Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Y11B34u9MpNl5Vg2r1O3AhF61ko.roa
File: Y11B34u9MpNl5Vg2r1O3AhF61ko.roa (raw, json)
Hash identifier: gxDGonGhQxLaqw596QjntJZ3CHFq5EemIr1zfOfnUe0=
Subject key identifier: 63:5D:41:DF:8B:BD:32:93:65:E5:58:36:AF:53:B7:02:11:7A:D6:4A
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0193ADE714A95BE952586BC26CE827DBDE58
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Y11B34u9MpNl5Vg2r1O3AhF61ko.roa
Signing time: Tue 10 Dec 2024 00:10:22 +0000
ROA not before: Tue 10 Dec 2024 00:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 188.214.234.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 16 Dec 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:e7:14:a9:5b:e9:52:58:6b:c2:6c:e8:27:db:de:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Dec 10 00:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=635d41df8bbd329365e55836af53b702117ad64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:ae:9d:7d:13:4d:55:3e:4f:18:f9:78:45:
ce:ad:73:54:00:12:f6:6c:27:1d:66:52:b6:41:ba:
02:ac:4a:af:bb:4f:9c:21:24:10:61:a4:8e:20:ab:
7c:38:56:2c:80:f8:ff:e3:d9:91:e2:57:38:09:21:
77:14:8f:27:bc:ee:e3:27:a2:fa:37:69:68:48:ff:
b0:84:0d:f1:b4:1d:80:71:db:c9:14:99:a3:26:8b:
d7:e3:50:4c:40:bf:50:dc:31:9c:a0:07:98:be:d3:
e9:6d:fd:a5:76:a8:c2:eb:fe:ad:41:14:e2:d4:d5:
70:92:da:64:e9:a1:6a:f7:35:eb:99:73:3e:0c:5e:
ee:0d:11:2e:a0:1c:35:81:39:fe:b5:37:32:56:0d:
09:cb:bc:80:66:ea:9e:29:e3:40:e8:1b:2e:e8:e0:
fe:d4:f4:53:8c:9b:8b:75:f0:c8:46:c3:64:ed:c2:
e8:83:03:86:1e:f5:6a:10:eb:97:75:65:74:9e:79:
0e:f6:72:8d:31:b8:63:ea:37:b4:87:7e:fe:1f:3f:
d5:c0:4d:db:1d:5e:65:29:29:4b:e1:ea:0a:bd:b4:
ef:c9:2b:e4:3c:89:6f:d4:0e:c4:94:be:79:6c:c0:
08:7f:1d:05:48:ca:8c:ec:b0:6e:48:b0:3a:66:9d:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5D:41:DF:8B:BD:32:93:65:E5:58:36:AF:53:B7:02:11:7A:D6:4A
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Y11B34u9MpNl5Vg2r1O3AhF61ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:80:20:c5:83:71:1a:a1:28:2e:dc:09:ca:f9:c3:7c:09:76:
83:71:7f:9b:85:0b:b1:fe:d0:6d:96:9b:d8:e2:53:0a:49:1f:
11:89:23:ef:ce:67:87:cf:99:ba:46:8f:c6:94:2c:d8:80:3b:
a1:5d:15:58:e7:4a:aa:b8:7d:21:67:ae:c1:4e:01:a3:f7:7a:
98:a0:67:0f:24:dc:c5:54:50:ab:b0:c1:c5:74:eb:fa:b6:03:
18:a7:c2:8c:8b:e1:ad:b5:6f:71:0c:81:bc:fe:46:99:b7:2f:
75:56:66:86:5d:b7:2b:ab:d3:d5:4d:44:b8:fd:65:55:49:f6:
43:7a:41:af:64:c1:6f:21:07:88:d3:83:25:31:39:ce:aa:09:
b0:ee:a6:36:50:d0:cb:cb:46:f7:5c:8f:ad:4f:f0:66:21:0d:
fc:21:31:3a:8f:2b:89:88:e6:1b:5a:25:5a:36:40:31:a5:88:
83:99:70:b5:25:72:03:43:8e:c8:08:8a:38:76:49:7f:3f:45:
e9:f0:f6:b4:d2:af:80:f7:4f:3e:cd:ee:fb:3b:93:5f:25:19:
5c:32:42:ba:89:97:88:53:bc:40:1d:48:0c:3c:e5:c6:f5:1f:
d0:e6:e2:e2:bb:fc:bf:14:2d:90:a7:6c:c3:73:be:af:88:1f:
50:c9:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 16 04:14:48 2024 by rpki-client on console-fra.rpki-client.org