Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/P31cKkE9aIpZy0AmH6U4TEn5Fdo.roa
File: P31cKkE9aIpZy0AmH6U4TEn5Fdo.roa (raw, json)
Hash identifier: caIhjI5qNO1XeJ6orHTFy9A056OfZrh5tPzoFQZeMQA=
Subject key identifier: 3F:7D:5C:2A:41:3D:68:8A:59:CB:40:26:1F:A5:38:4C:49:F9:15:DA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01881E3DD8A85313EDCA3B5EB5D02C0A18A1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/P31cKkE9aIpZy0AmH6U4TEn5Fdo.roa
Signing time: Mon 15 May 2023 07:09:09 +0000
ROA not before: Mon 15 May 2023 07:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57403
IP address blocks: 188.241.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 07 Jun 2023 05:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:3d:d8:a8:53:13:ed:ca:3b:5e:b5:d0:2c:0a:18:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 15 07:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f7d5c2a413d688a59cb40261fa5384c49f915da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:b6:55:bc:20:27:98:c5:d5:77:49:f2:0e:
f4:72:28:6c:1c:92:80:cf:89:60:99:b9:83:1d:5f:
5d:c6:36:35:cb:03:56:7d:59:16:36:5e:35:34:4b:
11:3d:58:4c:13:f6:6e:73:e9:1e:f2:4e:e0:a2:73:
8b:38:11:12:19:91:dc:f6:66:b4:a9:af:15:3e:86:
36:26:ef:16:88:c7:34:cb:75:ba:8b:29:cb:8e:14:
f5:68:62:c0:b6:7b:4b:4a:ac:2a:b9:81:be:ab:81:
e6:fc:a1:e2:c2:99:2f:32:ea:83:50:61:d7:3d:9b:
e2:d9:f9:d7:f2:0a:41:55:48:bf:a2:17:24:de:52:
30:5f:74:8e:46:63:af:25:e7:8c:a6:b4:f0:5a:73:
1d:db:b3:22:ff:ac:fe:36:ce:a0:4b:63:3c:ef:18:
59:f6:78:5b:8b:e4:c8:c0:36:5c:bc:65:54:f7:65:
7c:58:d7:1b:a5:4a:7c:84:ce:21:11:cb:2b:78:55:
7e:4f:b8:27:a9:61:14:cf:0a:d8:0e:c1:30:a6:70:
fd:36:aa:74:bc:ec:7e:b7:21:8a:7b:e1:c0:b3:61:
12:11:73:df:0e:66:34:51:b3:a4:e6:99:98:2c:00:
68:dd:25:8e:4e:7d:83:96:00:3d:c7:dd:2c:d0:c6:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7D:5C:2A:41:3D:68:8A:59:CB:40:26:1F:A5:38:4C:49:F9:15:DA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/P31cKkE9aIpZy0AmH6U4TEn5Fdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.240.0/23
Signature Algorithm: sha256WithRSAEncryption
33:aa:ff:25:ff:2b:d1:69:1c:14:05:4c:65:5b:7d:57:91:1e:
98:d9:92:23:fa:91:e0:ce:6a:20:44:93:2b:b4:70:86:3c:7a:
c0:60:5e:e2:f6:0d:c8:f6:26:1b:1f:cc:b4:b8:20:91:15:9c:
a0:9f:b2:b9:7c:1f:99:ba:e1:37:7e:e9:6d:31:96:04:a9:88:
84:f5:79:62:19:28:08:7e:07:42:a9:7a:94:5a:a1:cf:74:b9:
8d:f7:46:24:84:4d:b1:b7:ed:43:49:d9:93:8e:6f:f6:54:8a:
0e:d2:80:ce:b7:a8:46:63:d8:77:62:e7:7e:3c:c5:4c:de:51:
d0:51:c8:d1:14:13:fb:f6:47:b8:b8:13:65:68:2f:e3:c9:e9:
01:1e:a8:22:d7:c4:cd:f1:4f:6a:55:0b:83:ec:17:f7:60:71:
ef:44:db:cb:60:f0:d7:51:81:a5:4b:54:98:8b:a5:1f:d5:c2:
8b:53:8c:38:1a:e8:8c:a0:2d:4e:ef:5c:1f:9f:66:29:b2:2c:
33:d2:e2:d8:79:2e:13:3e:07:ea:1b:c0:f8:72:a4:e3:21:85:
f0:41:55:fb:16:e6:8b:7b:9e:64:bf:24:9a:a9:14:b0:7e:9e:
03:d3:e5:ab:bd:71:82:a5:55:41:06:e7:22:64:f0:3e:21:90:
aa:48:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org