Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/qfYraWU1mtmCCnHnSPh1nDNKd8M.roa
File: qfYraWU1mtmCCnHnSPh1nDNKd8M.roa (raw, json)
Hash identifier: MXlnzE1rzcwKiNMXcv91TgdPVbeU+jsMHhKpfgPlc2A=
Subject key identifier: A9:F6:2B:69:65:35:9A:D9:82:0A:71:E7:48:F8:75:9C:33:4A:77:C3
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 01856EA6A803DC56AB673AE267376C2AD163
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/qfYraWU1mtmCCnHnSPh1nDNKd8M.roa
Signing time: Sun 01 Jan 2023 18:44:53 +0000
ROA not before: Sun 01 Jan 2023 18:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35916
IP address blocks: 188.208.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:a8:03:dc:56:ab:67:3a:e2:67:37:6c:2a:d1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Jan 1 18:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9f62b6965359ad9820a71e748f8759c334a77c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:c2:31:21:22:bc:72:8f:07:bf:1d:b7:bd:
47:96:1f:fa:b7:fe:ec:29:6f:e2:3e:94:a1:a0:14:
99:10:f9:5a:86:cc:7a:43:82:7a:0d:0a:79:3a:5e:
e4:12:9c:25:95:fe:b2:a6:3c:36:cc:f4:70:09:83:
76:5e:4d:e9:a1:0a:a1:39:65:fd:f9:45:bf:9f:54:
81:76:18:6a:ce:41:fe:d9:7b:7d:db:16:95:82:e9:
94:bb:08:1c:22:fb:f5:7e:92:2e:90:fb:ef:c9:28:
49:42:5f:46:e4:be:e5:60:44:f2:e4:89:21:45:43:
94:d8:18:c1:95:b8:1f:9b:6c:3f:02:10:55:73:85:
08:a0:5a:c6:31:e8:fa:9f:bd:78:ef:d3:cf:97:71:
c5:67:80:72:32:40:c7:e6:79:fa:ae:d7:26:fe:91:
c8:72:af:a3:b4:f0:ed:b3:b5:53:97:b2:b4:28:78:
13:7d:e0:da:c0:66:6a:22:28:23:24:46:ff:04:c9:
dc:61:8f:60:47:f6:93:a5:4b:49:33:90:72:55:59:
26:7f:06:00:7c:8f:24:6f:2e:13:b0:3e:b8:0c:8a:
1f:1f:63:fc:d1:f6:71:85:d8:8c:69:18:d0:df:17:
ee:a2:ea:0f:bc:3a:79:b2:59:bf:48:65:82:5e:8e:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F6:2B:69:65:35:9A:D9:82:0A:71:E7:48:F8:75:9C:33:4A:77:C3
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/qfYraWU1mtmCCnHnSPh1nDNKd8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f0:de:e7:73:06:14:fc:cd:2a:77:a9:e5:40:b3:5d:36:4c:
2b:19:6e:ed:87:f8:99:33:43:d8:1d:ee:8e:2b:6a:7a:09:ba:
76:41:9d:3f:08:90:8a:00:e4:c7:66:7e:45:aa:c4:dd:2c:15:
43:be:63:41:e5:e2:cc:4a:79:f6:57:a5:1d:22:39:ce:44:f6:
0e:55:86:3e:d2:51:76:69:35:e7:1c:cc:fa:ef:fa:b5:59:44:
95:cf:ba:10:81:d7:52:55:7e:7f:ea:a5:09:fb:7d:6a:f2:65:
fb:e2:37:a6:eb:11:5f:dc:7f:b0:9a:bb:20:b5:3e:ea:57:b6:
77:71:0e:1f:5e:97:f9:bb:17:9a:c9:ff:10:4b:de:3c:d7:ea:
a5:36:2f:65:d1:8e:84:ec:50:14:d3:f3:78:8c:5f:d1:11:b1:
6f:85:ad:a8:d1:08:86:ee:b8:10:b9:6a:ab:14:fc:8a:48:ad:
46:23:6f:1e:12:65:80:30:55:4b:66:19:33:1b:07:dc:56:a3:
d2:7f:4b:34:ac:f5:f0:42:2e:66:7e:0e:9c:3b:bf:fd:c7:39:
92:45:9a:a0:67:c1:09:92:9d:8d:4c:b0:e0:56:ab:79:23:8c:
59:67:90:6c:83:6a:9e:9e:df:ee:51:16:15:cb:bb:9b:4b:1c:
78:15:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:01 2024 by rpki-client on console-fra.rpki-client.org