:8e:5a:4f:89:67:
dd:36:e1:71:d0:e1:49:41:01:ec:dc:94:a0:99:57:
5f:e6:84:93:06:56:a9:5c:ec:d8:8c:87:2f:2e:3d:
34:64:27:b5:2f:3e:3b:12:68:51:ca:98:a9:5b:10:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:BA:2D:C9:0A:B0:E2:86:B6:C4:FC:60:72:7B:4D:3C:16:78:1B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jC-6LckKsOKGtsT8YHJ7TTwWeBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.0.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2d:a9:72:ff:6e:36:ed:d9:cf:16:6b:e9:1d:46:cd:0f:50:
df:8f:60:25:92:9e:51:2a:87:9d:72:bf:8d:b6:26:24:ce:d8:
39:c2:c2:81:b3:c0:a0:09:81:6e:34:63:fa:c2:f0:33:62:90:
9b:59:ec:2e:c4:39:2a:40:88:35:4d:d6:e2:f1:d4:11:86:53:
7a:41:84:8a:79:c7:40:48:c3:bf:ad:93:d6:c1:21:db:7c:e3:
4f:2a:53:48:ea:ec:24:e7:d3:3d:05:71:99:b8:3a:80:35:c8:
dd:ef:a4:f2:5c:83:17:5d:8d:58:3f:ea:4b:6f:96:e1:d9:73:
fb:27:f0:41:13:54:4d:18:33:68:df:a2:c8:10:a4:20:d8:8e:
0a:e0:71:80:17:e4:28:16:b5:84:67:f4:94:63:82:74:53:52:
59:a9:c6:8d:bb:ea:d1:96:ac:7c:d9:5d:f5:10:2a:12:7f:1b:
04:ab:9a:5d:bb:49:f6:03:d9:72:c5:a9:2b:17:c8:a7:f7:ec:
4b:02:10:16:f2:ca:05:54:af:03:86:da:35:4f:6f:b7:91:6f:
5f:ee:f9:71:d4:2d:71:56:47:c2:b8:36:a2:99:72:83:f8:59:
27:6a:ab:13:9c:96:40:7c:3e:40:93:fb:b4:68:2f:bf:10:6e:
b5:95:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org