Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/xPk_B_O7Fwo2o3dYWME185t2nB0.roa
File: xPk_B_O7Fwo2o3dYWME185t2nB0.roa (raw, json)
Hash identifier: KnqfGP10nCmxfuh5RbkaZ0beUk6XEGDVzq5znjT+zNg=
Subject key identifier: C4:F9:3F:07:F3:BB:17:0A:36:A3:77:58:58:C1:35:F3:9B:76:9C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 018CC5DCCF0BC5DFFD1BB6E27A1DB786BEBB
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/xPk_B_O7Fwo2o3dYWME185t2nB0.roa
Signing time: Mon 01 Jan 2024 16:30:31 +0000
ROA not before: Mon 01 Jan 2024 16:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 188.172.137.0/24 maxlen: 24
188.172.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 21:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:cf:0b:c5:df:fd:1b:b6:e2:7a:1d:b7:86:be:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Jan 1 16:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4f93f07f3bb170a36a3775858c135f39b769c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:02:af:11:e9:de:75:b7:99:41:45:54:28:
a7:fc:6d:66:a6:63:2e:ed:13:6c:fa:7a:43:86:71:
00:3e:9a:dd:15:22:82:10:5b:eb:19:35:d7:fa:c6:
d7:8f:78:98:d6:0c:7f:ad:34:f5:3a:25:16:93:cb:
2d:91:af:d5:3a:4b:36:b3:88:70:c8:64:69:dd:4c:
b5:85:5f:69:bd:92:7a:25:f6:72:9a:57:50:ff:67:
db:67:e7:7f:df:20:db:77:60:28:f2:6b:54:3a:0f:
67:a2:48:d9:f6:6b:54:49:20:65:b9:c2:52:cc:e0:
10:e7:12:31:4a:3c:ce:54:e4:f6:da:ff:46:87:a2:
59:4c:3a:da:3e:fb:51:17:22:ec:32:b1:4d:a6:99:
66:22:a3:fc:53:37:23:21:b7:64:62:77:c1:85:81:
99:2d:c6:6b:07:dd:5e:2e:45:56:4f:71:38:b9:76:
85:f1:5e:ec:c2:f5:9d:ee:d8:8b:d7:b5:31:34:50:
a2:1e:5b:7d:21:2d:74:ea:e2:f4:91:af:49:71:c7:
f6:05:6c:8d:81:ee:32:73:84:61:ca:0b:be:98:9e:
c3:22:67:b9:ed:22:68:7b:f2:8e:40:a6:dd:74:38:
a1:73:f0:12:4e:53:d5:77:19:d4:1a:7f:bc:36:96:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:3F:07:F3:BB:17:0A:36:A3:77:58:58:C1:35:F3:9B:76:9C:1D
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/xPk_B_O7Fwo2o3dYWME185t2nB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.137.0-188.172.138.255
Signature Algorithm: sha256WithRSAEncryption
a8:5e:d1:72:78:9a:59:48:9b:f4:4a:c4:fe:60:5d:fc:31:e4:
b7:40:60:6b:ed:94:71:58:7c:4c:af:e0:e8:6a:88:8e:4b:78:
fa:86:97:e3:79:8d:9b:2e:19:53:21:e0:0d:07:f1:14:e9:05:
5f:63:81:45:ef:ca:92:c6:24:e6:61:39:53:60:af:e7:f1:36:
f0:34:8e:b1:77:9e:34:92:d7:6a:3f:27:17:14:f0:ee:d6:56:
d4:2a:11:d4:b1:42:dd:98:d7:2b:60:01:0a:be:82:7c:be:10:
16:35:38:70:65:50:76:8c:62:df:00:a5:de:66:51:fb:df:25:
fa:40:cc:b1:36:08:63:80:84:50:b6:a0:15:cd:14:d3:41:25:
87:c9:ef:bb:db:c7:35:e3:09:78:c8:57:75:8f:d0:eb:bf:d9:
a0:45:a6:29:68:18:e1:58:d6:63:71:25:1b:71:e9:70:8a:05:
4b:e6:a5:7f:0b:94:17:9c:0b:87:82:73:b6:ae:77:c3:9d:65:
cd:32:ff:07:1f:70:0c:73:71:60:54:cd:93:e6:d0:96:51:66:
a0:e0:1f:5f:e2:a1:20:2c:5e:56:66:14:ee:79:0f:54:06:3a:
d0:a0:d8:4b:71:64:88:79:32:3c:fa:2e:ba:b9:2f:f3:34:2d:
c5:4b:66:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org