Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RJRwc7l2eVqTFXAYUd0b2VouxQE.roa
File: RJRwc7l2eVqTFXAYUd0b2VouxQE.roa (raw, json)
Hash identifier: e5vOlOq2i9ZrV26h+atpbMtnA15sMVc3n2pWWNHGWz8=
Subject key identifier: 44:94:70:73:B9:76:79:5A:93:15:70:18:51:DD:1B:D9:5A:2E:C5:01
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0188947FA0084E8FEC28A39488CDAA9E84F6
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RJRwc7l2eVqTFXAYUd0b2VouxQE.roa
Signing time: Wed 07 Jun 2023 06:16:12 +0000
ROA not before: Wed 07 Jun 2023 06:16:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57403
IP address blocks: 188.241.240.0/24 maxlen: 24
188.241.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:7f:a0:08:4e:8f:ec:28:a3:94:88:cd:aa:9e:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 7 06:16:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44947073b976795a9315701851dd1bd95a2ec501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:6e:20:a7:9e:03:f0:b4:29:f1:d3:6c:dd:
a8:2f:be:5e:3e:34:c6:66:9c:8f:1c:e9:bf:5f:08:
be:50:69:b0:df:be:2c:00:2e:4b:44:9e:8c:3e:ca:
4f:b6:df:32:a2:49:ac:07:70:f4:5f:ae:2f:23:5c:
92:d0:49:53:f5:d1:aa:fa:58:29:04:a9:f4:9a:31:
4b:61:bb:b2:60:64:07:4a:77:99:5e:0d:52:fe:01:
a8:a7:a5:c4:40:9b:0b:b2:44:46:7c:6b:3d:52:9c:
73:30:19:cc:14:c1:1e:a1:de:fe:4d:b8:34:76:19:
8b:d8:53:46:18:6b:80:5d:ce:eb:55:e5:c3:91:4e:
6f:52:10:c4:25:35:9c:47:86:35:f5:51:91:17:15:
de:b3:8b:ae:9f:70:a5:29:84:18:fc:93:21:da:4a:
57:04:f2:8f:f8:4e:1a:ab:08:e3:2c:a3:f0:48:5b:
cb:c4:c6:7f:63:a0:b3:65:73:00:52:02:df:5f:d8:
3c:2e:7f:0b:36:50:c7:29:b5:59:8c:f1:36:06:9f:
7d:b1:70:1b:36:cf:dd:b1:06:e4:d0:f6:c6:2b:ce:
c8:65:31:7e:b9:dc:e4:8e:45:87:d1:f6:9c:ee:18:
26:e0:24:30:9a:41:ee:8a:7c:ec:c4:d1:19:cf:47:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:94:70:73:B9:76:79:5A:93:15:70:18:51:DD:1B:D9:5A:2E:C5:01
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RJRwc7l2eVqTFXAYUd0b2VouxQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.240.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:d5:94:60:a7:68:5d:64:b3:aa:90:aa:86:44:8c:8d:09:16:
7d:1a:79:32:33:da:33:12:a7:5c:6f:0b:9d:ac:64:ab:b1:85:
dd:c3:1d:21:d9:72:ac:19:60:c3:e3:b2:3e:74:10:71:1c:13:
5c:56:27:2a:77:8a:c4:bd:3f:41:9b:51:86:02:fe:26:ec:a9:
07:f4:e1:b8:9d:6f:2f:7c:81:88:84:d7:43:8c:c2:0c:9b:dc:
b4:88:c6:6c:91:1e:55:27:f4:8e:ac:89:42:10:f5:c1:82:29:
cd:90:e9:3d:36:e0:be:1f:f4:71:fa:b9:fe:57:b8:5d:7c:f0:
d7:c1:09:eb:5f:84:fe:2d:f4:11:72:eb:bd:37:e1:e1:36:3e:
2d:68:ae:a7:79:b5:65:ea:ef:9f:a9:6f:8c:22:ee:0f:d5:9d:
36:11:6b:0c:0e:52:78:57:eb:3d:cd:0d:64:b7:f7:51:8e:db:
4a:37:fa:ab:35:ed:a7:9b:d9:53:30:1b:1b:e2:ee:4d:15:bf:
b6:e9:b6:59:5b:2b:e0:00:5e:19:0d:26:60:0b:88:10:35:36:
c6:dd:dc:2d:9e:3b:bf:f8:b5:db:2a:b9:40:29:16:57:85:ad:
c0:cf:27:1f:c6:19:1d:f5:59:65:a0:ef:32:f7:17:f9:81:51:
88:4f:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org