Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/w_jRBwgyA2VtkQSzYySNwwQeZ9U.roa
File: w_jRBwgyA2VtkQSzYySNwwQeZ9U.roa (raw, json)
Hash identifier: XGAUSbs2g2nDic2KUZXfo01V7EmsEMkyVhsCm8MUDKA=
Subject key identifier: C3:F8:D1:07:08:32:03:65:6D:91:04:B3:63:24:8D:C3:04:1E:67:D5
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 01857015476A2401B8A2F02075AC048BC20F
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/w_jRBwgyA2VtkQSzYySNwwQeZ9U.roa
Signing time: Mon 02 Jan 2023 01:25:20 +0000
ROA not before: Mon 02 Jan 2023 01:25:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21385
IP address blocks: 194.88.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:47:6a:24:01:b8:a2:f0:20:75:ac:04:8b:c2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Jan 2 01:25:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3f8d107083203656d9104b363248dc3041e67d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d7:58:53:fa:fa:0d:48:f6:78:04:9c:e9:06:
f2:0b:fa:46:35:38:2e:d1:a1:87:25:31:47:48:33:
d0:d5:db:fa:f5:d8:e2:65:df:70:47:63:05:f8:88:
cb:bc:95:35:03:12:58:1c:f9:69:86:2e:22:28:0d:
0b:30:59:d5:31:d7:cf:39:be:7b:57:5a:45:e7:6b:
2e:65:b7:f3:95:56:e8:7d:e3:cb:ea:37:7b:81:32:
4b:dc:e4:53:02:cc:d4:2e:31:f3:6c:96:cd:72:7e:
11:11:29:ea:1b:d7:a8:15:60:14:57:9b:50:97:c6:
b8:8d:a7:65:c9:bf:19:3d:5c:db:68:8a:85:cf:37:
22:eb:d0:6e:b4:6c:84:77:8c:b9:85:ed:97:b6:af:
54:ad:fd:35:95:5b:59:f1:1e:a6:fe:7f:64:60:4b:
f7:ab:a7:79:48:81:69:7e:16:ee:b0:f5:4c:be:7a:
5b:df:e7:b5:2a:55:ad:f1:6a:a7:4f:87:73:89:05:
fe:6c:cb:09:f2:75:ea:12:19:ce:dc:d2:f7:6f:56:
99:32:de:22:4b:af:24:54:2d:61:1a:fb:b5:db:63:
12:7d:01:e7:d2:2b:38:67:7f:90:9d:0b:c0:68:4b:
67:e1:5d:95:dc:5a:1b:7f:57:67:e7:28:5e:5f:7b:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:D1:07:08:32:03:65:6D:91:04:B3:63:24:8D:C3:04:1E:67:D5
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/w_jRBwgyA2VtkQSzYySNwwQeZ9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
63:58:9d:bc:a1:5a:e4:f7:05:1b:aa:d1:dc:de:ef:48:a7:ac:
5c:29:fe:0f:8b:dd:b1:c0:2c:70:6b:30:55:4e:58:83:36:26:
00:a8:11:c6:e0:ee:ca:43:d3:3a:a3:c0:8b:e0:e6:4c:c6:f3:
98:73:0b:06:d1:cd:48:ed:06:86:70:f1:d0:41:f3:c8:19:26:
72:18:24:6c:4d:ec:c9:7f:4d:aa:51:7d:5c:03:a2:18:75:da:
c9:58:54:59:23:17:48:0e:70:37:25:dc:fe:41:ca:78:fe:52:
29:4b:7b:5f:7f:cc:0a:a1:43:6a:7f:5f:dc:8c:81:0a:ce:10:
0f:a9:4f:c0:b5:b4:f7:cd:40:4e:75:8b:10:e8:10:73:a8:76:
fa:92:a1:b2:b0:ec:4c:80:3c:2e:83:8c:9b:78:d8:17:b7:44:
de:c6:36:c2:50:35:a7:3e:c7:03:0b:09:a9:5e:77:11:3d:40:
e2:03:3c:63:98:b1:00:c9:dc:ec:9a:46:19:b1:24:f5:93:78:
40:4f:ed:3b:7b:e4:2d:2a:31:75:0d:b8:dd:58:70:a8:88:0d:
1f:a9:9f:9a:50:0e:2c:05:31:74:8a:68:74:27:7f:9f:2b:19:
91:36:8d:5b:61:8a:51:89:d2:60:33:44:ca:2a:90:bf:bd:76:
cd:1d:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:33 2024 by rpki-client on console-fra.rpki-client.org