Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/CciXr5ydBurWWm2PjEBr3iPaYbk.roa
File: CciXr5ydBurWWm2PjEBr3iPaYbk.roa (raw, json)
Hash identifier: p/q2gp8ECRAuJKjegSZSe/vIrcRzMdkGwgxz+mLTyxE=
Subject key identifier: 09:C8:97:AF:9C:9D:06:EA:D6:5A:6D:8F:8C:40:6B:DE:23:DA:61:B9
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 0185714C3CAD97FC43D8F802720B575729C4
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/CciXr5ydBurWWm2PjEBr3iPaYbk.roa
Signing time: Mon 02 Jan 2023 07:04:59 +0000
ROA not before: Mon 02 Jan 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9096
IP address blocks: 188.172.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3c:ad:97:fc:43:d8:f8:02:72:0b:57:57:29:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 2 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09c897af9c9d06ead65a6d8f8c406bde23da61b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:d5:95:26:c7:e8:d9:2d:a2:f4:bf:fc:44:
1e:2f:c6:4c:bb:37:fa:02:bb:e0:b1:5d:bd:4f:93:
2e:f2:0d:46:74:8c:9a:af:a7:21:5e:bc:e6:a6:a5:
6c:d6:bb:3a:82:31:45:1d:c3:f4:a2:81:87:86:d4:
01:54:c8:1c:ff:90:84:9b:e8:dd:11:ea:32:d0:09:
50:31:7c:55:f9:ac:48:ea:75:bd:d9:24:22:d3:26:
bd:d1:53:46:5a:7c:81:2b:e8:d4:91:78:06:73:0f:
43:30:ae:1a:1f:1f:0b:66:a0:3b:63:c6:29:9f:09:
fd:95:e8:87:bd:16:cd:7d:af:ad:26:6d:2c:4c:a8:
f9:a3:05:c6:50:b9:3b:01:0a:46:ed:75:47:4b:a9:
9f:aa:b6:fc:f9:cd:36:40:3e:13:dd:29:45:cf:6d:
59:0b:70:3e:c0:28:47:e4:17:04:7c:8d:ac:cb:57:
35:52:43:79:8e:ce:c9:79:0a:2c:89:6f:06:e6:ae:
77:89:3b:3e:16:7f:14:3f:03:7a:63:ca:a5:70:a2:
3f:1b:6a:73:43:a6:78:75:25:a4:ac:a0:c5:2b:c7:
cf:bd:1a:ad:94:da:00:3f:3f:b3:d8:ef:53:35:eb:
37:21:3a:f8:90:d3:9b:1d:42:55:ee:36:1e:2d:bf:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:97:AF:9C:9D:06:EA:D6:5A:6D:8F:8C:40:6B:DE:23:DA:61:B9
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/CciXr5ydBurWWm2PjEBr3iPaYbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:15:f8:f2:10:f6:a1:6f:69:86:23:f0:b6:b1:12:9d:5e:a2:
2c:64:23:94:68:ef:f5:40:b8:94:be:f1:f4:a0:de:d5:c7:a6:
4b:a8:31:66:cc:18:56:2a:34:f0:47:4c:6a:07:f4:bf:9a:2a:
56:81:29:58:75:51:61:0b:b8:45:ec:36:9d:77:c9:d6:09:bf:
10:d6:cd:09:16:36:c5:46:c6:07:26:6d:8e:ec:be:12:d8:b2:
d5:b5:30:6f:59:cd:f8:54:bb:a2:db:19:c9:f9:39:c4:2d:f7:
bc:9b:e9:2a:44:14:68:2f:03:da:de:ec:01:fc:e2:72:ab:77:
3c:06:8c:8f:e5:a2:f5:28:cd:1a:0a:1d:9d:a7:5e:73:39:a4:
f1:03:02:15:6d:8a:65:2a:c0:ac:e4:b0:a7:e4:4a:38:33:9b:
c0:69:57:7b:5f:ec:ba:47:7d:00:b1:cc:3b:f8:d2:ba:18:80:
61:41:30:0b:96:c2:9d:d9:d0:73:0f:fa:5d:58:14:06:06:44:
00:06:80:21:e3:02:25:8d:cd:f4:3f:b5:2a:d7:34:ad:64:ed:
3b:a3:7b:be:48:1a:e2:df:5f:24:6f:6f:c8:41:b3:a7:63:3d:
6c:09:81:b4:4a:d5:a3:a4:cf:c0:62:8e:bd:1f:1f:7e:45:3e:
dd:b3:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org