Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Rf2OXlQA7zicBwk_Zp5wlu-z_4U.roa
File: Rf2OXlQA7zicBwk_Zp5wlu-z_4U.roa (raw, json)
Hash identifier: G+LyjxIFy8tzlzbfcE3KlakH5kHTaPnJcUjrJXu0eWA=
Subject key identifier: 45:FD:8E:5E:54:00:EF:38:9C:07:09:3F:66:9E:70:96:EF:B3:FF:85
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018C5B32D2494F4033CA5DAD5FA9E5773C80
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Rf2OXlQA7zicBwk_Zp5wlu-z_4U.roa
Signing time: Mon 11 Dec 2023 23:25:06 +0000
ROA not before: Mon 11 Dec 2023 23:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212193
IP address blocks: 188.132.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:32:d2:49:4f:40:33:ca:5d:ad:5f:a9:e5:77:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Dec 11 23:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45fd8e5e5400ef389c07093f669e7096efb3ff85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:3f:a3:5e:cd:4c:72:26:5b:6a:5a:4b:a9:
e8:0b:74:2f:7a:06:e9:78:50:8d:99:76:18:2a:bc:
54:97:4f:96:1b:ec:62:1c:56:28:9c:49:e0:c4:29:
d1:a7:6e:c0:08:31:b3:4b:25:a1:42:08:51:de:08:
0f:72:1b:e5:7e:40:2d:15:ba:4f:d4:15:ca:61:69:
92:d2:ef:22:8a:52:32:19:60:6b:b3:4f:62:ef:61:
45:0b:cf:ba:6f:9b:6d:4b:54:d4:75:bd:74:c5:0a:
46:47:19:a9:43:26:5d:98:77:a7:41:2f:29:09:df:
97:ad:2e:a3:e6:49:b5:5a:fd:7b:70:4b:76:4d:2b:
86:11:4c:83:54:38:47:e1:9c:7c:9d:c8:a1:df:68:
30:01:81:99:a3:e0:09:93:3f:c0:d2:84:3d:c4:83:
e5:e3:be:36:2c:a1:45:0f:46:8c:51:6f:7e:98:c8:
b7:e8:6a:e2:d3:46:81:2d:06:8d:9e:da:29:36:3e:
6d:0b:1b:94:a4:54:1e:dc:35:52:98:3a:52:c9:08:
86:9a:1b:cc:e5:0e:a5:8a:67:c2:9f:b9:8d:12:41:
f5:6a:04:ee:10:eb:b0:d4:51:09:11:1b:0f:e5:94:
20:e0:ab:36:e4:80:de:25:19:b2:ac:16:6f:bd:68:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:8E:5E:54:00:EF:38:9C:07:09:3F:66:9E:70:96:EF:B3:FF:85
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Rf2OXlQA7zicBwk_Zp5wlu-z_4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.214.0/24
Signature Algorithm: sha256WithRSAEncryption
65:30:94:c9:45:a2:c3:aa:ce:d7:bd:f9:dd:46:f5:f7:5e:fc:
a0:21:c9:64:c0:a0:f9:db:e0:f1:b5:64:40:ab:fe:51:62:ef:
35:0d:ea:16:0d:6a:06:e6:00:cc:94:bf:39:61:b7:7c:27:ac:
5c:fa:89:64:68:c5:42:fb:08:3c:39:9b:b1:56:c4:79:d8:3f:
3b:5e:98:67:5b:da:cf:2c:20:8e:3a:69:01:f1:16:58:8b:e1:
48:4f:e6:2a:ac:11:5e:da:80:e9:ba:aa:4f:cc:ad:11:5f:6e:
33:4d:9d:1c:bb:69:64:07:3d:8c:09:67:4c:cd:7f:f5:71:cc:
72:32:d6:73:fb:84:02:2a:2c:3a:50:67:82:33:55:75:12:6d:
73:1e:33:54:c7:23:86:0a:59:76:0c:63:12:74:99:58:c7:54:
20:1c:7a:ca:c2:a8:44:b7:5e:04:eb:73:93:82:db:2b:7f:23:
2d:25:42:93:d7:c4:cf:58:2c:51:d5:29:2b:a3:8b:93:3a:5e:
76:f5:6b:2c:1a:1f:69:91:91:7c:35:be:94:2b:e6:a9:9d:05:
a2:53:8b:3b:3f:ac:1b:7c:71:e7:9d:97:06:45:bf:f3:87:eb:
bb:35:8f:55:57:c4:04:22:d3:e3:8a:7d:af:bd:3d:ae:4b:86:
6a:ff:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 12:50:42 2023 by rpki-client on console-fra.rpki-client.org