Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/P8BNxz-tIYYIMVScXQSSEldrOb0.roa
File: P8BNxz-tIYYIMVScXQSSEldrOb0.roa (raw, json)
Hash identifier: vO7QWiNtwRABuRbqAeCVjWQE9QXGz8vT/9yNDEs/Wwk=
Subject key identifier: 3F:C0:4D:C7:3F:AD:21:86:08:31:54:9C:5D:04:92:12:57:6B:39:BD
Certificate issuer: /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial: 018C8F0C02EC58DA3AF5CA07DBF2D629F7EF
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/P8BNxz-tIYYIMVScXQSSEldrOb0.roa
Signing time: Fri 22 Dec 2023 01:02:58 +0000
ROA not before: Fri 22 Dec 2023 01:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197730
IP address blocks: 188.64.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:0c:02:ec:58:da:3a:f5:ca:07:db:f2:d6:29:f7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Validity
Not Before: Dec 22 01:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fc04dc73fad21860831549c5d049212576b39bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:0e:9a:a2:e2:74:3c:24:b9:a0:96:ba:4d:
9f:28:19:59:3a:cf:86:d0:2f:f5:ea:7b:93:76:3e:
36:b3:8c:1d:c7:61:e4:3e:5a:dd:e0:c4:ff:c9:fe:
b0:ad:8d:4d:ad:dc:4a:40:b9:81:0b:b3:fc:e8:6e:
c8:d1:e7:bd:43:97:c1:a3:6f:75:52:46:f2:ca:2b:
bd:ea:d8:00:3c:c7:24:9b:50:3f:dc:e6:f0:64:57:
e1:5a:41:eb:da:5c:dc:e3:a5:36:07:d9:b6:17:f6:
e2:b7:24:27:a0:d4:3e:ef:b3:ae:c6:86:6b:6d:1b:
8a:08:d4:0c:c6:4f:fe:39:52:26:95:bc:84:db:6a:
82:d8:c0:ca:c4:b2:92:93:ae:c1:df:b3:55:b8:58:
79:82:8d:f7:f7:80:86:00:dd:d1:88:2d:72:8b:c6:
7c:d6:a2:83:7b:3f:5b:02:64:4c:06:23:a8:16:23:
7f:c8:b9:24:59:b4:b5:6c:88:ef:86:48:42:85:e9:
c7:7f:44:cb:6c:19:4a:07:45:05:d0:19:21:d9:03:
e9:5e:83:90:f6:d0:74:6d:41:f2:69:0c:14:a2:0d:
de:73:c6:6a:7e:a6:79:52:12:35:16:40:97:00:40:
bb:12:13:f0:b4:f8:9a:ed:eb:88:82:7b:05:0d:fa:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C0:4D:C7:3F:AD:21:86:08:31:54:9C:5D:04:92:12:57:6B:39:BD
X509v3 Authority Key Identifier:
keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/P8BNxz-tIYYIMVScXQSSEldrOb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.143.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8b:5f:99:4a:43:05:c3:55:cc:8c:41:1d:ab:57:58:10:28:
94:8d:49:d1:0a:d9:03:42:16:9e:51:fd:ef:dd:54:c7:d7:bc:
ac:b4:08:b4:a2:e0:27:7a:77:2d:65:89:24:12:eb:9f:7a:33:
e0:b5:3a:5e:7c:5b:c8:b8:47:98:e5:bd:ed:f0:aa:8a:d8:d1:
0f:ad:ac:ef:12:c0:c8:80:de:08:11:5b:07:0a:2d:17:80:fa:
1c:2b:6e:36:c6:7d:ce:18:9a:75:55:66:6b:51:24:0e:78:aa:
90:b2:81:40:8d:ae:98:fc:19:7d:80:c5:d1:eb:2d:68:05:1d:
be:2e:25:96:6f:31:a2:54:4a:5c:94:94:ba:b7:0a:bf:2a:80:
64:c9:a2:f2:c9:c2:0e:5f:63:94:24:e0:e6:39:3c:29:93:0d:
64:33:0c:86:3f:8c:32:d5:a8:d3:fb:dc:34:34:d8:a6:6e:5e:
ba:4d:a3:03:1a:31:6a:1c:da:b8:b0:23:27:8d:8b:a4:ed:76:
b0:d2:ca:f3:7b:63:91:90:68:8a:21:37:5b:54:53:c3:76:98:
bd:00:27:5e:5e:43:2a:e9:bd:d3:14:07:ad:4f:26:0f:20:69:
41:7b:65:ed:37:f3:2b:6b:70:57:80:3e:a6:b5:98:0f:b9:a6:
2e:df:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:32 2024 by rpki-client on console-ams.rpki-client.org