Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/o-o6J4q5aJYsZjCeIJQC99Xzcz4.roa
File: o-o6J4q5aJYsZjCeIJQC99Xzcz4.roa (raw, json)
Hash identifier: EMlrF45eHO6rIimrOEkIUk62IPzBMpk0OKWeht1eWJ4=
Subject key identifier: A3:EA:3A:27:8A:B9:68:96:2C:66:30:9E:20:94:02:F7:D5:F3:73:3E
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0188A3F489F24334E0B927A8371D7E92BF9E
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/o-o6J4q5aJYsZjCeIJQC99Xzcz4.roa
Signing time: Sat 10 Jun 2023 06:18:12 +0000
ROA not before: Sat 10 Jun 2023 06:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 188.64.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a3:f4:89:f2:43:34:e0:b9:27:a8:37:1d:7e:92:bf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jun 10 06:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3ea3a278ab968962c66309e209402f7d5f3733e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:59:00:40:16:1f:3e:dc:fd:d9:42:07:f5:
3a:f2:23:3a:a7:d9:25:29:c1:22:83:31:de:e4:b7:
e7:60:ea:a4:a8:40:f3:d6:b8:17:07:59:1a:9f:77:
d3:1c:4a:b7:f9:2a:f5:e7:97:47:5d:36:a0:ea:d5:
8f:72:d5:e8:0e:c9:c3:cf:b1:de:0b:be:36:d8:b9:
b0:ea:7d:c8:04:a9:f8:b0:a1:ad:c5:5f:09:fd:5f:
7a:c1:cf:53:da:38:6c:12:3a:80:83:ff:ba:27:92:
4e:cd:1a:ac:48:c5:64:1f:20:1d:3a:37:fe:3f:78:
c0:6a:33:e2:e2:a0:4e:87:03:4d:b1:d4:37:5e:88:
f0:5e:31:36:02:50:c1:ff:e3:d4:85:3a:f6:01:e7:
38:05:55:c4:af:63:60:b6:0f:e9:27:6a:16:2e:da:
10:9b:6d:9b:bb:a6:8d:b5:85:8a:c2:45:33:55:da:
43:08:68:06:4d:9a:1f:ba:19:fc:3f:4e:c7:5b:c3:
28:c6:ff:e5:dd:36:d4:97:cd:b7:3c:47:ad:22:90:
5c:89:c8:b8:40:01:5c:5c:8d:34:b0:6b:db:b7:d1:
a3:f9:2e:04:f3:88:1c:18:84:eb:39:f4:38:7e:5b:
d1:a7:e0:a4:0e:cd:a1:ba:af:80:9f:58:37:f4:f6:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:3A:27:8A:B9:68:96:2C:66:30:9E:20:94:02:F7:D5:F3:73:3E
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/o-o6J4q5aJYsZjCeIJQC99Xzcz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.108.0/22
Signature Algorithm: sha256WithRSAEncryption
44:e1:cb:0b:bf:40:7f:f9:cf:37:eb:53:38:26:5b:68:33:7b:
b6:cc:47:b2:99:f9:70:0c:12:b3:d3:9b:d3:4d:55:cd:60:7f:
bb:bd:c2:22:50:3e:9d:b1:ad:5e:19:9c:ce:40:46:6a:80:24:
56:2c:af:c0:ae:43:0a:ec:d2:f5:99:b8:40:a9:16:3f:af:d9:
83:09:0d:d5:a4:80:68:c0:ad:a2:0a:c3:f4:9d:90:d2:b7:bf:
22:8d:e8:41:95:12:b8:c1:41:69:6a:89:f7:e3:45:d4:c9:49:
ad:55:ca:17:09:c2:ab:1d:43:36:90:ca:c0:5b:f2:e2:4f:ec:
d2:67:41:18:d2:80:90:ca:8c:21:e4:6a:0d:60:94:95:cb:53:
f2:27:0a:05:6d:e7:ae:c6:a3:5f:5f:73:f0:dd:7e:73:ec:99:
35:e3:20:bd:66:f3:0f:92:02:12:94:7c:d2:e0:c4:14:2c:5b:
5e:39:85:c7:0b:e6:88:6d:c3:1c:a0:24:12:e2:b9:05:3a:48:
19:23:39:aa:74:01:08:fa:4a:de:9d:9d:a4:6e:e5:c3:ea:97:
8b:19:c7:ca:47:13:53:7c:56:a9:e6:5f:86:40:58:58:99:69:
b3:27:61:e4:a5:26:02:a8:c6:1c:f2:2c:39:67:9a:1d:7b:29:
da:ce:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 12:32:26 2023 by rpki-client on console-fra.rpki-client.org