Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UTyMECFk1_jTALmR0_BJV_1Vpuk.roa
File: UTyMECFk1_jTALmR0_BJV_1Vpuk.roa (raw, json)
Hash identifier: gUlsmdxth7uQBEOIcXyJWGvj0dp2DSttxRcxAxUzDaY=
Subject key identifier: 51:3C:8C:10:21:64:D7:F8:D3:00:B9:91:D3:F0:49:57:FD:55:A6:E9
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B8B713CBF0331CE79399663D51266A201
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UTyMECFk1_jTALmR0_BJV_1Vpuk.roa
Signing time: Wed 01 Nov 2023 15:12:16 +0000
ROA not before: Wed 01 Nov 2023 15:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 188.212.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Dec 2023 12:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:71:3c:bf:03:31:ce:79:39:96:63:d5:12:66:a2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 1 15:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=513c8c102164d7f8d300b991d3f04957fd55a6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:61:3d:55:0c:6b:5d:cf:28:ab:b2:48:49:
74:0c:c2:97:2b:c8:90:09:90:35:9f:68:04:41:d6:
b8:ed:62:8d:c2:55:8f:36:1a:0b:2c:ee:a0:54:13:
0c:e6:c9:4c:df:46:a8:27:be:56:97:59:ab:8b:df:
77:63:f4:b7:c7:2c:bd:ea:ac:a7:7e:43:8f:92:ad:
64:1c:72:47:b8:32:8e:6b:69:d2:b7:b5:18:a0:62:
2e:ea:b0:89:e8:87:8e:36:0e:c3:ca:d3:bc:7b:ea:
d5:09:0e:2b:cf:1d:8d:f4:06:7f:1c:78:9b:4d:24:
f8:f3:12:63:64:fc:66:56:bb:42:7c:52:a0:f6:6d:
c5:8f:37:35:59:ef:ea:bf:ab:51:bd:23:99:a3:0e:
02:5c:96:8c:5f:51:5b:95:cd:e5:83:6b:72:91:42:
ee:86:89:37:24:d4:0c:a0:12:50:6f:2e:65:0e:c7:
49:96:43:bb:af:de:b5:87:7a:1f:4b:76:1f:52:99:
f2:14:a8:7e:ef:7a:ac:0a:8e:6e:ff:87:15:25:76:
02:6e:e8:9b:1d:1a:98:fe:06:d7:bf:1e:5f:b9:e4:
fe:44:e3:f5:eb:5c:61:05:41:c3:aa:15:e7:9d:42:
00:83:54:c8:a2:5b:70:d2:cd:b1:5b:54:bc:c8:47:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3C:8C:10:21:64:D7:F8:D3:00:B9:91:D3:F0:49:57:FD:55:A6:E9
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UTyMECFk1_jTALmR0_BJV_1Vpuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.132.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0c:12:d4:16:1f:b5:03:10:b5:eb:2f:5f:e6:d3:73:1b:81:
63:68:b8:aa:33:15:00:87:97:03:b3:12:ff:5a:ab:11:63:d5:
75:59:b2:7a:a4:df:57:79:03:9a:ee:e9:4b:30:81:f6:2d:69:
3a:f6:07:9f:6f:8a:95:dc:f9:54:46:79:71:2b:2d:2f:c5:94:
a1:3e:68:f2:11:b6:1d:e3:fb:1c:8c:1c:d6:e9:c0:b4:4a:30:
65:f3:a1:6a:07:25:c2:37:8c:b5:f3:b3:d6:a2:62:7c:67:0f:
62:64:17:35:66:27:e0:4a:6d:5d:75:a7:61:1e:33:cc:03:4e:
b0:7f:45:84:34:5c:a4:11:ff:4f:1b:90:00:63:a4:9f:ba:d1:
e0:62:ca:8e:b1:74:2c:29:ac:be:d5:93:59:bf:d3:f8:b9:6e:
8d:45:a6:5a:c3:d1:26:c6:b7:5f:7b:6a:de:b7:9a:a9:cf:8c:
cb:f2:fd:b8:c0:aa:20:ea:ef:9d:d3:1c:fa:e2:9c:d2:82:33:
13:55:ff:c0:62:6b:40:92:91:d4:80:7a:47:31:be:5f:0b:c8:
51:8e:76:eb:70:f0:dd:c0:3f:7b:23:17:a9:2d:92:e3:14:01:
51:b9:ba:50:99:05:ae:dd:50:42:df:33:61:8d:be:26:76:4d:
98:ed:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:46 2024 by rpki-client on console-fra.rpki-client.org