Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/Ld6APns7YxjGg6Hlq4ZEpMp42mo.roa
File: Ld6APns7YxjGg6Hlq4ZEpMp42mo.roa (raw, json)
Hash identifier: 5DWY3SChOGza2k0/eY+XguaU8sdnGvjzaGCLXQRja5A=
Subject key identifier: 2D:DE:80:3E:7B:3B:63:18:C6:83:A1:E5:AB:86:44:A4:CA:78:DA:6A
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 01863B84DBFE363F9C141A23C9239BF16143
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/Ld6APns7YxjGg6Hlq4ZEpMp42mo.roa
Signing time: Fri 10 Feb 2023 13:30:08 +0000
ROA not before: Fri 10 Feb 2023 13:30:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200106
IP address blocks: 188.125.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:84:db:fe:36:3f:9c:14:1a:23:c9:23:9b:f1:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Feb 10 13:30:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dde803e7b3b6318c683a1e5ab8644a4ca78da6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:b6:18:f8:13:f7:71:99:4f:f9:ec:10:7d:
c0:31:d0:6e:96:63:b6:76:89:0a:5e:81:d0:85:a2:
d8:fc:50:e0:4e:28:37:80:57:45:91:29:d7:2d:65:
ad:21:3c:3e:8d:18:62:fc:c2:86:6f:be:34:9b:c5:
39:c1:10:aa:05:63:93:c9:35:88:e8:d2:4a:7a:6a:
bf:56:c3:8f:83:cb:75:30:a3:28:9f:9b:89:a9:51:
27:7f:d4:47:06:8e:82:9a:72:b5:15:b2:49:a3:a9:
e9:12:91:b5:20:b4:a1:68:c2:0e:c2:26:10:fa:04:
2f:5c:25:c4:e3:2b:52:88:e5:c0:20:71:36:85:2b:
af:10:74:a4:08:a4:b4:bb:2c:2f:7b:94:38:e2:9c:
f5:3b:f4:bf:ef:70:d7:f9:53:98:23:e4:56:54:ea:
49:44:66:5e:89:1f:ab:48:2c:55:2c:fd:d5:1d:e9:
4b:19:5b:47:ed:ef:2b:2d:ff:8b:8a:92:86:46:d7:
78:fa:f5:6f:84:0e:0d:bf:e4:cc:bc:eb:cf:14:9d:
f8:75:ef:70:94:14:51:9b:b6:cc:fc:42:cd:3e:4b:
4a:83:b7:9e:13:8f:f3:bb:ba:4b:f6:db:2d:fd:a0:
69:4a:72:20:46:b9:55:11:66:20:9d:2d:1e:12:9b:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:80:3E:7B:3B:63:18:C6:83:A1:E5:AB:86:44:A4:CA:78:DA:6A
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/Ld6APns7YxjGg6Hlq4ZEpMp42mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:08:de:24:24:80:38:8e:91:48:9d:33:a2:39:bd:05:b4:61:
cb:08:1e:7d:f4:86:91:86:df:8e:89:5d:2c:64:7a:7e:62:c8:
c3:48:e2:83:b2:bc:0c:ee:b6:7c:c5:18:30:9d:be:f3:e4:eb:
9f:05:ed:64:9e:1d:41:91:55:27:88:c8:bd:48:12:95:35:8c:
88:6c:36:8c:19:4b:92:d9:0f:e3:e0:83:dc:5f:8f:8f:68:50:
16:54:fe:84:40:48:46:b4:98:50:4c:34:a0:6b:43:e8:85:28:
eb:24:12:27:33:ea:43:70:8b:32:96:f7:a1:be:e1:5b:14:cc:
36:ec:20:dd:44:31:92:a4:ae:ca:60:e7:25:bb:c0:f2:be:b2:
3b:78:68:14:b9:af:e4:20:68:01:60:2c:6a:77:53:51:ec:9d:
91:4c:ba:65:d5:8c:b9:e3:04:5f:c5:9f:41:bb:54:0f:ff:30:
47:4d:4d:5b:0f:42:d4:54:f8:ca:49:5c:2d:f6:c3:f6:28:3d:
dc:67:5c:cd:51:a0:54:69:d8:0a:a2:c8:d8:3e:55:fd:91:4e:
34:09:38:8a:8b:44:ce:ec:da:3c:37:e6:d0:fd:20:a3:ab:f2:
99:c9:23:13:a0:9e:b9:b1:20:2f:46:59:2c:a4:70:69:51:14:
c9:1f:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org