Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/rGPXJ8FPFCNoJ08AMddp__h7Kz8.roa
File: rGPXJ8FPFCNoJ08AMddp__h7Kz8.roa (raw, json)
Hash identifier: 3QbPN9KOHmAY5SseMFLouEqwZclV+Ra9M42IHYeV/qs=
Subject key identifier: AC:63:D7:27:C1:4F:14:23:68:27:4F:00:31:D7:69:FF:F8:7B:2B:3F
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 018CC649E9835136816B0F91DA7965AACD2C
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/rGPXJ8FPFCNoJ08AMddp__h7Kz8.roa
Signing time: Mon 01 Jan 2024 18:29:41 +0000
ROA not before: Mon 01 Jan 2024 18:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206238
IP address blocks: 188.213.88.0/21 maxlen: 24
91.132.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 08 Feb 2024 13:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e9:83:51:36:81:6b:0f:91:da:79:65:aa:cd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Jan 1 18:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac63d727c14f142368274f0031d769fff87b2b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:7c:dc:3d:50:54:24:cc:d0:84:b2:93:62:
dc:a0:76:96:0d:29:e6:23:80:d5:6b:bc:df:8d:f8:
e7:f7:bc:7e:f3:80:56:83:62:26:62:74:32:8a:f1:
a3:83:ff:bf:e2:0a:95:2d:3d:f8:2c:b4:aa:4c:aa:
c8:92:55:c1:e0:58:a2:43:7e:00:fb:88:94:fa:8e:
12:b4:fc:86:32:af:be:f5:42:9b:da:8d:52:fe:5d:
ca:ec:8d:95:7b:f1:9f:71:23:18:da:45:65:9f:ce:
39:eb:f3:61:ed:3b:9c:2e:26:6d:8b:55:ca:db:4b:
50:18:f5:f0:f5:9f:ca:38:4c:96:7c:68:14:88:e1:
6f:c3:fe:06:04:81:3f:14:25:86:ee:cd:84:c0:87:
9f:b1:db:92:e2:31:46:e8:84:5e:2e:08:72:6d:93:
86:2e:a8:b0:ac:bd:27:d1:23:0b:64:1c:0d:9f:b2:
99:f4:a5:ab:61:e1:82:97:1f:53:50:29:dd:87:dc:
4a:1b:65:eb:79:f0:db:ec:ad:9e:3f:f6:7d:d7:e5:
a7:a6:ab:6f:ad:15:73:74:eb:ea:af:d1:64:0b:1b:
cc:03:79:f2:4a:c2:21:c0:2c:4b:55:81:a9:73:94:
04:06:f8:94:9a:59:31:99:04:39:c2:49:c4:2e:52:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:63:D7:27:C1:4F:14:23:68:27:4F:00:31:D7:69:FF:F8:7B:2B:3F
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/rGPXJ8FPFCNoJ08AMddp__h7Kz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.40.0/22
188.213.88.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:81:95:47:59:d7:67:62:74:0a:3d:0e:bf:f3:01:fc:8e:4d:
28:23:0b:54:c2:e2:b5:e5:78:16:ef:3f:d4:c1:f9:48:71:ca:
63:c8:d4:dd:14:9c:eb:b5:b3:d9:8c:0a:b0:c8:bc:58:2f:b6:
ea:92:74:2d:4a:52:17:0f:e8:c4:61:fb:43:e0:4d:6c:64:c4:
7e:63:0a:15:c5:19:54:da:be:35:24:19:ad:5f:12:9c:7c:56:
d8:97:1b:32:29:fb:24:e3:dc:50:02:e5:5b:98:8b:c6:d6:d7:
d0:ee:42:50:26:91:2e:d8:0b:54:f0:84:f9:82:b4:19:d8:db:
a2:22:4e:98:a0:55:4c:79:33:59:c1:ee:c1:62:04:11:88:07:
3b:1f:66:0b:48:10:a5:8e:d4:da:19:68:6d:c8:ed:7e:0e:c2:
34:b4:f3:c9:0a:3e:ec:af:d0:6e:f0:9e:07:0f:99:b9:6c:b2:
a6:84:a9:97:93:a5:66:28:91:cb:56:31:df:17:6d:fd:dc:af:
48:f4:b3:47:d7:2b:5a:bf:d9:a9:10:1c:cb:d7:e2:b1:07:d7:
c5:62:49:0d:0e:e0:e4:97:db:23:79:51:ed:bc:34:22:50:0d:
ab:c3:5b:3f:95:65:c4:0b:9a:48:92:4d:b2:d3:bc:66:7f:c2:
50:bb:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-fra.rpki-client.org