Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vjn9O19EyAkVArhbz69RHG1rQuM.roa
File: vjn9O19EyAkVArhbz69RHG1rQuM.roa (raw, json)
Hash identifier: MG/HdszXtxvLDN0SZQbrZZH0uTgi+3VxSLdhW+Z5D04=
Subject key identifier: BE:39:FD:3B:5F:44:C8:09:15:02:B8:5B:CF:AF:51:1C:6D:6B:42:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C6813A258974AA6FF1C31880A00C465BB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vjn9O19EyAkVArhbz69RHG1rQuM.roa
Signing time: Thu 14 Dec 2023 11:26:06 +0000
ROA not before: Thu 14 Dec 2023 11:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216081
IP address blocks: 188.241.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:13:a2:58:97:4a:a6:ff:1c:31:88:0a:00:c4:65:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 14 11:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be39fd3b5f44c8091502b85bcfaf511c6d6b42e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:b2:d9:d9:52:b1:e6:82:b9:14:a9:00:5b:
3f:c8:c9:bd:76:8e:0f:db:d6:af:df:ef:2f:1c:8b:
69:73:e2:c9:92:db:5e:8f:fa:c6:bd:9d:40:e3:3b:
7b:fd:71:4e:88:e5:34:f9:e7:09:d5:b5:e7:dd:27:
38:d8:90:4b:35:40:66:6f:a7:bc:9d:1b:b8:be:da:
86:f8:3a:22:85:22:11:c5:ad:ee:74:73:d5:74:d0:
f2:95:4b:4c:0a:c7:9a:6e:2c:9c:ca:99:48:2e:c5:
8d:82:4c:34:f9:30:0c:94:93:f9:9f:1c:fb:55:ee:
a2:fd:79:d0:06:19:47:73:66:c7:06:6c:f7:78:4a:
69:87:43:8e:9f:4d:a4:3a:2a:ee:bc:45:3f:01:55:
31:16:50:c5:f3:30:7a:39:c6:93:95:52:b1:2e:f3:
fe:9a:fb:1d:51:fc:8c:41:66:ed:d7:49:e6:cf:30:
52:c2:db:81:ad:4c:c4:38:8a:30:87:70:59:84:5b:
b0:07:81:ff:46:28:da:d2:bf:88:c5:e1:e3:e7:76:
d9:90:ef:56:49:56:7d:f0:71:c0:e0:7e:d7:07:b3:
33:f6:3f:84:a9:ad:84:9d:25:15:9b:ce:bb:4e:d3:
ee:b4:3f:11:ba:02:f0:f5:93:a8:da:b7:06:49:8c:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:39:FD:3B:5F:44:C8:09:15:02:B8:5B:CF:AF:51:1C:6D:6B:42:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vjn9O19EyAkVArhbz69RHG1rQuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4b:b3:99:67:fd:9b:07:f3:a6:c9:1a:87:54:2a:d0:28:37:
a6:3a:8c:31:1e:a2:7a:10:45:8c:cf:cf:0f:fe:9e:e7:7b:64:
be:b8:09:03:6b:25:27:ff:ee:1a:82:51:e2:40:d5:6f:7e:ac:
97:30:06:cc:33:76:e4:4c:60:f2:e8:a1:e3:b4:a7:75:06:82:
b5:ed:fc:8a:29:3b:79:db:10:d7:0e:28:86:cb:aa:78:75:44:
ac:ff:83:bb:2c:06:88:9f:0a:b9:12:91:4a:65:15:5f:93:37:
7b:86:e1:df:07:6f:1b:06:cf:df:35:db:75:33:29:c2:20:42:
74:f2:a2:ae:e2:10:2d:1e:f0:65:9c:a5:b4:5c:f7:92:e7:50:
9e:ef:5b:7d:81:2f:87:e5:3b:e8:20:74:59:22:cf:e4:69:63:
d7:d4:7b:de:11:1c:71:d9:47:6e:70:80:1c:1c:33:f6:3a:65:
ce:92:26:c3:f3:c6:15:59:fb:3e:ee:ac:90:31:44:cf:fd:d5:
54:00:a0:fd:a9:6f:a8:88:0e:5a:99:f7:bc:bf:97:18:69:91:
82:91:b8:e3:94:ad:36:91:14:ed:ae:5f:db:41:76:fa:31:17:
30:2d:60:0d:c1:e1:12:fb:20:26:7d:c6:87:f6:a8:86:04:2d:
36:68:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org