Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/tJUCIiHCezu7TLXhQwScTgMpdpc.roa
File: tJUCIiHCezu7TLXhQwScTgMpdpc.roa (raw, json)
Hash identifier: wmT82sRS0jCXXDlnp03J6c0lL1z6wKjWQzIEtkodLaY=
Subject key identifier: B4:95:02:22:21:C2:7B:3B:BB:4C:B5:E1:43:04:9C:4E:03:29:76:97
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 018CC8DF0161EDC932D95E7FFBEB5028789A
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/tJUCIiHCezu7TLXhQwScTgMpdpc.roa
Signing time: Tue 02 Jan 2024 06:31:47 +0000
ROA not before: Tue 02 Jan 2024 06:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.174.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 13:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:01:61:ed:c9:32:d9:5e:7f:fb:eb:50:28:78:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 2 06:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b495022221c27b3bbb4cb5e143049c4e03297697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:79:88:dd:05:4e:67:bf:74:aa:4c:ab:0f:57:
5e:12:ae:cf:0e:1b:6c:56:72:10:53:d7:16:f6:7b:
64:33:50:ce:8e:8a:e6:5d:0d:28:25:e9:db:55:5c:
93:4e:1b:62:48:72:dd:6b:2a:0d:f3:0b:79:9f:25:
61:f7:2e:d7:e3:17:f6:ed:6f:e9:5c:f1:68:3b:0d:
fd:f8:4d:be:65:a4:14:72:65:12:26:06:e5:e2:8f:
38:79:7b:85:c5:a7:f5:7c:ce:a5:77:58:b0:1e:d6:
ea:16:19:a1:32:f6:cc:3f:01:a6:59:77:c4:7d:1a:
2d:e3:62:ad:2f:25:e3:89:70:c2:09:bb:ff:76:d9:
3d:22:56:5e:e8:d8:1d:4f:97:6e:45:1c:d9:5c:0a:
22:94:a7:d3:18:a5:13:06:d8:45:d0:d1:f3:f2:de:
28:83:61:c4:ff:cd:d1:53:10:46:d7:c2:c6:80:84:
f8:7a:db:26:d8:8f:9a:02:bc:c5:6a:2e:c6:9f:83:
16:15:be:1d:8a:70:72:6b:b2:4a:c1:60:51:bb:97:
c3:ba:2b:4e:49:ed:fe:05:03:67:23:ce:a8:12:f2:
bf:19:46:72:54:1d:28:0a:4d:5a:04:69:2d:86:a4:
dc:d8:90:3b:f9:35:e7:98:8f:ea:31:d2:5d:92:99:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:95:02:22:21:C2:7B:3B:BB:4C:B5:E1:43:04:9C:4E:03:29:76:97
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/tJUCIiHCezu7TLXhQwScTgMpdpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/24
188.125.163.0-188.125.170.255
188.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
62:22:1a:59:89:df:59:fe:0a:a0:2a:bc:5a:37:b1:76:ee:54:
6c:47:2e:17:bc:5d:05:0f:bc:59:07:87:57:87:a6:85:9a:a0:
ca:0c:a9:80:fa:eb:58:2e:26:f4:38:56:7f:c6:22:ab:3a:2d:
16:a4:16:9b:5b:39:76:80:72:4d:36:e3:82:c2:b0:9c:c9:a7:
f5:26:79:24:ba:08:df:14:be:16:64:9d:f8:6d:10:ec:4e:89:
7e:82:56:a4:16:d7:31:14:14:ad:53:68:a5:f6:05:9a:6f:df:
73:5b:f6:57:55:ac:15:12:f3:cb:a9:96:a5:7d:0a:5a:0e:69:
db:69:34:d6:51:5b:eb:57:a9:1a:da:70:13:60:5a:cf:95:4b:
15:d6:0e:cb:6b:8b:d7:ac:c8:16:92:46:50:dd:2a:2b:7c:e8:
15:6e:95:da:f6:49:70:90:21:9e:ad:63:df:58:1a:2f:7a:0e:
f4:66:c9:91:62:da:d9:9b:a9:36:e9:c7:df:46:79:c8:d8:c6:
17:bb:36:01:8b:9a:cc:05:83:4f:d7:8a:3e:bd:01:68:fb:3d:
bb:b0:ed:09:70:5c:01:68:93:34:7b:42:ad:3d:81:82:b9:78:
eb:b7:9e:80:67:f9:ab:d7:f8:97:62:ef:b1:20:a1:88:87:8e:
51:71:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org