Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jY4_hkgUFfPCGa0TLrlqkt8EhFI.roa
File: jY4_hkgUFfPCGa0TLrlqkt8EhFI.roa (raw, json)
Hash identifier: a4qYvmTKM7lOOuyxRrlpmdBeYb+4qJt4JAWo7Zj3RCw=
Subject key identifier: 8D:8E:3F:86:48:14:15:F3:C2:19:AD:13:2E:B9:6A:92:DF:04:84:52
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC493388FA6FD75857AE5D58E528AF9C5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jY4_hkgUFfPCGa0TLrlqkt8EhFI.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 188.213.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:38:8f:a6:fd:75:85:7a:e5:d5:8e:52:8a:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d8e3f86481415f3c219ad132eb96a92df048452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:14:1c:0e:fc:9c:ad:71:c8:85:13:c3:6e:
f2:3d:82:7a:4b:88:02:e3:75:d3:46:39:5f:42:ab:
d0:60:9c:13:28:c9:21:15:d0:46:f2:f3:46:5c:02:
6d:e0:50:29:c2:c8:20:3a:03:e5:4d:d9:34:1d:e1:
68:61:41:bc:f2:e1:72:a1:57:34:8f:b3:c1:c4:c8:
43:db:f3:0f:bf:bc:0f:fe:38:4f:f9:a7:cb:c0:af:
1c:6d:fc:ee:c2:3d:6d:3d:0e:db:3c:82:5e:5e:2d:
40:f8:a8:f6:97:d2:4c:90:16:e4:33:8c:bf:7e:68:
3c:8a:56:a0:b8:27:22:33:b9:fa:66:91:70:b3:c6:
c0:5f:59:7d:61:c3:02:3f:e1:f1:5e:14:ba:fb:57:
0f:34:63:02:e5:78:bf:46:00:1c:a7:c2:5c:0d:d3:
27:dc:65:5a:e3:ac:18:98:82:d5:12:61:01:27:d1:
f8:f0:d4:2e:1f:a8:4d:e0:e8:74:47:af:d3:89:43:
ff:75:db:28:81:67:29:b9:22:7d:e7:84:ac:62:ce:
1b:40:48:9d:22:fe:d0:c8:57:38:ca:33:f8:5e:2a:
62:0f:69:1f:25:64:1e:16:56:0d:a6:55:a4:b8:ca:
b7:01:f9:64:29:f3:25:9b:5f:cf:64:e2:ce:97:ea:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8E:3F:86:48:14:15:F3:C2:19:AD:13:2E:B9:6A:92:DF:04:84:52
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jY4_hkgUFfPCGa0TLrlqkt8EhFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e0:68:9b:b5:b9:36:af:bc:49:e4:1c:31:71:f7:61:76:87:
8b:60:3d:7e:2c:3d:e9:63:73:ad:a1:b6:1c:21:90:9e:20:26:
a8:d6:47:de:3b:3d:74:ec:f3:25:5a:a0:a1:62:ca:64:3f:90:
f9:69:44:8d:90:a2:6a:63:8b:f5:7c:ff:5b:4f:10:be:b9:59:
93:cd:2b:70:aa:22:e2:57:83:96:7d:c5:1c:6f:fb:16:b7:2c:
0f:65:e5:b6:8e:db:b2:70:5a:81:e4:1b:de:47:f5:1d:49:7e:
3c:2b:71:c7:71:a2:86:74:55:67:71:32:b8:80:dc:b6:bc:81:
98:e6:9f:6e:97:96:f5:4c:0d:f4:f2:7b:99:65:11:91:70:a5:
7b:0c:de:8c:5a:6f:39:a7:e3:a9:82:8c:e7:5b:c2:4c:37:c7:
78:41:cd:97:15:0c:60:a9:51:e4:6e:93:df:94:7e:ea:6d:89:
e5:41:73:ba:1f:d1:4d:ad:88:3a:a7:2d:1a:3d:98:0b:fa:26:
8c:17:b8:7c:35:6e:e7:40:8d:79:8a:cd:ce:85:d9:d3:80:ed:
88:88:df:c3:a3:db:90:3f:99:ad:49:73:99:df:ee:43:1a:c5:
e4:38:f0:b4:c8:d2:c6:1b:9a:3d:81:ab:d8:e9:60:00:44:2d:
73:e3:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org