Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/howM0_w8gVMTkNJ7cGLwuV0er5I.roa
File: howM0_w8gVMTkNJ7cGLwuV0er5I.roa (raw, json)
Hash identifier: FzeI70Ic6wTr1EsMtWewfR4sD4m2pqZodCxA6dPPR2U=
Subject key identifier: 86:8C:0C:D3:FC:3C:81:53:13:90:D2:7B:70:62:F0:B9:5D:1E:AF:92
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018B017C484FE3F35D8534B12D136199AC97
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/howM0_w8gVMTkNJ7cGLwuV0er5I.roa
Signing time: Thu 05 Oct 2023 20:16:43 +0000
ROA not before: Thu 05 Oct 2023 20:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201707
IP address blocks: 188.132.153.0/24 maxlen: 24
188.132.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:7c:48:4f:e3:f3:5d:85:34:b1:2d:13:61:99:ac:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Oct 5 20:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=868c0cd3fc3c81531390d27b7062f0b95d1eaf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:02:40:3d:6d:fc:60:f7:23:76:bc:60:f0:2e:
65:d4:b9:52:69:b7:c2:ab:64:b2:50:9b:7f:46:2f:
ea:f2:ca:d7:64:a5:97:fa:ed:39:00:bc:11:34:15:
5b:8a:c9:28:88:03:65:ad:b5:63:ad:ad:09:d1:47:
d3:61:71:ba:45:90:01:e3:12:81:e0:0a:52:76:78:
a9:3f:47:a1:56:4f:6b:b3:49:af:fb:72:e7:03:3f:
9b:5f:94:c0:91:03:84:b7:99:97:4c:48:80:fa:a8:
bb:51:de:3f:6c:ef:38:d4:47:77:93:62:df:05:cc:
31:89:04:b8:5e:1d:bc:5a:4a:bd:ed:98:74:5f:a1:
9e:cc:3c:11:a7:49:07:9f:64:9c:78:c0:8a:d5:b0:
3c:16:f5:99:5a:0f:a8:ef:32:46:22:33:1f:a0:7d:
5b:13:6e:b4:0d:84:56:8b:58:6a:95:5b:14:9a:4d:
4d:74:e8:24:24:0b:22:02:8d:ae:bf:c3:f8:2d:f5:
fa:d0:1e:e5:55:c4:35:fe:09:f7:a8:7c:2c:f0:06:
2c:93:a9:55:06:bd:d8:16:d1:6f:08:a9:43:d4:3f:
62:26:5d:2b:d4:c1:fb:12:3d:02:25:f3:7b:c5:c5:
e6:b7:20:40:2c:4f:63:67:d6:f5:a7:15:33:38:e5:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8C:0C:D3:FC:3C:81:53:13:90:D2:7B:70:62:F0:B9:5D:1E:AF:92
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/howM0_w8gVMTkNJ7cGLwuV0er5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.153.0/24
188.132.210.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:42:ad:1d:05:9c:42:c1:86:a9:4c:8e:9d:5f:52:db:ac:85:
92:5e:2d:8d:95:ff:5b:d1:b9:1c:71:57:4b:64:d2:87:f1:21:
d5:65:88:1c:a4:82:59:34:ae:08:d0:75:fa:69:e9:aa:2b:fe:
eb:04:3d:fd:dc:24:72:cf:9a:55:bc:a9:24:f7:81:ac:45:78:
fe:7d:88:89:73:c3:dc:61:2c:27:17:d6:f7:21:f6:80:61:79:
4c:d6:45:10:c5:9b:62:00:f1:54:16:ca:92:39:39:62:72:3a:
e8:74:c0:02:6c:9c:13:96:ee:f4:22:0d:19:26:e4:6e:1e:40:
ad:62:a6:68:5e:e6:63:6a:f6:d1:13:a6:25:45:6e:f9:36:7a:
fc:c7:ca:ce:c6:80:24:72:6b:76:f8:0e:b8:f4:80:07:da:0d:
69:63:4a:d0:3b:96:bc:f9:db:ea:0b:b6:13:7d:53:92:db:f6:
8a:29:64:4c:63:9e:af:e0:18:3c:bc:21:25:8c:76:31:2e:cd:
81:43:22:a6:53:dd:18:19:be:63:4c:e1:50:50:ad:09:e4:99:
4d:cb:28:93:34:68:9d:30:33:1f:7d:fb:11:ac:f7:37:32:5a:
a2:17:5d:1f:de:3d:68:67:0e:fc:02:a5:63:0a:bc:4d:37:5e:
14:b3:fb:a0
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 18 10:20:52 2023 by rpki-client on console-fra.rpki-client.org