Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/6Cu3pJAfVgnoarb47UvNxQ_DIps.roa
File: 6Cu3pJAfVgnoarb47UvNxQ_DIps.roa (raw, json)
Hash identifier: xol67U1RTxKsV/QjVGO8OvJgDLlUvXdW2YxJ+3TYTHk=
Subject key identifier: E8:2B:B7:A4:90:1F:56:09:E8:6A:B6:F8:ED:4B:CD:C5:0F:C3:22:9B
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 0191B78A09F20D2D1697B3F81BCED4864F8E
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/6Cu3pJAfVgnoarb47UvNxQ_DIps.roa
Signing time: Tue 03 Sep 2024 10:59:22 +0000
ROA not before: Tue 03 Sep 2024 10:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201749
IP address blocks: 188.72.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 08:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:8a:09:f2:0d:2d:16:97:b3:f8:1b:ce:d4:86:4f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Sep 3 10:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e82bb7a4901f5609e86ab6f8ed4bcdc50fc3229b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:28:a1:59:ad:fa:df:cb:ed:fd:74:ec:11:
73:39:c0:df:6b:d3:a7:8b:e7:0c:1d:03:ce:d8:b2:
d8:71:fb:58:37:14:42:30:88:5d:30:b9:9d:21:c9:
b3:22:d5:b3:da:3f:bb:f1:8d:4e:cf:c5:f1:54:20:
ba:2b:1c:3b:eb:87:ee:9b:f9:40:13:0c:c8:d2:fa:
95:dc:ab:da:24:66:ee:7c:4d:a5:73:5c:da:0d:73:
60:fd:85:ee:c1:3a:19:de:f8:25:cb:0a:f1:21:51:
1d:44:c6:17:e3:da:4a:38:fd:c8:6b:ff:06:8c:bd:
c2:94:05:04:b2:f4:9c:e4:29:f6:96:52:7b:30:da:
ab:df:d4:e0:c5:8e:b4:0e:c4:a3:57:37:bd:71:8e:
0f:50:47:0a:c3:d3:80:ac:ad:7a:cf:03:7c:9f:b2:
ee:5c:d3:45:c6:70:5a:e9:f8:cb:4c:b1:1e:02:60:
b7:73:ce:a4:ba:4a:32:69:f4:80:7b:26:4c:ea:fc:
80:d9:86:1d:d5:d8:1e:b0:9b:c0:59:4e:d1:b6:3d:
39:5c:ca:79:36:90:87:be:ae:db:18:a1:6b:af:e3:
fd:85:23:06:64:54:2d:2f:fb:cc:bc:f1:0c:19:56:
e6:19:65:d2:0f:05:93:6f:70:a0:57:d3:7e:74:ae:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:B7:A4:90:1F:56:09:E8:6A:B6:F8:ED:4B:CD:C5:0F:C3:22:9B
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/6Cu3pJAfVgnoarb47UvNxQ_DIps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.56.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f2:9f:b2:66:2e:a3:81:68:b5:6a:61:8e:1e:d3:b3:7e:fe:
0c:a5:68:ef:1f:8e:de:33:9d:4f:05:16:09:3e:8d:c7:c4:c9:
f2:1e:a2:b8:16:f1:72:2e:5f:c4:99:c4:e5:25:fd:36:2a:25:
7e:ba:21:ac:c5:85:47:e4:05:5e:11:90:a3:b1:d2:9c:89:7c:
34:a5:32:02:25:be:e4:b0:41:39:f7:4b:c5:cc:cf:9b:0a:21:
31:11:28:26:da:16:a6:38:6f:2d:24:6f:75:5a:17:c7:5f:ab:
1d:b8:e7:c8:4c:42:75:68:6f:86:06:ba:35:6c:1a:25:46:30:
f4:0b:a7:9b:f9:3a:b0:dd:3d:d0:e2:bb:d5:ae:db:5b:77:26:
6a:d0:c5:85:9f:b2:8e:91:c5:b8:92:d8:e7:3d:b1:3b:5c:40:
9c:ba:dd:2e:64:de:76:e8:50:fb:d7:84:71:ae:7d:3e:8b:1c:
ca:3f:28:56:3f:f9:66:5a:a8:96:08:ae:0f:c6:ab:d5:42:d1:
c4:60:81:bb:ac:c9:2f:2b:88:b6:ab:b8:72:dd:46:08:c7:93:
f3:de:2d:22:07:4d:00:98:44:57:df:a5:15:e6:a1:94:69:fa:
4f:ab:ca:df:81:e3:e2:e3:5c:fb:76:98:12:66:b8:a2:78:60:
dd:0f:e8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 12:31:35 2024 by rpki-client on console-ams.rpki-client.org