Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7CEDPdHZltwqmDTps-oJGl_ADso.roa
File: 7CEDPdHZltwqmDTps-oJGl_ADso.roa (raw, json)
Hash identifier: cp9jojFUQ/jmGtc0O0ynoENkwO3S4KV2haiW7MXagIs=
Subject key identifier: EC:21:03:3D:D1:D9:96:DC:2A:98:34:E9:B3:EA:09:1A:5F:C0:0E:CA
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018B380EA7F7EBD13EEF7BB3184E5DE7EAAE
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7CEDPdHZltwqmDTps-oJGl_ADso.roa
Signing time: Mon 16 Oct 2023 10:36:06 +0000
ROA not before: Mon 16 Oct 2023 10:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57011
IP address blocks: 188.93.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:0e:a7:f7:eb:d1:3e:ef:7b:b3:18:4e:5d:e7:ea:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Oct 16 10:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec21033dd1d996dc2a9834e9b3ea091a5fc00eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:e2:a8:88:03:00:b9:64:9e:f5:9e:9f:95:
5b:e0:1c:cf:28:ed:be:88:d4:34:23:f8:2d:f4:99:
82:24:ce:50:90:27:5a:08:6f:73:1c:14:82:79:71:
c8:57:66:a6:c7:d0:7c:3d:1a:fa:80:e3:5e:3c:2d:
e8:02:81:2f:c0:ee:d7:e6:41:58:00:92:6e:f6:38:
9c:0f:f2:5e:a0:e4:7c:72:5a:58:6a:77:e7:3f:14:
74:ac:45:7c:7a:b8:17:15:27:81:3a:87:2a:c4:13:
c0:02:44:fe:df:d0:3a:7d:1e:41:18:88:e3:0d:f3:
c2:62:ba:cd:9b:fe:b4:48:77:97:41:99:24:f2:4d:
14:10:26:18:cc:65:b2:79:eb:12:11:a6:73:53:ed:
e8:f7:ee:3c:89:9c:26:fc:93:1a:23:af:c1:d5:c5:
f7:fa:63:7c:4b:1f:8b:27:2a:96:53:2b:81:4e:3f:
4a:c6:01:a3:79:31:ec:b9:5e:80:47:77:d0:01:06:
ac:38:a0:5c:4c:cc:5a:ad:19:62:75:ae:f0:d4:ce:
f0:b4:18:89:e6:45:87:ef:71:44:e3:7c:e9:cf:09:
88:f2:02:b6:d6:42:c8:d3:78:d7:6b:cf:5a:1a:29:
cb:9e:4f:e9:b1:1c:62:80:a2:21:c5:9c:da:0a:79:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:03:3D:D1:D9:96:DC:2A:98:34:E9:B3:EA:09:1A:5F:C0:0E:CA
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7CEDPdHZltwqmDTps-oJGl_ADso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.108.0/22
Signature Algorithm: sha256WithRSAEncryption
16:30:d8:05:6f:ef:ed:f8:32:4e:bc:23:90:7a:85:bb:c8:f1:
d9:41:3f:cc:90:02:50:70:b3:56:df:b5:2c:3b:db:71:55:db:
41:80:6a:9a:7e:90:6c:2d:22:e3:f4:33:2d:72:6a:47:39:33:
2d:09:95:69:c4:d7:d2:87:36:96:69:67:71:43:22:a1:dc:48:
f3:0f:ac:9a:4b:9b:27:01:4c:a1:40:84:ce:26:d6:3e:8b:b8:
cb:34:0a:4b:84:d4:80:56:d6:08:b6:d8:d2:93:1c:99:30:23:
ee:34:1e:22:b6:ab:6c:ec:b3:87:c5:0f:86:fb:9a:30:96:7b:
4b:bf:93:88:e2:ae:2b:8b:f9:a5:af:11:7e:3d:e4:9a:20:5c:
3b:c5:af:38:e6:5b:3a:dc:86:b4:2b:fb:e9:10:e8:44:d5:10:
73:bd:54:6c:a5:05:d3:fa:15:4f:9c:53:be:f7:1e:ca:56:07:
b5:7e:c3:6b:0d:83:c9:18:aa:21:81:07:22:85:5d:1a:ac:14:
f0:1a:fc:1b:2d:70:3d:7b:61:18:63:a6:3e:a1:b7:d1:db:b7:
34:26:16:11:f4:26:54:26:a5:bc:6f:78:ff:42:cb:7a:3e:0f:
aa:aa:3b:42:25:fe:fa:de:d8:26:83:56:07:ee:26:c9:e6:b5:
ba:e5:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org