Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/i2wuTNewBjvdQiBliHHQV2ko9rA.roa
File: i2wuTNewBjvdQiBliHHQV2ko9rA.roa (raw, json)
Hash identifier: HT1xdhPKaIusFUeAhIPR9W7YDVXTYYseaVB6ncWmgFA=
Subject key identifier: 8B:6C:2E:4C:D7:B0:06:3B:DD:42:20:65:88:71:D0:57:69:28:F6:B0
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 019228F3A4890F0EA6ABB1886F4133F4E61B
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/i2wuTNewBjvdQiBliHHQV2ko9rA.roa
Signing time: Wed 25 Sep 2024 11:31:48 +0000
ROA not before: Wed 25 Sep 2024 11:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31520
IP address blocks: 176.241.148.0/22 maxlen: 22
188.247.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 07:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:f3:a4:89:0f:0e:a6:ab:b1:88:6f:41:33:f4:e6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Sep 25 11:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b6c2e4cd7b0063bdd4220658871d0576928f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:67:21:bf:38:7f:d4:92:01:03:5b:e5:35:
ac:42:9e:99:6d:59:11:4a:60:69:d6:f0:0d:a2:80:
9f:4c:55:33:82:fc:96:32:4a:cc:13:59:3a:32:de:
85:45:5d:50:64:06:da:ae:bf:f4:24:f6:10:7b:4a:
34:82:e6:66:cd:48:de:a5:60:2e:ec:af:6d:3c:4b:
e6:88:64:6f:66:be:b6:30:77:a8:da:4a:bc:11:4c:
14:a1:a7:b5:5a:c7:32:ba:ca:96:e1:f1:01:ee:a4:
a0:0d:65:2e:5e:f2:ca:2d:f9:d5:13:df:69:80:b9:
42:8e:d8:c2:0f:c1:8f:27:b4:c7:25:89:21:84:c2:
2b:4d:d0:bd:00:34:8b:37:bf:49:a2:5b:5e:79:76:
35:03:25:2e:50:31:f8:c6:6e:96:5a:23:37:8e:31:
ce:df:6a:a0:e7:1c:a4:4e:b2:98:7f:3b:fc:0b:cc:
7f:f7:29:88:e3:69:0d:1b:36:30:00:65:04:c6:3b:
69:96:16:e7:29:1a:22:69:5c:ba:6d:ab:48:5f:8d:
cc:7d:35:44:85:ef:1b:ac:fe:dd:5c:ac:e3:7c:ad:
b5:0f:eb:ea:97:d9:f3:8b:2d:75:55:b5:63:d9:2c:
0f:39:6c:42:3f:63:d4:d5:9c:6e:04:c9:f5:ac:5a:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:2E:4C:D7:B0:06:3B:DD:42:20:65:88:71:D0:57:69:28:F6:B0
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/i2wuTNewBjvdQiBliHHQV2ko9rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.148.0/22
188.247.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ff:b3:2d:35:38:18:37:42:f6:8f:df:b6:db:57:06:f4:a5:
ed:24:2c:79:0e:c6:8a:0a:14:e6:00:ba:aa:24:d6:38:07:59:
15:5d:5a:11:ac:96:a3:cf:b1:e9:95:59:8d:9d:79:17:32:af:
b0:ec:d3:41:12:2f:c1:09:86:20:6b:a7:1c:99:9f:cf:ce:61:
e1:00:e1:ec:92:40:ad:05:c3:c0:1d:e2:9e:8f:c2:c9:ef:fb:
08:ec:b5:b2:b8:14:16:ca:81:b7:81:da:b4:c6:ad:ea:7c:b2:
70:ae:42:8a:6c:57:41:04:1f:f9:d0:32:3f:1f:09:4f:d4:15:
2c:af:fc:31:60:e9:e8:90:00:7d:90:b0:1d:e6:2a:3b:a4:18:
fa:32:01:b5:e8:e7:55:df:e9:65:b1:b0:2a:5e:2e:5c:68:10:
32:06:4c:fc:b9:d4:a6:9c:eb:0c:cb:78:3a:8d:13:b9:ed:f6:
68:fe:32:3b:b5:ed:fe:1e:d0:44:ab:19:8c:d7:47:31:99:f0:
e4:95:fe:c1:80:5d:4f:4a:81:20:6c:46:14:c5:73:4d:c8:d7:
93:b0:25:11:56:f0:d7:ad:00:a3:c9:6f:1b:dd:5c:f6:97:da:
30:7a:55:2c:2f:8a:34:69:0f:2d:97:fc:11:e1:50:6e:17:9f:
8b:2e:a5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:06 2024 by rpki-client on console-ams.rpki-client.org