Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yT5KUOnZ3hGckMqK7vuejoFFro0.roa
File: yT5KUOnZ3hGckMqK7vuejoFFro0.roa (raw, json)
Hash identifier: H9apD7TQ1izT/Ki8jC315vuSCpz2UGAdPNX2tHi13vk=
Subject key identifier: C9:3E:4A:50:E9:D9:DE:11:9C:90:CA:8A:EE:FB:9E:8E:81:45:AE:8D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0188944A880193B4BC28828089D73F98105A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yT5KUOnZ3hGckMqK7vuejoFFro0.roa
Signing time: Wed 07 Jun 2023 05:18:12 +0000
ROA not before: Wed 07 Jun 2023 05:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57403
IP address blocks: 188.241.240.0/23 maxlen: 23
188.241.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 06:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:4a:88:01:93:b4:bc:28:82:80:89:d7:3f:98:10:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 7 05:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c93e4a50e9d9de119c90ca8aeefb9e8e8145ae8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:3c:2d:68:f9:1b:e2:c7:4a:ce:29:98:45:
5d:63:7f:d6:5d:65:42:83:75:cc:0a:01:e4:18:a6:
76:fc:3d:fc:d6:0d:a6:ab:de:04:66:d9:15:e3:27:
86:90:c4:68:0f:a5:fa:3b:df:94:0a:ca:df:a7:37:
39:d4:60:7a:b6:76:3d:21:04:56:f6:1b:25:11:ae:
c9:5c:94:eb:19:7b:9a:2c:96:35:38:b3:db:60:78:
b6:87:0c:59:8f:33:f6:5f:52:4a:e6:53:4c:8b:34:
5c:d2:c1:50:15:a2:be:69:ba:5a:9d:6d:2e:6a:ab:
e1:e8:fd:42:00:b7:95:34:41:4a:5c:72:fc:f5:40:
9b:e2:a4:c3:34:44:19:35:fe:3b:0a:0f:05:f0:22:
9e:80:33:6e:64:74:76:d1:6f:cc:0f:7f:c0:56:0b:
93:19:d9:8a:cf:c9:93:1d:ed:35:2d:65:97:00:9f:
86:25:9c:25:99:cf:86:74:8b:c6:f3:09:50:9e:06:
6d:49:d0:a1:40:de:7d:48:c4:83:af:fe:f5:42:de:
44:73:5f:14:af:65:3b:41:8a:03:08:46:21:a6:14:
af:e8:62:f0:1f:e5:3f:44:9c:46:bf:d7:79:58:a1:
83:d8:14:9b:1b:a3:da:12:b6:f5:5b:a2:5f:7b:9a:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:4A:50:E9:D9:DE:11:9C:90:CA:8A:EE:FB:9E:8E:81:45:AE:8D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yT5KUOnZ3hGckMqK7vuejoFFro0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.240.0/23
Signature Algorithm: sha256WithRSAEncryption
49:22:1a:ce:f3:66:06:b6:92:3e:fc:0a:17:89:1f:27:f8:ff:
ca:1e:75:1c:0a:62:be:a9:2e:d9:8f:c4:f3:f9:fa:36:6d:4e:
02:81:4a:22:70:1a:c6:b8:12:58:66:2d:62:47:3b:75:80:1e:
d8:5c:bd:5e:4e:71:96:31:ba:df:91:b2:4c:07:19:d8:92:7f:
aa:02:10:d7:2c:e4:76:12:77:43:e7:45:f2:fc:e3:eb:21:42:
fd:aa:12:bd:4e:02:20:55:a9:96:80:f5:d2:27:6f:f0:28:90:
aa:28:0f:cf:84:7d:dd:14:e1:f9:41:3d:2c:e5:26:8e:47:64:
61:03:27:a3:82:e1:67:81:27:c9:58:c0:bd:4e:f8:fd:a7:8e:
bd:25:db:c5:2c:1f:78:0d:cf:68:d8:95:6e:37:cf:ac:c8:09:
00:6b:09:d4:17:da:a0:46:cf:e7:5e:55:69:30:68:22:87:3b:
4f:05:df:ab:53:ac:08:b2:a3:0d:e0:af:26:9e:bc:a5:79:41:
a4:48:a6:57:96:ea:23:4a:43:31:b5:ea:38:c6:c5:e9:49:c0:
d4:ec:de:cc:e3:77:57:e9:a4:08:ed:08:60:5e:b1:df:92:91:
1a:7b:1d:8a:3a:8b:b0:79:85:f5:98:d2:b7:fd:8b:92:82:32:
58:5d:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org