Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/DtmD0ixZfCgqOlcLf3HyX-1SozU.roa
File: DtmD0ixZfCgqOlcLf3HyX-1SozU.roa (raw, json)
Hash identifier: 2Y9L6Wlvmza/m0XAhkFFAg0GDNcux7jWuiP4Q36THx4=
Subject key identifier: 0E:D9:83:D2:2C:59:7C:28:2A:3A:57:0B:7F:71:F2:5F:ED:52:A3:35
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 018A652F381B6EE1B13A74231804E0C6237C
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/DtmD0ixZfCgqOlcLf3HyX-1SozU.roa
Signing time: Tue 05 Sep 2023 11:51:47 +0000
ROA not before: Tue 05 Sep 2023 11:51:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 188.208.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 14 Sep 2023 14:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:2f:38:1b:6e:e1:b1:3a:74:23:18:04:e0:c6:23:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Sep 5 11:51:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ed983d22c597c282a3a570b7f71f25fed52a335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:b1:29:f9:30:07:56:52:f0:9b:c3:c8:06:
d5:d7:18:50:d7:51:25:a4:5b:46:de:10:e0:89:22:
5e:50:91:d6:7d:67:e4:a1:4f:8a:75:c0:40:0e:48:
99:27:97:fa:ae:8c:fd:b3:7f:80:4d:24:a0:6e:b1:
bb:7b:1e:4a:59:23:b2:e7:b2:2b:93:69:ee:d1:3a:
4b:af:ec:af:da:0a:c1:cc:26:f6:f2:e3:c9:4e:6e:
16:00:d4:b1:f9:34:43:22:2a:1e:1e:b5:52:a5:0e:
f2:1b:67:bb:9c:82:f2:1e:45:f0:9d:e9:93:db:a4:
60:1e:93:f0:36:13:8a:f9:11:65:32:7d:66:33:a8:
5e:c9:27:d7:6e:bf:bc:ec:16:14:a7:8d:3d:93:1e:
a1:5b:8a:26:ae:9f:c0:59:d1:30:97:16:65:b2:10:
4b:9f:1a:ef:24:ae:82:f4:4e:b9:33:f5:94:19:b1:
3a:08:12:42:6f:39:68:1a:dd:b2:7b:df:61:5d:88:
ea:bd:b9:a2:74:d5:8c:52:ae:14:8a:9c:02:8b:16:
d7:13:8f:1d:ed:f4:0f:cf:b7:74:42:05:35:f5:f4:
13:cd:0f:70:cc:18:ec:0f:ca:a1:df:ce:21:b3:85:
89:7a:5e:5f:56:46:2a:65:6d:45:be:fc:36:e1:4f:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D9:83:D2:2C:59:7C:28:2A:3A:57:0B:7F:71:F2:5F:ED:52:A3:35
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/DtmD0ixZfCgqOlcLf3HyX-1SozU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.196.0/23
Signature Algorithm: sha256WithRSAEncryption
67:05:d7:7a:85:2e:05:f6:5b:35:51:43:44:47:e5:65:25:14:
bc:fd:08:c2:83:d8:4d:ff:d9:40:ae:1d:08:bd:47:86:16:c1:
da:74:99:9d:ba:0e:f2:79:c5:d1:2e:d4:c3:7a:de:c9:75:7d:
3a:80:6d:91:6c:f5:2b:33:e8:99:00:aa:c7:1a:f2:14:bb:ca:
66:35:8d:c6:06:f1:66:f9:79:6d:f2:b1:27:72:81:0b:bd:20:
fa:34:74:ff:c3:c8:d8:4b:f5:5a:82:4d:43:88:38:df:09:e3:
4c:73:fe:b3:d7:1c:98:d9:a1:3c:35:68:96:ba:86:fd:f0:e2:
58:24:c0:74:d2:6f:89:44:e6:b0:81:9c:12:f6:52:a2:2f:aa:
2f:1a:df:05:7a:04:05:8b:a1:60:2f:e3:d9:63:ff:62:a0:e2:
0b:1f:ee:8d:57:78:ab:98:de:a4:b9:2e:65:5d:dd:85:c5:63:
be:75:db:e8:2f:1d:37:ac:88:29:f4:34:c0:8c:69:0b:7f:fb:
29:4d:16:ca:4e:b7:cc:ae:bc:57:64:1c:ab:94:6a:53:02:7b:
60:c3:e9:1a:49:c6:5a:d3:f3:6d:ff:b5:dd:8e:f7:a1:df:ce:
fb:f8:f0:76:9b:15:89:99:ac:c4:1d:75:c7:5c:c6:9e:d4:d5:
3c:86:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org