Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/ban5UWEvMLI1bIxA1BREwgRoImM.roa
File: ban5UWEvMLI1bIxA1BREwgRoImM.roa (raw, json)
Hash identifier: NaUya6pVwrnpW57riXmvfii6BNY/Pe5ocmgyK9hreNQ=
Subject key identifier: 6D:A9:F9:51:61:2F:30:B2:35:6C:8C:40:D4:14:44:C2:04:68:22:63
Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial: 018CC2DB55A45637BB284905AA7E5A368A46
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/ban5UWEvMLI1bIxA1BREwgRoImM.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201622
IP address blocks: 188.126.96.0/19 maxlen: 19
188.126.96.0/20 maxlen: 20
188.126.112.0/21 maxlen: 21
188.126.120.0/21 maxlen: 21
2a09:f400::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 Feb 2024 11:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:55:a4:56:37:bb:28:49:05:aa:7e:5a:36:8a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6da9f951612f30b2356c8c40d41444c204682263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:9c:74:f2:96:ad:5c:ad:d1:4c:0e:d1:24:
c9:c6:cb:c6:5b:f3:e1:fc:c1:85:28:71:64:40:b5:
ae:dc:e6:66:50:5f:d2:c0:94:5a:ab:35:1d:24:c0:
ad:e0:17:bc:e1:a0:d7:99:5c:d1:88:83:37:30:0b:
4e:f2:39:ec:cc:1d:1e:05:8b:76:04:05:85:a0:cd:
a7:42:40:1d:10:62:f5:f6:41:1d:5c:27:d5:bd:3e:
fc:76:a1:af:3c:bd:83:15:a9:f4:6f:9a:05:26:05:
2c:48:3c:e7:97:18:4f:8d:f1:58:84:96:bf:2e:ff:
d5:ca:6a:cd:77:db:46:4d:ac:07:a9:ae:06:76:72:
08:83:77:65:6b:a1:53:61:d9:ce:8c:89:c7:a4:df:
d8:8a:e9:cd:a3:a0:6a:62:51:19:97:2f:77:d4:fb:
04:ea:01:7b:74:17:6d:68:21:e0:9d:92:38:70:b4:
fd:2e:d5:a1:8a:10:36:49:03:ee:30:42:7d:66:21:
9a:4b:1e:d9:36:23:18:c5:88:4f:8d:56:6c:9b:2b:
39:11:eb:31:64:92:48:0a:15:91:60:a6:a1:5b:2d:
d8:47:8a:36:a5:ed:12:cb:34:16:79:09:95:1a:75:
ef:4a:19:01:03:b2:06:fc:c0:16:eb:c8:61:f6:77:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A9:F9:51:61:2F:30:B2:35:6C:8C:40:D4:14:44:C2:04:68:22:63
X509v3 Authority Key Identifier:
keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/ban5UWEvMLI1bIxA1BREwgRoImM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.126.96.0/19
IPv6:
2a09:f400::/29
Signature Algorithm: sha256WithRSAEncryption
0d:3c:e1:ed:b6:fb:ad:37:24:c6:ec:c3:72:d6:ab:64:e5:8f:
2d:70:dd:35:6d:d4:e2:1d:a8:6d:95:ef:9b:82:df:63:a8:a6:
b1:e7:ac:14:82:ea:c9:bf:ca:7d:9f:d0:0c:ce:d5:d7:3a:bb:
70:2f:48:70:4e:4c:3d:1e:e5:4e:b1:c6:24:31:88:f3:28:d9:
2f:10:e7:23:a2:92:4c:cc:12:15:23:6e:72:0b:e9:c2:05:08:
64:30:7d:ad:28:3c:5e:74:90:75:dd:fd:6e:4c:1e:4d:fd:5f:
bf:33:f9:a4:b4:6e:35:84:e2:fc:fe:fd:b1:4b:3b:43:a9:64:
85:8f:69:0d:4c:dc:04:37:b0:63:41:a0:38:46:b1:96:98:42:
88:70:a8:50:fd:ed:f9:e2:ee:d9:df:c3:b6:8a:f1:90:84:08:
22:14:07:dc:5d:bd:d4:30:74:aa:65:7b:9e:72:ec:b0:65:47:
c4:83:1e:e8:b3:88:51:39:3c:ea:f0:02:a7:b5:7f:ca:19:5f:
bc:c2:73:fa:5e:66:4b:7c:5a:9c:19:24:33:2b:da:51:23:56:
e1:df:4c:81:01:d1:f8:4f:21:60:f0:2c:cb:a2:09:01:ee:b3:
48:62:8e:7c:ff:88:12:cd:5e:10:0d:69:ac:bd:22:ea:f6:29:
4d:0d:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 14:29:25 2024 by rpki-client on console-fra.rpki-client.org