Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/thJGCDtHDp4-2BPgH0FfRRzzVlM.roa
File: thJGCDtHDp4-2BPgH0FfRRzzVlM.roa (raw, json)
Hash identifier: zywN6V33tIqAk/OhhbB7XHk9Cfb4duIszF0kv06SJFU=
Subject key identifier: B6:12:46:08:3B:47:0E:9E:3E:D8:13:E0:1F:41:5F:45:1C:F3:56:53
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 018CC5DCCE962AABA3C1D760DDEC0A707161
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/thJGCDtHDp4-2BPgH0FfRRzzVlM.roa
Signing time: Mon 01 Jan 2024 16:30:31 +0000
ROA not before: Mon 01 Jan 2024 16:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 188.172.137.0/24 maxlen: 24
188.172.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 21:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ce:96:2a:ab:a3:c1:d7:60:dd:ec:0a:70:71:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Jan 1 16:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b61246083b470e9e3ed813e01f415f451cf35653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:6e:ed:2e:94:88:64:10:3f:33:0a:95:52:
3f:64:88:32:b5:6b:cc:8b:47:5f:cf:91:e4:9e:cc:
2b:e6:da:e9:5b:2a:ba:48:5a:7b:54:33:65:72:87:
b3:70:bb:dd:86:bc:e8:7d:e4:61:42:e3:ee:13:79:
40:10:d2:04:ab:34:c6:81:95:70:8f:ea:1e:03:47:
88:6e:6a:7e:9b:e0:aa:cb:16:a3:0a:f4:36:79:1d:
bc:bb:86:d7:ea:55:0f:e9:69:58:85:0d:d7:46:e8:
86:9c:e1:f7:cd:15:08:b0:39:d0:d8:53:21:1e:92:
d6:7c:87:ab:85:29:1d:1d:da:51:d7:c5:9c:1b:d2:
5a:4b:90:82:a5:37:54:20:13:b5:89:05:41:54:04:
ce:58:fe:8b:44:16:ab:62:33:c6:87:11:fe:20:e2:
30:6e:8e:aa:2d:11:ce:ef:d5:d2:13:4c:57:09:70:
00:a7:66:38:70:11:a3:74:50:c0:0a:f2:98:5d:89:
e3:0d:0f:97:46:e8:4d:1a:cb:a1:1b:7a:20:03:cb:
f8:80:19:c0:32:ea:e4:50:e0:45:a6:6f:d9:e6:7d:
73:f0:ea:d3:da:f9:4e:84:b3:55:40:2a:ca:fc:90:
c9:ac:0a:38:e0:2f:c1:05:9d:4e:c5:47:d2:c9:6f:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:12:46:08:3B:47:0E:9E:3E:D8:13:E0:1F:41:5F:45:1C:F3:56:53
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/thJGCDtHDp4-2BPgH0FfRRzzVlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.137.0-188.172.138.255
Signature Algorithm: sha256WithRSAEncryption
3b:2f:cb:20:72:9d:8a:72:e5:26:eb:3d:e2:29:90:38:7a:58:
69:1c:aa:94:0a:40:80:27:fd:6e:3d:c9:f4:4d:d9:ce:3b:46:
6f:83:bb:ad:db:53:5f:0e:4e:ae:2e:78:30:1a:d5:75:19:1e:
a5:e8:3b:60:a2:96:07:c4:e6:00:9f:28:d9:9a:46:ff:f4:f3:
83:b3:20:01:3d:10:f1:00:a8:e4:3d:d3:a1:01:e6:f7:6b:1b:
70:34:cb:33:32:f7:42:f6:e3:2b:b9:0c:56:54:e1:f8:2a:70:
e0:36:01:8f:bf:3f:e1:b5:1a:2d:4b:79:6a:a2:73:de:3f:81:
ac:06:6c:87:e4:b5:ba:5e:c6:5f:c5:74:a2:83:4a:ac:84:db:
c9:08:a7:f5:ff:13:50:51:1d:0d:a8:58:61:aa:52:b4:c7:9c:
b6:fd:68:6d:68:15:0f:cc:eb:aa:6e:9c:c4:3e:5c:23:8a:31:
35:2c:d2:1a:8c:f1:1d:3e:b1:e6:f7:78:42:62:b6:af:61:c1:
ac:56:3c:b4:71:6b:31:5f:14:8c:6f:31:b0:48:2a:2e:d7:35:
31:21:21:a5:a6:88:f8:3c:4d:4b:d3:c6:15:40:56:57:4e:88:
98:36:e4:e2:43:1b:de:44:00:f1:00:c8:b9:6d:97:13:98:a2:
f2:42:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:50 2024 by rpki-client on console-ams.rpki-client.org