Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/Ea99b_TBqDWuB3cZHJEtVg9NvEU.roa
File: Ea99b_TBqDWuB3cZHJEtVg9NvEU.roa (raw, json)
Hash identifier: ojLEwcu9L2TkDvSc8UTqg9GhwUdDxdxO/g7JzwdA7SA=
Subject key identifier: 11:AF:7D:6F:F4:C1:A8:35:AE:07:77:19:1C:91:2D:56:0F:4D:BC:45
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 0186E06DF32147C910B2725CBBC87B6C5DF2
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/Ea99b_TBqDWuB3cZHJEtVg9NvEU.roa
Signing time: Tue 14 Mar 2023 14:02:27 +0000
ROA not before: Tue 14 Mar 2023 14:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39216
IP address blocks: 188.72.60.0/24 maxlen: 24
188.72.63.0/24 maxlen: 24
188.72.62.0/24 maxlen: 24
188.72.61.0/24 maxlen: 24
188.72.35.0/24 maxlen: 24
188.72.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 11:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:6d:f3:21:47:c9:10:b2:72:5c:bb:c8:7b:6c:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Mar 14 14:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11af7d6ff4c1a835ae0777191c912d560f4dbc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:85:8a:ed:93:7b:5f:d9:2e:5e:25:3f:01:
6a:6d:b0:7b:41:78:a5:73:e5:f8:d5:79:45:f5:d6:
d9:22:c3:11:a2:ac:a5:de:2c:dc:1d:13:17:70:df:
de:95:3e:11:4e:ad:e4:cb:8d:11:5f:d8:74:f1:ab:
68:e0:cb:05:4e:fa:76:92:ec:0e:da:1e:32:9b:03:
ed:8e:fe:fd:b0:14:4a:98:67:a4:e2:5a:23:33:69:
d7:e7:bd:0d:ef:7a:34:f7:0d:f2:cf:fe:f6:b1:f5:
a3:06:37:1d:ef:a1:7c:3c:6b:1c:aa:c1:5c:4c:24:
28:53:00:27:68:84:12:44:52:e9:bd:21:7e:71:f4:
e0:7d:45:61:22:04:03:0d:72:c9:17:78:7c:04:2f:
73:1e:0f:e2:31:e4:61:cd:2e:5c:d7:22:13:6f:c9:
2b:49:f5:9a:70:a4:a3:f7:48:85:8e:c5:ff:ad:83:
b0:75:f3:d8:04:a4:2c:cb:30:d6:35:3a:88:cc:ad:
26:11:77:9f:57:b7:9b:b6:e4:8a:60:c1:1c:6d:3f:
df:5f:74:25:92:2c:95:ae:b5:36:9f:78:17:d1:58:
d5:f3:94:0e:fa:6b:ee:6b:7f:ba:69:e2:8f:e0:f7:
a8:ec:f6:be:60:06:98:1c:07:e2:a2:fd:23:8d:82:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:7D:6F:F4:C1:A8:35:AE:07:77:19:1C:91:2D:56:0F:4D:BC:45
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/Ea99b_TBqDWuB3cZHJEtVg9NvEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.34.0/23
188.72.60.0/22
Signature Algorithm: sha256WithRSAEncryption
e4:fd:48:e0:e0:ce:d1:ed:26:7f:eb:12:b0:77:97:7c:b2:8a:
1a:c7:a8:41:66:7f:03:0c:6a:c2:b7:dd:11:35:48:70:71:cd:
a8:79:3e:91:b4:62:1c:1e:6f:d1:9d:39:5a:0d:5a:91:df:65:
9e:e0:65:c6:ed:96:f3:a9:63:56:6d:37:3b:06:38:b3:d5:ce:
33:b0:00:23:af:75:cd:a9:61:ea:f9:ce:62:0b:e2:0b:b0:6b:
a4:89:68:73:65:69:9c:ae:80:6b:43:d6:ab:4e:9c:eb:94:02:
74:86:92:1a:bc:2c:94:b8:00:8b:6f:8b:cd:1b:1a:a8:96:0c:
b8:5e:bc:10:aa:59:7f:22:61:15:26:7a:e4:d5:84:ff:2a:38:
ad:75:c1:7c:dd:54:31:c4:55:dc:1d:17:53:47:40:8b:fa:97:
6c:32:d9:4e:b6:10:84:35:5b:78:27:19:0d:1a:32:c1:2e:6f:
2f:f6:fa:3a:0d:a8:f2:56:33:bc:5a:29:25:ae:5e:9d:1d:46:
6c:a6:0a:12:e8:ff:e8:b0:bb:f7:8e:b1:87:de:65:1b:6e:03:
bf:8f:c6:2b:cb:f7:39:e5:2c:ce:40:20:70:ec:1c:f5:3b:b4:
53:04:fc:23:87:ba:55:60:8f:04:c2:81:a8:46:78:46:78:e4:
01:ca:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:06 2024 by rpki-client on console-fra.rpki-client.org