Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/RJWh530k8ZoDxerqXifMJv7sk5k.roa
File: RJWh530k8ZoDxerqXifMJv7sk5k.roa (raw, json)
Hash identifier: MotalPeBnr8EqD3Wd7ianUOBShGVfWaNCn8sZBsuGKs=
Subject key identifier: 44:95:A1:E7:7D:24:F1:9A:03:C5:EA:EA:5E:27:CC:26:FE:EC:93:99
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018E1954081BAED70F0526BC710D9844C373
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/RJWh530k8ZoDxerqXifMJv7sk5k.roa
Signing time: Thu 07 Mar 2024 14:32:01 +0000
ROA not before: Thu 07 Mar 2024 14:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205800
IP address blocks: 188.72.41.0/24 maxlen: 24
188.72.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 20:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:54:08:1b:ae:d7:0f:05:26:bc:71:0d:98:44:c3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Mar 7 14:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4495a1e77d24f19a03c5eaea5e27cc26feec9399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:6c:d2:e0:7a:f7:5d:93:0e:89:e7:96:b4:
28:c5:46:f1:20:cd:50:a3:2a:48:6b:29:03:95:30:
a9:f3:59:bf:32:48:42:ce:cb:97:ce:d3:a6:51:6f:
35:88:33:36:ca:1c:af:7d:34:f1:50:94:6e:1d:8a:
41:ba:64:4c:f5:a1:3b:59:7c:11:7d:b6:1d:01:43:
27:c9:a7:41:91:02:90:11:0b:e4:eb:5e:27:7e:37:
6d:79:9b:34:56:78:19:7b:1f:96:eb:cc:eb:71:aa:
a5:52:10:9e:e4:58:34:87:fd:15:17:1a:0a:3e:8b:
62:4e:22:cd:fc:3a:b8:89:dd:5f:53:2a:2e:98:86:
7c:fd:33:75:0d:e7:8d:9f:4a:8d:a1:5f:93:cb:88:
2c:be:94:e8:93:e8:2e:ed:10:b4:37:6c:b0:14:a0:
d1:7a:c9:b5:58:e4:b6:1e:f7:f3:44:26:b6:b1:e8:
8a:a5:b7:9a:87:94:ad:25:35:eb:16:48:e0:d3:b2:
f8:f6:fa:5c:30:9e:19:74:59:7b:e3:7e:ae:69:b6:
73:df:d7:53:1f:45:5f:77:79:f4:13:55:f7:c3:7c:
7a:7e:ff:6f:09:d2:2a:2b:6d:1a:87:d9:5d:70:fc:
b6:be:ed:71:f8:df:a6:08:a8:2b:dc:0f:33:fe:66:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:95:A1:E7:7D:24:F1:9A:03:C5:EA:EA:5E:27:CC:26:FE:EC:93:99
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/RJWh530k8ZoDxerqXifMJv7sk5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.41.0/24
188.72.49.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:47:b1:94:cd:b0:01:91:0d:d3:88:18:c0:8c:b2:f3:4c:04:
55:3c:b9:8b:76:7e:cb:f3:bf:a3:66:49:5c:42:8d:a7:9d:0f:
14:4d:49:09:74:53:e0:2b:56:87:a7:0a:c3:02:e2:53:88:e5:
09:62:15:5d:cd:18:5e:40:6d:ea:19:63:f5:51:4e:38:dc:bf:
48:62:a0:58:8b:72:1b:b9:3e:22:50:05:a4:69:cc:47:f0:3c:
6d:8b:2e:c3:00:5c:ca:7a:3a:d2:b1:86:8e:52:c8:d9:a8:46:
3f:2e:4f:2b:c7:ef:e1:0f:2e:00:ed:ef:6b:21:a4:59:d2:ce:
5c:c3:c0:21:62:82:00:4c:2c:49:40:a9:42:aa:bc:83:25:b9:
e1:33:f7:b2:2d:97:66:49:33:3d:07:28:b2:a8:20:73:43:e3:
84:36:45:92:49:18:9c:4d:08:0e:c0:bd:4f:ab:9d:d5:87:17:
db:40:fd:f0:9b:19:9b:0c:2d:04:a0:64:fd:0b:f5:a2:a8:3f:
39:19:75:15:00:35:8c:ae:fd:4f:d2:25:85:4a:24:da:e4:27:
27:f7:89:e9:7a:4e:c3:e7:57:66:3d:8e:01:e0:52:16:e4:4b:
45:16:80:87:fa:da:da:40:af:95:3d:92:23:98:27:e2:9f:c9:
2b:27:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:32 2024 by rpki-client on console-ams.rpki-client.org