Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/e-jj--13dQl2SKWjp6jMvg6moxc.roa
File: e-jj--13dQl2SKWjp6jMvg6moxc.roa (raw, json)
Hash identifier: 7T2+zdjkNcdArb+A3nugWQyraqdC/hbwLAqhkCLtG6M=
Subject key identifier: 7B:E8:E3:FB:ED:77:75:09:76:48:A5:A3:A7:A8:CC:BE:0E:A6:A3:17
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018CC8DECF97DFCF6FF9AAFB962FBC0072B3
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/e-jj--13dQl2SKWjp6jMvg6moxc.roa
Signing time: Tue 02 Jan 2024 06:31:34 +0000
ROA not before: Tue 02 Jan 2024 06:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203589
IP address blocks: 188.211.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 17:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:cf:97:df:cf:6f:f9:aa:fb:96:2f:bc:00:72:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 06:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7be8e3fbed7775097648a5a3a7a8ccbe0ea6a317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:45:38:58:86:84:fe:27:b5:3d:d9:68:4b:
75:0b:bf:c6:25:bf:87:09:cd:49:bb:6a:8e:a5:54:
a8:1b:e3:05:10:82:9e:48:67:05:89:25:6f:0f:c2:
60:9e:37:e7:0d:53:95:33:93:b1:b7:3f:df:79:3a:
c9:8b:8c:ab:db:9d:dd:39:9f:11:b4:82:18:2d:ee:
8b:e2:b1:3f:f2:dd:a6:00:91:99:51:62:f0:8b:79:
69:7a:5d:c3:95:0c:24:04:16:70:39:3d:6e:45:94:
b2:a2:d3:4e:1c:40:f6:4f:6a:3c:eb:0c:ea:3b:47:
f7:04:00:15:9a:44:4a:67:f2:a6:f2:2d:ce:1d:06:
8d:eb:60:0c:1c:49:08:07:0b:96:52:5d:ec:4d:69:
ab:a6:ce:80:b1:51:e7:33:f3:89:c0:ef:90:83:2e:
12:59:82:51:81:16:c0:13:3c:94:b7:96:76:85:fe:
50:18:5f:47:fe:44:f4:6a:c8:00:bd:d8:24:ca:89:
fc:8e:9f:84:e0:65:e9:18:09:3e:5d:04:f5:87:eb:
3d:06:31:f8:aa:ff:0c:84:47:af:e0:1a:e3:a1:64:
af:8a:48:5b:79:28:73:8d:c5:ce:b4:1a:37:19:79:
c8:ae:ee:07:65:f4:28:36:f5:37:43:59:84:e5:6c:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:E3:FB:ED:77:75:09:76:48:A5:A3:A7:A8:CC:BE:0E:A6:A3:17
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/e-jj--13dQl2SKWjp6jMvg6moxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8b:4b:26:42:ca:7f:94:78:fe:10:a5:48:a8:e6:28:4b:1d:
d6:bb:3a:ea:58:24:a1:e3:33:94:02:12:1c:7f:b6:9f:7d:f3:
ed:5a:d5:59:0b:d5:9c:17:1c:21:ce:d2:75:55:4e:dc:84:c4:
c5:51:0d:99:01:a0:e0:da:ba:c3:b3:9c:e2:00:04:72:69:fa:
db:6a:3a:31:54:0b:62:85:6b:07:06:c5:b4:90:7a:a1:9d:bd:
7a:73:5f:6b:57:43:5e:8d:1c:47:12:eb:1e:19:90:33:ee:44:
d9:1f:43:16:fe:12:b1:08:80:5a:a9:ae:63:d2:f4:c7:a1:a3:
49:85:5f:5c:33:52:4b:1b:fc:1c:4e:18:44:57:23:21:9e:2b:
2d:f8:85:4e:3d:eb:68:a3:b8:6f:f8:64:08:26:f9:5c:ae:36:
b7:64:d0:42:bc:19:c2:7e:b5:60:8b:a8:25:6f:27:1a:8a:39:
a0:f9:8f:d3:f6:7b:01:06:42:79:9b:4b:9a:3b:ce:ce:a1:18:
db:f0:67:5d:3d:d5:6b:33:e6:f6:34:65:36:d5:95:d4:87:4b:
a9:33:1a:13:32:96:c2:22:0f:ec:7a:26:0a:27:64:e3:71:46:
08:19:78:9d:9d:08:df:d9:dc:61:fc:b8:76:6e:4f:43:96:6a:
1f:ea:41:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:37 2025 by rpki-client