Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/6LouMA2FdiEQtmhoENMWok3-lt8.roa
File: 6LouMA2FdiEQtmhoENMWok3-lt8.roa (raw, json)
Hash identifier: wLLXeKkmNaRMVXZZRS7P/LE8kYuJi85EWpjCskHO+4s=
Subject key identifier: E8:BA:2E:30:0D:85:76:21:10:B6:68:68:10:D3:16:A2:4D:FE:96:DF
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 018BD8066E6DABC8004E40363DB15960E9CD
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/6LouMA2FdiEQtmhoENMWok3-lt8.roa
Signing time: Thu 16 Nov 2023 12:06:22 +0000
ROA not before: Thu 16 Nov 2023 12:06:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202561
IP address blocks: 188.125.161.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 12:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:06:6e:6d:ab:c8:00:4e:40:36:3d:b1:59:60:e9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Nov 16 12:06:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8ba2e300d85762110b6686810d316a24dfe96df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:6b:7d:8d:20:38:ef:1a:e0:6a:76:b9:0d:
3e:1d:b0:ca:7c:b5:51:f9:9d:f8:ee:cc:54:d1:07:
21:c2:0b:d5:b1:ba:2b:4b:cd:17:2d:b6:8a:4e:10:
e0:ad:d1:30:fa:a3:22:31:d1:df:22:e3:43:5d:0c:
62:46:01:7f:96:a2:e8:b5:c4:46:d5:fd:38:51:bf:
5e:90:d1:88:15:de:a5:d7:95:e8:76:6f:b2:ee:63:
b2:dd:72:24:3b:ca:82:b7:8e:ec:ce:f8:df:89:9c:
b5:0c:cd:0a:39:25:52:5e:c9:b7:cd:a3:6e:56:1b:
71:b2:91:26:60:3f:a7:68:b3:43:f3:62:42:a2:a4:
1a:20:9d:96:8b:83:bf:38:51:8f:a4:70:ff:2d:31:
d5:4d:eb:8a:ab:d9:dd:1d:c6:47:ef:79:59:6e:df:
42:50:60:5a:60:72:67:fd:14:d6:24:c1:d8:b8:55:
40:a3:48:e4:2e:fb:9c:16:58:59:9b:47:e4:74:05:
2e:32:c4:b7:f4:6e:20:37:3e:d2:91:00:47:ba:96:
b5:42:de:e8:96:4e:e8:22:f4:13:e0:8d:1a:d3:92:
5d:e8:a3:04:b0:37:71:76:b2:ae:fc:8f:24:a1:3d:
93:b5:6d:3d:80:f4:db:d9:0b:e9:10:41:44:bc:09:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:2E:30:0D:85:76:21:10:B6:68:68:10:D3:16:A2:4D:FE:96:DF
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/6LouMA2FdiEQtmhoENMWok3-lt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.161.0/24
188.125.167.0/24
Signature Algorithm: sha256WithRSAEncryption
74:03:fb:82:fe:86:ce:7c:57:61:70:a8:72:36:29:c4:d5:20:
f4:3a:56:fd:f1:d9:8c:51:4b:8e:a4:2d:c7:cf:e7:6d:6d:42:
a3:81:66:6f:c6:e4:3f:bc:f5:d8:fe:ce:f4:9a:5e:8a:6d:99:
6c:43:55:d1:d1:ef:02:d8:c2:c7:d0:29:33:aa:c7:32:19:7b:
cd:f9:46:40:62:63:5c:82:6b:71:18:23:34:c4:92:18:0c:a9:
51:cb:97:fd:11:88:2b:29:d1:80:77:50:45:63:1a:29:9b:c1:
c1:fc:32:87:b6:9d:b5:8a:3d:3b:80:74:b0:7a:69:8c:6b:ae:
ae:a1:2c:51:7f:08:f4:15:0c:f0:e5:96:b7:fa:58:e3:9b:d8:
15:7b:4d:cb:9a:e0:8e:27:22:d4:13:62:ed:e0:0c:c2:66:ac:
77:ef:98:ed:ed:c8:26:41:88:08:36:e8:d0:7f:2a:6d:2d:65:
37:ad:ec:98:25:8e:7d:3d:77:99:47:a4:7a:d9:eb:4b:47:d5:
9f:82:76:ad:92:fb:02:d1:4a:8d:81:f3:b2:ff:88:fa:43:46:
de:5d:a9:07:d9:42:7e:c9:75:78:10:80:40:0d:db:91:bc:6d:
6a:54:5d:ac:a7:20:ac:cf:33:19:93:09:6c:26:bc:62:81:ac:
a6:d4:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org