Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/evoNDk3Q1f4ZC8nUsYsl02bdM9U.roa
File: evoNDk3Q1f4ZC8nUsYsl02bdM9U.roa (raw, json)
Hash identifier: 7pxUqwsoGmqvVFmXCIN4ti5g2DlF+R5OiHniZXYz7zM=
Subject key identifier: 7A:FA:0D:0E:4D:D0:D5:FE:19:0B:C9:D4:B1:8B:25:D3:66:DD:33:D5
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018C8CD72285940E6302602170EA89291F92
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/evoNDk3Q1f4ZC8nUsYsl02bdM9U.roa
Signing time: Thu 21 Dec 2023 14:45:58 +0000
ROA not before: Thu 21 Dec 2023 14:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 188.64.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:d7:22:85:94:0e:63:02:60:21:70:ea:89:29:1f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Dec 21 14:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7afa0d0e4dd0d5fe190bc9d4b18b25d366dd33d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:29:19:4f:2f:40:b0:1b:07:b5:40:ca:fb:
94:27:84:0d:2c:44:95:1a:e6:7d:3f:f3:18:bf:a8:
61:3e:3a:bd:89:a7:4c:12:69:3d:41:eb:14:d2:74:
b1:87:87:f3:b2:51:f3:5c:de:26:35:d7:34:c1:dc:
a4:de:37:30:30:03:cc:dd:15:84:d6:c8:9a:13:1f:
ec:dd:8c:24:99:3d:80:c1:6b:77:31:a3:b1:0f:86:
e5:f3:29:27:4b:7a:3f:d1:33:75:d7:1c:22:a2:15:
1b:cd:35:94:90:85:76:09:bc:81:bc:a6:3f:b4:12:
a6:ae:bb:c0:05:54:00:a5:a1:71:9c:6f:6d:9c:1c:
bd:cc:7e:3f:72:8c:7a:58:09:0a:12:22:5a:c4:b8:
25:a2:5f:a0:4f:f0:bc:8b:37:1b:e7:f6:dd:48:73:
0a:cd:e1:0f:7a:d2:5b:aa:15:a3:23:72:24:21:91:
b3:d7:97:31:47:e8:f8:85:e4:c4:1b:ba:b0:f1:10:
d1:2a:a3:59:56:41:37:ec:a4:bd:bb:1f:17:55:b3:
cb:c9:94:ce:81:27:ad:70:9e:42:82:8a:b8:df:31:
e0:80:46:b9:5a:5f:fc:ff:5e:54:6e:5f:60:7f:7d:
0a:6a:92:ff:0c:0a:d2:98:1c:af:d8:76:9a:ca:3e:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:0D:0E:4D:D0:D5:FE:19:0B:C9:D4:B1:8B:25:D3:66:DD:33:D5
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/evoNDk3Q1f4ZC8nUsYsl02bdM9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:bd:8d:0b:27:e4:bf:db:47:0f:0e:b2:ef:bb:09:b6:40:93:
fb:e2:f9:98:a1:9b:a0:47:5b:b8:6b:a8:83:93:28:89:36:9e:
a7:77:cc:e6:59:ae:cb:a2:83:b9:45:44:cd:cf:d8:bb:7a:bc:
c2:c6:9b:38:02:f9:86:2b:68:27:92:5c:2d:1d:86:7f:24:07:
82:19:c7:db:da:e9:42:50:79:fc:11:78:5c:84:0f:12:5c:c5:
2e:dd:ed:a5:bc:71:b8:2b:47:1d:9d:8b:17:c5:e3:52:85:3f:
ed:d2:2b:6b:ff:7b:c5:eb:2d:d6:eb:07:85:46:e8:7c:55:04:
74:47:32:5c:e9:52:5c:f7:96:e5:5f:7e:09:8d:9e:be:30:18:
3d:64:08:f3:d6:cd:e4:97:36:f0:ff:03:cf:30:70:a9:aa:34:
50:81:0b:f3:29:95:5d:42:45:6f:09:e0:e3:c9:15:5d:9f:7d:
22:cb:e8:d6:33:00:d6:9d:d8:1f:5d:c1:2e:ee:4d:1c:c2:3a:
da:95:bb:76:a4:c0:1a:d7:eb:62:0c:45:ac:76:cf:21:16:30:
1d:37:d4:6e:09:20:34:47:97:4f:11:dd:ff:69:4d:e9:d6:ff:
d8:40:7f:7f:df:1b:f9:1a:a2:23:29:69:3b:7b:c1:81:cb:c8:
98:1f:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:23 2024 by rpki-client on console-fra.rpki-client.org