Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-zbIGO37iZrn4Md7hWxEhfTswJs.roa
File: 1-zbIGO37iZrn4Md7hWxEhfTswJs.roa (raw, json)
Hash identifier: 7VOc4T+adbEyMlsJCcMM4vg01x6WkyCf/ZxI5ZH+4YA=
Subject key identifier: FB:36:C8:18:ED:FB:89:9A:E7:E0:C7:7B:85:6C:44:85:F4:EC:C0:9B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019499882F476882BEABF8344B93963CE0E5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-zbIGO37iZrn4Md7hWxEhfTswJs.roa
Signing time: Fri 24 Jan 2025 18:17:06 +0000
ROA not before: Fri 24 Jan 2025 18:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 188.132.188.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.190.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 10:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:88:2f:47:68:82:be:ab:f8:34:4b:93:96:3c:e0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 24 18:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb36c818edfb899ae7e0c77b856c4485f4ecc09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:70:84:e7:59:45:2b:4d:57:34:4a:7c:00:
f5:11:29:c6:6d:23:3f:e0:5a:e7:11:7e:be:1d:95:
f8:d3:53:e5:b0:4a:d8:b2:05:94:17:6f:a1:b9:98:
7b:60:5a:79:a3:bc:b5:58:16:ca:ef:83:45:7d:f2:
23:a1:ce:45:7c:91:65:b6:73:b4:e3:07:38:b4:40:
45:9e:91:ca:3d:43:77:91:b3:fe:87:2b:10:3f:e9:
2b:ee:1d:6d:57:f5:4b:7a:08:fb:3e:c3:f0:16:88:
5f:32:a9:8a:cc:fc:de:c7:22:8b:f2:39:e4:1c:ee:
53:41:86:d5:25:7b:3c:90:b3:51:df:ac:12:fd:bb:
de:0e:97:9b:e1:18:d1:5e:c9:e2:cc:df:64:35:b0:
8d:b7:36:8f:8a:31:a3:8d:a1:0b:98:d4:bf:23:4c:
91:7c:52:d9:41:a4:1f:d0:db:f0:f9:91:53:a5:47:
c4:96:3d:3e:94:a2:62:58:9d:c9:e2:a2:90:e3:3d:
62:06:4e:5a:a1:05:5c:95:31:7c:16:95:02:33:6c:
07:8c:df:e1:91:13:6b:71:27:ec:cc:cf:6e:df:89:
60:1b:b1:8b:af:bc:64:98:15:47:84:84:41:be:cf:
77:75:ea:9e:dc:1b:46:b0:d0:b0:03:9c:65:75:25:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:36:C8:18:ED:FB:89:9A:E7:E0:C7:7B:85:6C:44:85:F4:EC:C0:9B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-zbIGO37iZrn4Md7hWxEhfTswJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.188.0/22
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
72:a8:5d:70:e2:31:f9:b6:26:dc:4b:5d:dd:2a:80:2e:c2:a2:
e3:07:b1:f6:80:8c:35:3d:ac:51:d3:01:6a:a5:22:6c:c2:df:
33:5a:e9:39:69:c8:cb:04:e1:ed:59:39:85:46:c3:83:5e:1c:
1f:3d:b6:22:c7:c5:85:62:fc:8d:c6:dd:0b:ef:ad:b9:a1:d4:
7c:b0:7a:55:ca:c6:59:33:a2:3b:6c:cb:ce:18:87:61:c3:29:
d4:34:f7:f7:ce:e9:09:de:a1:c5:dd:cc:ad:d4:a6:99:e2:63:
16:ed:2f:98:07:90:14:69:86:b7:8d:38:d5:79:97:28:b4:9a:
7d:17:bc:bb:5a:ed:7b:45:c3:4f:7d:83:9b:f6:9b:5b:02:e6:
16:50:aa:99:0d:eb:e0:33:c8:99:90:7d:e3:f8:39:59:57:4f:
70:97:ad:49:55:76:0d:0d:a4:df:d4:a4:20:df:32:06:28:51:
3d:0e:d8:f8:3b:7b:12:cc:94:5f:48:b0:a0:b8:5b:66:dc:34:
2a:15:19:8b:6a:e8:64:68:ec:7c:81:12:2f:e7:a4:a7:db:30:
20:2a:45:a0:cf:55:f9:ed:cf:a4:ee:4a:cb:69:7a:ea:91:4d:
e9:8b:fd:c1:e4:31:6b:7d:a3:bd:cf:17:a4:25:7b:07:b0:d9:
b5:ee:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:56 2025 by rpki-client