Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/_0BK6FYsVDCfvlijyuxtJTNtbtE.roa
File: _0BK6FYsVDCfvlijyuxtJTNtbtE.roa (raw, json)
Hash identifier: /OrekC+7HKGp2TjMEcLOpY4prsHMSNHymXf5qid0XMk=
Subject key identifier: FF:40:4A:E8:56:2C:54:30:9F:BE:58:A3:CA:EC:6D:25:33:6D:6E:D1
Certificate issuer: /CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Certificate serial: 01856DC1BA6155064C333C1F19A86799F7F3
Authority key identifier: 16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/_0BK6FYsVDCfvlijyuxtJTNtbtE.roa
Signing time: Sun 01 Jan 2023 14:34:50 +0000
ROA not before: Sun 01 Jan 2023 14:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 188.93.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ba:61:55:06:4c:33:3c:1f:19:a8:67:99:f7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Validity
Not Before: Jan 1 14:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff404ae8562c54309fbe58a3caec6d25336d6ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:82:c5:ea:40:f3:ec:1e:ef:35:33:75:e3:
7a:3e:7b:a9:3a:5f:23:ed:a4:8d:61:5f:ff:a3:f2:
0e:e0:d2:7f:0f:04:94:09:65:06:69:56:5b:8d:c0:
42:9f:14:f7:18:10:28:fd:72:6b:c7:bb:fa:47:31:
cb:e1:d3:8d:54:9e:91:97:70:b4:87:2f:c9:01:82:
fa:ab:be:4e:c5:10:f5:8e:41:c8:64:e4:d7:86:d7:
b4:47:27:85:90:ed:a0:fe:c9:db:a9:31:4c:8c:66:
9b:57:44:ed:d2:dd:df:2b:77:21:0e:e3:a6:44:e3:
5d:b6:2c:a1:2d:78:03:34:61:f3:f8:73:86:96:42:
04:f6:bd:30:ac:dc:dd:31:34:71:a1:84:c8:d2:b4:
63:43:b1:09:88:22:34:03:b7:26:ba:07:9f:8a:07:
66:2a:0c:cb:a8:66:45:63:36:d6:d2:70:10:ad:0e:
bb:43:9a:52:2f:bb:89:fa:15:b1:ae:b1:cb:13:2f:
3b:75:0f:da:c1:63:6b:5a:32:3d:38:30:94:82:17:
8b:e3:35:49:25:98:1d:48:33:7a:78:bd:9b:1b:c8:
38:1b:a7:ce:7c:07:16:48:89:d2:3f:53:72:d4:fa:
a2:f6:f4:eb:f7:d9:cf:3e:f9:71:81:a6:f4:88:b9:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:4A:E8:56:2C:54:30:9F:BE:58:A3:CA:EC:6D:25:33:6D:6E:D1
X509v3 Authority Key Identifier:
keyid:16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/_0BK6FYsVDCfvlijyuxtJTNtbtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.142.0/24
Signature Algorithm: sha256WithRSAEncryption
39:05:a8:2c:c9:f2:84:5d:56:37:ad:76:0a:e3:81:1b:39:44:
f4:00:bc:b3:e7:31:41:87:4c:17:de:f2:d0:c1:a2:16:63:e6:
95:4a:d6:88:3c:ce:ab:9e:45:6b:08:19:06:15:50:47:bc:ea:
c1:c5:9b:6c:d7:52:d7:3e:d8:7d:ba:aa:2c:4f:6d:d7:2c:86:
64:75:88:b2:d5:5a:73:27:8e:63:3f:55:aa:28:54:3d:03:b1:
5f:37:9f:03:97:d0:82:e2:34:22:e1:89:c5:16:88:f4:2f:79:
a8:c5:e4:65:80:f3:29:42:00:fc:ff:9b:93:41:bb:f5:b3:4e:
44:5e:44:93:5d:64:a3:9c:a6:67:df:3a:9e:fd:08:aa:9c:1a:
57:f9:81:f2:59:a7:22:0a:7e:3d:12:f3:b0:a8:de:45:1c:b8:
4a:95:2e:01:f1:38:86:70:25:05:3f:78:6c:1b:f5:f8:e0:d6:
cb:94:93:5b:77:bb:6c:dc:d9:0d:f4:95:c8:aa:fa:97:94:3e:
96:55:c6:81:8d:4f:2a:27:21:f9:ff:eb:d2:b4:ed:0f:6a:6e:
3a:fd:64:09:51:45:79:3b:bb:61:b2:e0:12:80:3e:3f:43:22:
4c:28:4c:10:e2:aa:83:e4:79:7d:28:28:7f:12:c4:d4:c5:37:
f2:73:5c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:22:02 2024 by rpki-client on console-ams.rpki-client.org