Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rLjCE6mNXQNoZ814-GH12u7fh24.roa
File: rLjCE6mNXQNoZ814-GH12u7fh24.roa (raw, json)
Hash identifier: AOelhxIIcRbeOos0HamFXt28MYoXbK/XZ89akWeOm5g=
Subject key identifier: AC:B8:C2:13:A9:8D:5D:03:68:67:CD:78:F8:61:F5:DA:EE:DF:87:6E
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01856F022902AE686307F2468E639CC8C499
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rLjCE6mNXQNoZ814-GH12u7fh24.roa
Signing time: Sun 01 Jan 2023 20:24:50 +0000
ROA not before: Sun 01 Jan 2023 20:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 188.240.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jan 2023 00:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:29:02:ae:68:63:07:f2:46:8e:63:9c:c8:c4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 20:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acb8c213a98d5d036867cd78f861f5daeedf876e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1d:c6:6c:05:d2:ed:6f:97:b1:c9:28:43:49:
51:13:f2:81:4b:a5:e4:b1:51:18:f3:9d:38:36:f9:
8c:58:3d:d8:36:7b:0c:57:d1:a4:55:52:33:d7:f5:
8c:4d:0b:6d:e4:55:b8:b6:48:fe:2d:63:1e:19:0f:
3d:52:02:9d:7d:b7:67:c0:bf:53:8f:0d:7e:87:63:
c4:df:7b:96:86:3c:db:4e:31:5c:a7:16:dc:cb:ef:
df:61:f1:79:32:8b:f9:c4:f3:03:d4:2d:7c:1b:3c:
02:28:97:ca:af:38:e3:58:a1:55:1f:91:7e:b9:80:
f0:dc:91:65:6a:04:54:c5:c3:e2:88:0b:ea:b9:a9:
1e:e3:6d:46:4f:77:d5:19:67:9b:55:c0:ee:2c:34:
b3:eb:ff:5d:d6:50:32:c4:ad:15:aa:3f:28:e6:ca:
20:8d:35:a4:e9:22:6a:c2:6e:98:42:d6:40:7a:fc:
5b:e5:01:20:08:d2:33:3f:e5:48:86:6b:7d:b4:ea:
88:b1:35:7a:dc:a2:74:a6:ab:fb:18:4e:61:c2:ba:
73:77:81:a9:43:b0:e2:ff:6e:98:66:cb:e5:51:c3:
d1:bf:ca:c6:f8:1c:f5:c6:04:b7:49:21:9e:bd:04:
01:95:38:3d:c0:14:1c:64:b2:1f:11:54:c6:1a:c6:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:C2:13:A9:8D:5D:03:68:67:CD:78:F8:61:F5:DA:EE:DF:87:6E
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rLjCE6mNXQNoZ814-GH12u7fh24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9c:d3:32:d1:57:4b:bd:d2:be:2d:f8:50:1f:c1:65:2a:df:
fb:f0:fc:24:3a:2c:aa:88:a0:d8:2c:90:b2:36:d5:65:31:20:
0f:80:62:6d:00:f2:47:42:95:98:50:87:74:57:e3:20:7c:d1:
f1:72:5c:72:1d:01:51:19:51:d7:46:6c:05:b3:1f:d3:e9:ac:
83:19:5a:c3:81:1c:3e:d1:c4:00:92:7f:48:e0:17:a2:03:cb:
83:c6:8c:1c:f3:49:8f:52:d5:d6:37:4e:42:59:f1:7f:32:65:
d4:63:7f:a4:bb:05:61:3c:df:96:50:f6:2b:f5:ac:55:82:04:
f0:ae:52:48:03:d4:7f:23:6b:ea:5c:ad:bc:17:16:93:cb:0f:
d3:fe:10:b1:4f:a7:c7:70:27:95:44:3e:d3:e5:c0:5a:8b:5e:
57:43:ef:0f:b7:17:f5:82:85:84:02:0f:18:a1:35:79:92:83:
15:c6:43:ac:f1:b2:60:76:4d:4c:e4:71:fc:23:6c:51:49:49:
97:4c:5d:0a:27:a9:48:c4:cc:79:1c:9a:29:ed:dd:92:e8:fd:
38:43:54:9b:0f:14:c5:a8:5c:f8:24:77:b2:44:b9:58:8c:fb:
f8:31:05:c4:e9:a4:a5:f4:59:41:6a:41:c9:47:67:b4:ad:b1:
d5:d5:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:49 2024 by rpki-client on console-ams.rpki-client.org