Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/F9Nmm7w28jEizOyyai2xiuGEOqI.roa
File: F9Nmm7w28jEizOyyai2xiuGEOqI.roa (raw, json)
Hash identifier: +ZKyCq/kbJZoC5/pO0jwVh4Za4pMQcllxaFGZgbWCYQ=
Subject key identifier: 17:D3:66:9B:BC:36:F2:31:22:CC:EC:B2:6A:2D:B1:8A:E1:84:3A:A2
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018AFD7687007A66E45DD6CBCABFC48A69BA
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/F9Nmm7w28jEizOyyai2xiuGEOqI.roa
Signing time: Thu 05 Oct 2023 01:31:57 +0000
ROA not before: Thu 05 Oct 2023 01:31:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201707
IP address blocks: 188.132.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fd:76:87:00:7a:66:e4:5d:d6:cb:ca:bf:c4:8a:69:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Oct 5 01:31:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17d3669bbc36f23122ccecb26a2db18ae1843aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:f6:e0:49:0e:2a:65:b3:ca:a3:6e:06:04:
a1:e2:d5:70:27:d0:65:7a:ee:eb:c1:b4:92:3b:bf:
ab:97:46:a7:e5:48:57:dd:71:79:48:f0:cc:3e:70:
70:b0:b5:bf:d9:9f:57:12:01:43:a7:84:b2:41:76:
b0:8c:e1:43:6d:ab:bf:31:c4:4a:26:bf:0a:d4:cd:
b5:81:2a:02:0c:30:5b:6a:dc:bc:4f:52:f9:32:5d:
86:99:95:bd:a8:48:1f:59:f9:23:41:9c:97:5d:70:
67:17:e1:10:44:8f:c7:44:66:6d:96:c5:61:9c:b0:
3a:73:9c:b2:15:a2:8a:0f:f1:8a:e0:01:5a:60:72:
18:c4:74:69:5b:6d:bf:5c:69:cd:14:69:99:06:a4:
d8:28:2b:c5:80:1e:1f:a0:c5:b5:84:ae:67:fe:26:
26:a5:6d:0b:6d:75:b8:3c:be:7d:75:12:51:68:03:
a3:2f:a0:21:87:27:10:bb:77:87:b8:35:60:c0:9e:
61:48:c7:81:c5:1c:a9:19:74:0f:5e:82:e2:6a:6a:
1e:3f:7d:40:bb:f1:28:47:19:fa:0c:a5:b0:6b:4c:
83:1e:71:12:8b:39:c3:80:fb:3b:82:c6:0d:93:94:
7b:3f:67:cb:c8:89:fc:72:1f:48:44:a4:0e:b3:7b:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:66:9B:BC:36:F2:31:22:CC:EC:B2:6A:2D:B1:8A:E1:84:3A:A2
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/F9Nmm7w28jEizOyyai2xiuGEOqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:28:4e:bc:96:42:83:39:51:40:92:09:1f:ae:4f:7e:67:b0:
c3:5e:03:5b:da:11:0f:69:4b:4c:ea:75:19:44:5e:af:44:db:
e5:c7:7f:5e:4c:2d:90:af:c8:a8:af:82:1f:d0:6a:83:19:41:
b3:77:19:1d:01:ca:e6:e7:e5:44:a1:22:a1:56:0e:97:45:f6:
d5:d8:10:44:60:03:1b:e8:7c:50:22:82:15:d6:c2:3c:3d:e5:
bb:ec:8f:cc:7c:47:b0:72:23:9d:f0:95:a0:27:94:6a:ce:36:
b2:4c:47:a7:05:d9:a9:4f:27:6e:94:4f:7b:c5:9a:63:c2:8e:
68:19:5d:23:f7:3a:8b:34:3b:e5:68:56:d6:68:e7:ec:03:96:
3d:4c:0d:95:57:3f:b8:36:c8:ab:ab:3d:ed:7f:02:6a:6d:eb:
94:cf:0c:00:b6:dc:90:c0:d8:9a:b8:b6:60:fe:1e:42:d6:00:
1b:36:19:31:13:c0:36:45:96:6c:ab:56:86:1b:aa:2f:61:b7:
66:6b:0d:d8:4d:ce:bb:0c:b2:06:0d:d1:5d:f4:84:fa:e4:0b:
ee:01:1f:40:81:84:06:4e:dd:c9:a0:56:6d:e9:bd:d9:13:b4:
19:16:6f:d8:1c:19:cc:87:75:fc:f0:3d:9b:36:d0:f5:14:0d:
fc:12:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 20:44:50 2023 by rpki-client on console-fra.rpki-client.org