Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/FNqORRpUK0EaH4MpxQ5olvr8bnw.roa
File: FNqORRpUK0EaH4MpxQ5olvr8bnw.roa (raw, json)
Hash identifier: Jpy33qnRooyYpTlBOes22czdfiJAugxJz/4hJjfxuLE=
Subject key identifier: 14:DA:8E:45:1A:54:2B:41:1A:1F:83:29:C5:0E:68:96:FA:FC:6E:7C
Certificate issuer: /CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Certificate serial: 0188CE8331C7D5FFEB41B62F79DEF6332D3F
Authority key identifier: 36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/FNqORRpUK0EaH4MpxQ5olvr8bnw.roa
Signing time: Sun 18 Jun 2023 12:38:04 +0000
ROA not before: Sun 18 Jun 2023 12:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52143
IP address blocks: 188.94.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ce:83:31:c7:d5:ff:eb:41:b6:2f:79:de:f6:33:2d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Validity
Not Before: Jun 18 12:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14da8e451a542b411a1f8329c50e6896fafc6e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:38:f6:5f:6b:c7:47:56:32:0c:3c:73:df:
38:af:96:e0:a1:4e:53:65:b9:4e:ce:82:ed:2a:95:
14:c5:3b:67:4c:f4:11:58:33:0f:42:21:9d:9c:99:
cd:f9:80:09:ed:2a:15:47:7a:09:cb:6c:99:66:e8:
3c:b4:3b:bc:4f:f2:97:b2:3a:14:9f:2e:e3:08:56:
70:91:6e:cc:47:7a:de:11:b3:2b:a6:1c:d9:49:20:
e6:06:0f:ff:d6:88:58:ab:d1:4b:53:18:32:bb:bb:
2e:b4:ac:a3:87:64:3d:6a:47:b3:e9:f1:52:84:66:
41:eb:90:6f:2e:07:29:59:45:2c:02:43:15:62:5a:
5f:d3:ee:44:b2:ea:9c:90:57:00:40:b4:99:b9:16:
4c:41:76:ac:e5:af:7f:bc:ce:2f:21:b6:43:96:60:
4a:21:3d:ed:a4:b9:55:89:d9:78:e8:fd:ed:36:27:
fb:9c:bf:21:d4:5f:4b:ff:3f:8d:6d:42:54:b3:84:
10:a1:37:ef:0f:68:42:e9:2a:68:ba:61:cf:26:b6:
35:6e:db:0a:61:ad:91:f6:7a:3f:b5:ce:48:dd:89:
5e:bd:24:a6:49:80:01:7a:b5:c3:fd:c8:13:d4:08:
e4:b4:4c:a8:2c:c1:6a:5d:99:89:ba:e6:7b:b1:0e:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DA:8E:45:1A:54:2B:41:1A:1F:83:29:C5:0E:68:96:FA:FC:6E:7C
X509v3 Authority Key Identifier:
keyid:36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/FNqORRpUK0EaH4MpxQ5olvr8bnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:b4:42:1a:05:f1:fe:9c:93:04:90:01:60:02:6f:de:70:d2:
ac:98:03:33:94:23:f3:21:b2:e4:2f:3b:fb:7c:00:76:45:86:
d0:68:bd:5e:21:50:91:17:e5:d4:f8:c6:4a:9d:6b:95:86:ee:
06:82:6c:d1:1f:75:7a:7a:97:7c:21:84:6e:37:55:f6:26:24:
08:0f:36:45:37:03:6d:54:b9:ec:d3:3c:57:9e:20:dc:e5:40:
90:64:90:3c:5b:02:c2:d7:12:fb:f5:ab:ce:49:a3:3a:d1:77:
65:58:20:53:6c:1b:46:81:96:f2:fa:2f:54:b5:46:11:a7:89:
e1:13:65:67:52:ab:43:a7:5b:c2:55:33:c4:bb:cb:ea:bf:d8:
80:07:61:19:6b:f7:70:ae:ac:03:ea:d3:98:67:26:3a:0e:44:
8b:ad:55:a2:03:c1:60:fd:cb:93:1c:6d:b8:3c:60:fe:c0:ac:
0d:4f:a0:89:70:11:ef:b7:ec:7e:24:d6:04:f5:dd:da:d0:07:
59:24:78:4b:79:43:c1:e5:c7:64:e4:3c:c6:f6:b2:58:d3:7b:
15:66:54:ee:d2:0c:ff:97:a8:1f:3e:98:2a:ed:27:e5:e3:37:
02:17:70:b8:46:bd:d4:9a:8d:5e:df:c4:3f:4a:18:88:b2:49:
d5:20:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org