Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/1HcY8IkjsXygWl4q4qLGUH5bIOU.roa
File: 1HcY8IkjsXygWl4q4qLGUH5bIOU.roa (raw, json)
Hash identifier: 8vOBXi36YGAh8mayBnnAYTfJsFIkpl0e20OyanDixDQ=
Subject key identifier: D4:77:18:F0:89:23:B1:7C:A0:5A:5E:2A:E2:A2:C6:50:7E:5B:20:E5
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 018D126A9FE5C1C11D05ACF5C5F97A894E3F
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/1HcY8IkjsXygWl4q4qLGUH5bIOU.roa
Signing time: Tue 16 Jan 2024 13:16:34 +0000
ROA not before: Tue 16 Jan 2024 13:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.160.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 13:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:6a:9f:e5:c1:c1:1d:05:ac:f5:c5:f9:7a:89:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 16 13:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d47718f08923b17ca05a5e2ae2a2c6507e5b20e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:70:a0:0a:2f:cf:42:4f:b1:f4:f9:69:a5:
3d:e9:10:ae:99:99:44:3f:6d:1d:c9:71:df:87:76:
b3:20:29:d0:2d:1f:0b:8c:33:a1:da:6c:9a:a2:98:
07:c0:a4:a8:6c:ab:03:d2:3f:5c:77:45:f7:9a:07:
2d:f4:3c:fc:2c:fd:02:ae:9d:fe:93:00:7a:d2:a1:
2b:54:25:9a:d8:14:f6:3f:ab:92:0e:d6:9b:29:f2:
54:09:a0:a6:c5:c1:d0:cb:a3:2e:52:92:49:94:2f:
e9:74:6c:df:a0:00:cd:86:0d:4a:08:0e:de:47:2c:
36:bc:e3:5d:62:ab:2a:95:87:be:d5:9e:39:ea:74:
57:25:9f:8a:9e:49:82:28:98:91:c9:ee:ba:2d:8c:
5f:82:41:36:3f:d2:65:7f:52:26:bc:d5:00:93:7e:
10:af:8e:b6:96:b6:ce:52:86:2a:8c:5c:f4:6f:cb:
21:ec:86:b4:be:84:ad:17:ac:6d:06:6d:de:1e:03:
3a:da:53:ff:88:be:27:17:32:d4:b8:0a:9a:bd:24:
94:5e:a3:dd:e6:01:66:1c:8e:ad:c1:ea:17:5c:fd:
1a:f5:f3:c3:8e:a9:64:bc:17:2b:34:4e:e0:1e:9c:
31:1a:6a:c5:10:5d:1a:1b:01:9e:8c:03:ed:90:9a:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:77:18:F0:89:23:B1:7C:A0:5A:5E:2A:E2:A2:C6:50:7E:5B:20:E5
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/1HcY8IkjsXygWl4q4qLGUH5bIOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/24
188.125.163.0-188.125.166.255
188.125.168.0/24
188.125.170.0/24
188.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:53:54:28:79:7b:84:75:02:89:bf:9e:d0:45:a3:8a:ed:b2:
8f:6c:56:94:b5:3e:bc:f6:24:fa:f1:8d:bd:9c:0e:41:43:10:
33:c7:7d:73:1a:f1:ff:1c:98:cc:a6:0b:44:5a:17:46:97:52:
91:25:4d:22:f5:b6:3b:4d:ec:b4:16:9e:06:6f:51:b2:01:46:
1f:77:8f:24:27:4a:f5:04:79:3b:78:c4:45:df:b6:c0:80:d9:
7e:59:94:a9:a7:53:68:31:90:48:d9:fa:83:c8:8e:0e:61:05:
d8:10:d9:d0:09:ed:56:f9:e1:29:69:b8:85:07:94:69:ee:5c:
71:20:7b:bf:37:72:dc:9d:3b:21:70:a3:5f:9b:52:d0:70:63:
11:d1:68:97:69:c7:2b:c1:53:df:0f:73:5a:04:d2:71:58:61:
4b:f0:0c:0b:61:27:2e:ad:88:64:94:e1:13:c6:7c:bb:91:c6:
18:e1:53:59:0e:e7:9a:36:f1:fc:b8:a8:54:40:19:35:34:57:
c4:11:f1:84:3c:2e:28:aa:6f:89:ec:d8:5a:83:e0:e0:50:47:
5b:a2:af:1e:64:57:ee:d7:17:9b:34:5e:45:80:fa:b1:2c:3c:
05:67:b0:9a:5b:01:c7:68:b8:4e:91:dc:cc:5a:e3:84:1a:44:
1f:84:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org