Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/FtmGbk_LLYebqT9KHl95qv4Su-Y.roa
File: FtmGbk_LLYebqT9KHl95qv4Su-Y.roa (raw, json)
Hash identifier: PeNbZhdqzTyH6XeDCHrFpI5U9vLCqkYOpnxEaJxTSps=
Subject key identifier: 16:D9:86:6E:4F:CB:2D:87:9B:A9:3F:4A:1E:5F:79:AA:FE:12:BB:E6
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 018CC8DF0361DC763B60073DA74BC7A88466
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/FtmGbk_LLYebqT9KHl95qv4Su-Y.roa
Signing time: Tue 02 Jan 2024 06:31:47 +0000
ROA not before: Tue 02 Jan 2024 06:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204457
IP address blocks: 188.125.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 13:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:03:61:dc:76:3b:60:07:3d:a7:4b:c7:a8:84:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 2 06:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16d9866e4fcb2d879ba93f4a1e5f79aafe12bbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:4c:63:1c:ca:b8:6b:d2:3f:52:14:b5:17:
48:eb:11:ab:b2:fa:5b:4b:fc:b7:2d:5f:30:fb:18:
0e:13:a6:96:d8:6b:b9:cb:a7:ae:7e:90:39:36:b6:
0a:59:35:58:f6:27:8a:0a:da:c4:a8:ec:92:54:46:
7e:cd:59:b5:df:3d:58:b4:f0:a3:a1:da:e1:b8:41:
9b:cd:8e:f1:59:57:e6:e0:74:1f:57:9a:7c:ef:2e:
ee:58:0e:ce:8c:06:d9:c7:5d:c1:ea:cf:b3:f2:42:
65:30:b3:5b:da:4c:03:1a:fe:32:19:67:5f:22:2a:
aa:57:d7:eb:09:51:61:8f:1a:37:f9:14:6a:c2:fd:
74:a4:3e:c2:5a:70:3c:93:af:7c:62:69:5d:0e:4b:
bb:37:4b:37:73:6e:b3:68:23:df:1c:e7:e2:96:be:
e1:65:f8:80:6a:88:8a:85:ba:b2:56:55:17:b0:0b:
20:2d:63:97:34:a2:62:53:ff:f6:9d:7b:56:20:66:
ba:53:54:b3:c3:42:9f:22:04:be:a0:9b:6d:4d:55:
01:29:2a:e7:55:05:7a:84:41:8e:87:02:94:7d:5a:
ab:8e:12:c7:37:fe:b2:1c:ff:20:d0:67:61:84:09:
ba:41:9c:07:53:19:05:ed:2b:56:e4:34:af:2c:83:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:86:6E:4F:CB:2D:87:9B:A9:3F:4A:1E:5F:79:AA:FE:12:BB:E6
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/FtmGbk_LLYebqT9KHl95qv4Su-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:91:8a:da:b5:69:b1:b6:d1:8c:b8:3e:0b:38:28:97:74:22:
27:7d:bd:67:0e:3a:17:2f:06:e1:fe:f8:36:ac:fc:56:95:0a:
12:a5:fb:c6:81:cc:a2:7e:1a:e3:ee:c5:de:3e:81:cc:e6:11:
57:b3:90:be:17:6b:13:0d:a9:cc:f5:4b:6b:ed:72:2f:5e:8d:
31:c5:09:60:7d:2b:71:32:47:d6:9c:4c:cc:e3:6c:61:e5:da:
64:2d:06:ab:6b:74:52:39:f1:0d:23:69:85:50:51:ab:a7:89:
d8:8e:32:6b:e5:3b:6a:b8:95:72:cc:b3:50:b0:5f:ef:a1:31:
ce:9d:59:14:58:28:22:a7:38:5b:8d:aa:33:29:0a:a3:a9:af:
88:a1:f2:72:99:42:25:c9:92:f4:01:83:3b:99:ff:aa:97:f7:
b9:80:ab:fb:66:43:09:40:ff:7f:28:0a:98:06:6b:74:d7:bb:
d6:09:ca:85:ce:58:55:1e:0a:78:19:d1:47:dd:95:97:93:07:
f8:8b:01:1e:6c:6d:26:3a:bc:96:d3:c2:89:bf:20:e2:d8:75:
30:42:5d:63:66:c1:5b:92:5f:73:78:c0:72:6f:33:65:7b:ef:
bf:ec:e4:cb:14:ab:4e:c1:cf:1b:70:53:c0:0e:07:a4:42:4c:
c6:f1:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org