Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/SDdHBzpHRGZR9pDAg6WR4Pb2lbA.roa
File: SDdHBzpHRGZR9pDAg6WR4Pb2lbA.roa (raw, json)
Hash identifier: KFpP5noGTh+DmAITOkL1UqPvKiEW2UrbpKADJ3Q+J20=
Subject key identifier: 48:37:47:07:3A:47:44:66:51:F6:90:C0:83:A5:91:E0:F6:F6:95:B0
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 01857195487618EE369D1F587DDC6DD7D540
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/SDdHBzpHRGZR9pDAg6WR4Pb2lbA.roa
Signing time: Mon 02 Jan 2023 08:24:46 +0000
ROA not before: Mon 02 Jan 2023 08:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202220
IP address blocks: 188.123.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:48:76:18:ee:36:9d:1f:58:7d:dc:6d:d7:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jan 2 08:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=483747073a47446651f690c083a591e0f6f695b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:a1:26:72:91:cc:a6:53:28:c3:3c:c1:32:
01:42:1a:df:fe:f5:0a:5c:b7:4f:c7:05:85:fb:02:
30:1f:94:0f:46:be:af:7d:9b:88:96:23:e2:61:b6:
08:9e:99:61:ef:2d:84:ca:ca:0a:e8:2b:19:9c:cd:
a1:2b:3c:6a:f7:72:6d:d4:7d:f3:d3:47:c0:47:0b:
d3:72:ee:25:38:a3:fe:17:e6:37:e0:fc:cb:f8:5c:
0f:5a:e4:bf:25:66:2b:4f:09:ed:91:82:50:d9:b4:
3c:d7:d5:3c:b9:8d:74:70:bf:f2:82:0a:fd:fe:2e:
2a:97:f7:1f:a8:53:de:16:69:d2:21:34:d8:79:77:
b1:5d:71:e6:c1:a1:3e:fb:07:8b:80:16:47:98:2b:
6c:7c:91:ad:7f:1b:94:2c:bc:17:36:4d:3a:6c:0f:
ce:f8:ec:3d:15:63:2e:84:c7:79:b4:8c:28:7b:7a:
ff:6d:c2:ac:97:bf:d5:57:57:b4:5a:ea:87:10:67:
6d:ac:5e:d1:b3:15:b1:fa:1e:7d:da:ac:a0:bf:14:
af:f1:ee:9f:df:07:5c:1f:44:7d:b1:90:1f:e2:5d:
0f:bd:1e:d3:c8:76:1f:7c:cd:55:88:88:f3:64:e5:
ea:41:3f:c1:74:de:b3:4e:97:da:8c:7f:5e:bc:69:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:37:47:07:3A:47:44:66:51:F6:90:C0:83:A5:91:E0:F6:F6:95:B0
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/SDdHBzpHRGZR9pDAg6WR4Pb2lbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.123.215.0/24
Signature Algorithm: sha256WithRSAEncryption
08:10:f5:a9:6b:db:ea:dc:7c:c1:fd:c8:e0:93:bc:e6:bf:23:
c0:b7:a8:10:1a:50:da:48:7e:e0:33:b8:68:54:4c:5c:e0:7f:
ce:47:69:10:7e:5f:67:24:6f:fa:48:12:0f:7f:8d:15:db:03:
97:d7:7f:be:8b:1a:09:b7:6d:43:64:45:0d:6d:ef:74:56:9b:
ff:c4:8f:ee:23:20:04:22:8e:2b:82:69:7d:36:23:31:30:c5:
90:57:d4:bd:89:62:7b:3f:8c:d3:34:59:ef:ee:80:f1:1f:0a:
a0:dd:8d:bc:5b:58:c1:12:5d:4a:a3:34:cb:4f:a0:35:94:08:
3e:de:94:ab:c2:f4:54:24:65:cd:5b:56:e1:0d:75:5f:36:c4:
14:9f:cb:b7:b9:01:45:a0:41:bd:ed:74:59:58:5f:71:6b:6f:
3e:dc:45:68:81:a1:3d:6f:9f:66:7e:38:b5:30:10:9a:c1:6c:
8f:a6:62:1c:5b:71:7a:8a:ef:1e:7f:ad:0a:a5:f4:5d:44:b2:
4b:c1:65:23:9b:06:66:48:56:df:7f:1c:35:1e:f1:dc:4d:23:
8c:bd:3a:dd:14:ae:11:34:09:13:b6:a5:9c:37:70:f2:b4:3e:
6e:79:1f:b8:60:45:94:a2:d0:19:c2:0f:15:f6:7c:f0:c6:d2:
71:cd:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:51 2024 by rpki-client on console-ams.rpki-client.org