Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/TaYEndh_CLZtQr-6oYBe2OC6uqQ.roa
File: TaYEndh_CLZtQr-6oYBe2OC6uqQ.roa (raw, json)
Hash identifier: V/GOwmcP/d1kRrQV9Hznb+kITxrboAtvT1iB2j7vx/4=
Subject key identifier: 4D:A6:04:9D:D8:7F:08:B6:6D:42:BF:BA:A1:80:5E:D8:E0:BA:BA:A4
Certificate issuer: /CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Certificate serial: 0185C3BC5D8204BEC5AA55780E42A3C0970F
Authority key identifier: 37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/TaYEndh_CLZtQr-6oYBe2OC6uqQ.roa
Signing time: Wed 18 Jan 2023 07:16:19 +0000
ROA not before: Wed 18 Jan 2023 07:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207744
IP address blocks: 188.190.192.0/19 maxlen: 19
188.190.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:bc:5d:82:04:be:c5:aa:55:78:0e:42:a3:c0:97:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Validity
Not Before: Jan 18 07:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4da6049dd87f08b66d42bfbaa1805ed8e0babaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:3a:2b:ab:75:8e:08:e0:b2:a8:98:63:ad:
86:3f:3f:b0:bd:0e:52:88:1c:37:8e:8f:d0:16:e3:
91:65:b0:43:45:1a:4c:96:92:3b:6d:53:f5:9c:19:
f3:dc:b3:e4:4a:c9:6b:d1:e1:a7:c4:66:7e:56:a1:
66:ba:e5:4c:ae:97:24:42:f3:61:fe:61:23:56:8a:
45:86:70:f7:41:11:e5:96:26:7a:f5:26:96:c9:fc:
fc:94:f4:99:df:ee:ac:3d:66:57:ed:e6:b7:93:49:
dd:5e:b4:84:c9:fe:3e:6b:c0:28:44:f4:40:2e:48:
12:7c:92:0e:65:35:bd:aa:82:33:83:c2:b8:40:f2:
8e:68:18:f7:c0:68:c5:a7:60:20:a2:f4:0b:ea:eb:
43:2e:b3:0b:28:28:d5:57:22:fc:25:90:ad:ad:9a:
f3:cc:da:cc:8a:44:3c:55:d3:c0:e2:6e:40:a1:45:
48:88:52:fb:85:d5:a0:90:54:1d:63:1a:a0:84:a0:
9f:1a:c9:48:1d:11:10:b5:0e:24:3e:f2:4d:38:93:
ad:a0:b5:48:0f:7e:b4:c3:ef:2d:9e:ed:40:f7:1b:
19:b3:a5:24:ae:4a:62:9d:e3:32:f8:7a:52:b3:e4:
a4:ef:a3:e6:9d:ac:55:4d:fa:c4:49:db:1b:0d:59:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A6:04:9D:D8:7F:08:B6:6D:42:BF:BA:A1:80:5E:D8:E0:BA:BA:A4
X509v3 Authority Key Identifier:
keyid:37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/TaYEndh_CLZtQr-6oYBe2OC6uqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.192.0/19
Signature Algorithm: sha256WithRSAEncryption
84:ac:58:a9:38:d2:83:3b:81:24:69:b7:9d:f5:e1:ea:e8:01:
9f:cc:49:91:e6:d9:df:77:8a:e5:89:cc:6e:f4:df:d6:7b:ae:
1c:a3:47:b7:14:2f:91:bc:e8:8b:87:07:b5:00:a4:e2:e0:63:
bf:f7:76:e3:b3:f0:ce:ec:da:8a:2b:59:54:a8:92:87:31:5e:
4a:6a:6c:12:97:d6:d7:6a:33:ff:92:fd:6b:24:53:29:26:59:
fa:bd:dc:14:fc:dc:8f:24:c2:a2:0d:b0:12:01:e3:ab:96:e0:
67:4e:9c:b5:a4:9c:61:6f:14:0c:a9:c5:b2:f8:62:3c:1d:23:
dd:e8:ad:05:51:0c:2f:45:33:8c:14:f1:d4:01:b2:17:c4:d3:
d0:f8:0d:c4:c1:85:74:9a:2c:0d:8a:5d:0a:2a:cf:56:bd:d8:
29:28:2c:7e:dc:e8:ea:25:21:8c:19:99:61:c0:15:a0:0e:8c:
ed:69:e6:16:47:6d:df:54:dd:d8:37:d2:36:71:25:02:fc:3d:
ae:34:ad:09:ef:09:f5:cf:95:30:6e:c0:11:6c:4a:51:90:82:
78:ae:68:bd:b2:fe:66:a4:11:dc:44:38:f1:cf:37:74:ae:a9:
70:6c:01:d2:e4:6f:c9:5b:20:72:61:90:57:0b:78:c7:00:4b:
30:e4:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:52 2024 by rpki-client on console-ams.rpki-client.org