Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/8JIbWd7zNL1pJ1Gbfz4y_OC_Srw.roa
File: 8JIbWd7zNL1pJ1Gbfz4y_OC_Srw.roa (raw, json)
Hash identifier: kPKNDBGS2t8MVQB+bODcfrtXMrHGUS/6mbciXU2nz5U=
Subject key identifier: F0:92:1B:59:DE:F3:34:BD:69:27:51:9B:7F:3E:32:FC:E0:BF:4A:BC
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 01872335BA1304CE641C1EF7ACD22DB9E625
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/8JIbWd7zNL1pJ1Gbfz4y_OC_Srw.roa
Signing time: Mon 27 Mar 2023 13:15:36 +0000
ROA not before: Mon 27 Mar 2023 13:15:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199444
IP address blocks: 188.213.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:35:ba:13:04:ce:64:1c:1e:f7:ac:d2:2d:b9:e6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Mar 27 13:15:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0921b59def334bd6927519b7f3e32fce0bf4abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:f9:1d:fb:9d:7c:4c:e1:5f:29:14:75:bc:
d7:d9:60:dd:1a:e3:db:4a:c1:a7:b3:d5:34:3a:50:
38:3f:cb:8a:49:5e:b5:13:ba:72:5d:e9:44:5a:ae:
23:a0:67:bc:f0:38:a4:55:df:f5:a0:51:f6:fd:1e:
98:18:63:04:71:15:00:d9:d7:26:2a:8c:b6:e0:2c:
36:c2:93:a1:8b:b9:80:f8:5f:22:ef:60:14:8c:db:
f2:76:d7:04:85:bd:d6:ec:db:5c:90:0c:1a:01:ec:
06:92:05:71:00:f6:5b:3f:92:76:45:2b:42:fa:10:
cd:72:05:f1:2e:c6:31:dc:db:f8:59:ff:c6:53:9b:
c7:2a:26:f9:9e:b2:92:f5:78:ac:25:a1:a8:85:54:
8e:da:69:20:0e:e3:93:38:98:19:8c:23:59:b8:fa:
ac:fd:f7:ec:82:7b:2f:16:9c:a7:55:5e:26:6c:4a:
d2:1d:61:a6:37:80:69:b0:2e:30:42:75:c8:8b:0b:
99:e9:42:f3:15:6d:6e:20:b6:db:94:b1:c1:8c:88:
50:33:20:ab:01:a9:12:30:73:d1:1f:d0:4d:16:40:
fe:ee:c9:2d:1f:dd:a3:56:cb:db:4c:89:f0:b5:ce:
77:dd:45:10:5f:5c:9e:e8:a6:2e:0a:79:b8:d7:d2:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:92:1B:59:DE:F3:34:BD:69:27:51:9B:7F:3E:32:FC:E0:BF:4A:BC
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/8JIbWd7zNL1pJ1Gbfz4y_OC_Srw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.212.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a9:78:87:ee:8d:c8:c9:f1:03:1d:9e:26:0a:5a:2d:12:c9:
9c:49:77:df:3b:50:7b:18:4e:0c:6c:53:69:0d:1e:fa:15:47:
93:75:16:7f:71:d5:43:c0:fe:9f:57:34:ca:b8:59:6d:e6:a3:
18:24:3d:13:0a:ed:1a:4b:7d:c3:e5:af:cc:74:67:65:37:ff:
f0:f3:ae:df:21:23:1f:4f:82:ac:85:7c:b1:5b:ea:32:8a:26:
9f:f8:bd:02:a7:d5:93:99:b9:b2:6a:68:69:e1:5a:af:aa:aa:
b1:1b:de:5d:ff:91:cb:93:b8:82:3a:d1:b4:c5:30:ca:1e:1a:
84:ed:40:ce:0b:0e:23:f3:f9:bf:a8:ab:7b:14:3d:b2:c3:97:
76:da:9e:3e:92:90:ea:24:75:af:a9:75:12:5b:35:4d:11:3a:
d5:8d:b4:9f:17:2e:74:2a:87:9b:e5:22:f1:c1:58:40:71:8a:
f9:43:ea:94:c3:b9:a1:dd:91:ef:03:b9:4c:91:e7:d1:60:55:
11:f8:9f:78:16:ad:f3:18:67:fe:9f:ce:6b:7d:0f:b8:7b:44:
b5:49:3d:0c:dc:21:c4:1d:a4:5a:f6:72:16:b8:88:19:5e:d2:
69:db:7c:f3:d1:43:0b:0e:0f:f2:f4:ea:68:87:52:db:f7:24:
ee:21:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:18 2024 by rpki-client on console-ams.rpki-client.org