Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/feoNUBcroLOycKRBHOlbpUGfFcc.roa
File: feoNUBcroLOycKRBHOlbpUGfFcc.roa (raw, json)
Hash identifier: xZbkXAv+7h0uiWZAk9+zUZP44XjJ/1fAN4fOdDyuBAQ=
Subject key identifier: 7D:EA:0D:50:17:2B:A0:B3:B2:70:A4:41:1C:E9:5B:A5:41:9F:15:C7
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 018BD8066E26A91899B3D65F8B8BA5F4BD7D
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/feoNUBcroLOycKRBHOlbpUGfFcc.roa
Signing time: Thu 16 Nov 2023 12:06:21 +0000
ROA not before: Thu 16 Nov 2023 12:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.174.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 13:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:06:6e:26:a9:18:99:b3:d6:5f:8b:8b:a5:f4:bd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Nov 16 12:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dea0d50172ba0b3b270a4411ce95ba5419f15c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:0a:2b:c4:02:08:d8:2d:4c:f6:d8:21:5f:
c7:3a:82:93:00:6b:fb:db:8a:66:37:1f:85:19:95:
f0:32:0b:c2:35:e9:02:68:ea:59:c0:32:4b:5f:ac:
13:18:18:85:40:05:f6:37:45:ce:bc:63:ba:8b:5a:
7c:ef:8a:f1:0a:13:43:15:47:1b:63:a2:fc:ab:d7:
3c:6a:9a:e4:70:12:a2:b9:ee:56:f4:2b:77:b2:95:
b8:78:1c:35:e5:1b:f3:29:a5:c7:d3:9d:51:8a:37:
32:5b:dc:ba:e1:90:16:f9:04:be:21:2f:6b:48:97:
4f:29:b3:da:9c:c2:6a:fc:1a:59:c4:8b:4d:0f:56:
6a:42:c5:4b:6c:ba:98:6a:d7:20:3d:c3:4a:6e:8e:
87:5d:37:c4:0a:84:cb:70:a3:7c:cd:f8:54:29:56:
0e:b6:25:bb:99:24:6c:89:83:df:15:cc:58:57:00:
1f:9f:a9:64:d3:09:8c:b4:8f:aa:cc:3d:68:4c:0b:
3a:f2:85:0e:60:58:d5:e2:77:95:44:fe:fb:84:7e:
a7:7b:f6:1c:13:73:12:6f:0f:41:35:e0:25:50:bb:
df:57:44:9e:a4:1b:d7:8a:dd:62:a7:64:b1:27:34:
b7:97:7c:b6:07:d8:15:d9:fd:47:80:62:60:66:bd:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EA:0D:50:17:2B:A0:B3:B2:70:A4:41:1C:E9:5B:A5:41:9F:15:C7
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/feoNUBcroLOycKRBHOlbpUGfFcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/24
188.125.163.0-188.125.166.255
188.125.168.0/24
188.125.170.0/24
188.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:24:85:da:4f:91:46:6e:fc:c7:bc:b0:a5:07:ba:88:ad:0c:
51:71:b4:c7:1c:49:98:2b:d7:6f:ab:75:49:15:f7:01:35:0c:
cf:04:cc:8b:e3:78:aa:6c:84:fd:2f:d9:8b:80:e5:23:10:9c:
7e:72:7f:a9:64:98:25:7e:11:63:dd:d5:a6:9b:99:15:ed:a1:
c8:0c:91:87:4e:00:47:24:a8:bc:ef:c3:ec:23:87:cf:0b:0a:
53:8a:ef:2d:6a:2e:dc:3c:d9:f5:34:fd:06:a0:25:b3:d1:62:
a5:62:9e:25:ea:da:a5:3b:6b:05:ab:d0:98:b8:01:3c:4d:41:
37:83:b8:5d:64:bd:b5:ce:31:12:7c:dd:de:5e:ab:d1:eb:5e:
e0:97:73:70:3a:7a:35:f1:4c:a7:90:a0:ed:9c:87:e5:07:6c:
e7:e1:79:a3:90:51:fe:8a:bd:50:3c:52:5a:9d:00:c3:e4:8f:
90:28:24:49:b0:00:dc:c0:66:1e:77:5e:cc:2f:f9:cb:02:0f:
53:a2:a9:1b:82:0c:7d:7a:9a:b0:d3:06:43:cf:5a:c4:18:60:
cb:1f:00:57:ba:8d:09:d6:8b:dc:d6:ab:b7:5a:6a:b0:66:8a:
14:ac:ae:77:51:1a:78:f6:91:4e:a2:e9:65:e1:1f:89:20:83:
2b:c0:c8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:47 2024 by rpki-client on console-fra.rpki-client.org