Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/fwwYb_gyHRooEbyA7J91NiZG438.roa
File: fwwYb_gyHRooEbyA7J91NiZG438.roa (raw, json)
Hash identifier: dudgpek9Lg0pCZvsCvA3nOYigaOds6nzxYzi5gnr4H4=
Subject key identifier: 7F:0C:18:6F:F8:32:1D:1A:28:11:BC:80:EC:9F:75:36:26:46:E3:7F
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 0188ED734F7B5218ADB133597F8EF1661E56
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/fwwYb_gyHRooEbyA7J91NiZG438.roa
Signing time: Sat 24 Jun 2023 12:48:57 +0000
ROA not before: Sat 24 Jun 2023 12:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 178.209.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:73:4f:7b:52:18:ad:b1:33:59:7f:8e:f1:66:1e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Jun 24 12:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f0c186ff8321d1a2811bc80ec9f75362646e37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:55:4f:a5:71:13:f0:9e:ee:72:e7:09:ac:
1f:58:3e:40:a7:7e:cb:74:b0:02:7b:ea:ba:60:99:
93:20:1c:78:92:be:82:2e:24:8d:0e:e5:aa:58:e0:
01:03:83:9b:4f:29:a6:d8:dd:cd:3b:ad:3d:a4:47:
b6:5d:e9:99:9a:22:84:38:39:b6:22:1e:2e:ca:40:
c5:ec:93:50:4d:50:9d:8a:65:0c:b4:e3:58:f1:38:
da:59:6a:a2:7a:3b:22:b8:10:aa:b8:08:77:2e:a0:
8a:6d:d1:5d:4f:3a:1f:f5:de:bc:20:9e:03:b2:36:
63:b6:9e:63:67:88:95:d7:6f:51:c4:c7:c4:da:47:
45:b0:13:87:48:f5:bb:c0:52:1d:79:69:9a:59:73:
ee:63:5c:a4:16:6e:d9:7e:bf:46:7d:12:14:90:07:
51:87:1d:0c:b4:fa:66:1e:46:3e:1a:fa:9f:d9:a6:
18:64:86:f1:c4:56:d2:8e:69:c5:c4:14:cb:62:c9:
66:91:2a:6a:dc:95:34:04:30:48:86:72:e7:a5:08:
2c:28:32:13:09:8a:7b:3e:d7:0a:8b:04:77:06:21:
59:fa:70:61:5d:b3:11:1a:31:0c:77:05:e2:45:08:
bb:e0:ec:24:26:ae:4e:1e:6e:58:a4:e8:f0:7f:a3:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0C:18:6F:F8:32:1D:1A:28:11:BC:80:EC:9F:75:36:26:46:E3:7F
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/fwwYb_gyHRooEbyA7J91NiZG438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.209.64.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:00:91:ca:98:87:3a:48:18:b0:53:7d:1f:5b:3f:b9:92:9f:
fa:68:a3:20:f9:93:77:32:15:3c:51:8e:b8:fe:11:16:39:54:
42:f6:a1:77:25:1f:0d:a0:51:34:a6:5b:c2:c9:50:90:07:50:
52:65:c8:08:df:d0:e0:60:d0:c4:9e:f2:38:16:09:9d:30:19:
2d:81:00:3f:10:13:d8:bb:7f:5c:79:82:b5:db:1c:60:e8:74:
81:b0:3b:f3:86:46:02:3d:ca:56:01:f8:af:b9:a3:9d:ca:a9:
02:39:a9:56:a9:76:21:98:d4:4a:d7:36:6e:01:9e:35:d1:4c:
2a:be:fb:c3:60:9c:b6:ec:6a:9e:9a:65:f8:cc:f1:b3:8b:ac:
de:15:fc:a1:30:f8:0a:8f:4e:ba:75:c0:f4:9b:6c:78:9d:eb:
cd:10:08:99:ea:90:44:ba:fa:d3:02:72:2b:89:90:d0:9d:96:
b5:87:0f:54:1c:8d:8f:24:71:2e:8d:27:56:f9:0c:1d:22:89:
65:c2:97:64:3d:ad:dd:e0:08:05:37:db:73:5f:90:48:19:ff:
30:4c:80:8e:f6:68:e0:88:64:79:17:e2:54:b4:38:d0:29:da:
4f:fd:95:65:85:c5:4f:d0:f9:d9:c3:bc:97:33:4d:64:01:7d:
42:5d:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org