Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FJ8NvMwktltLfNuClenKWbw5ens.roa
File: FJ8NvMwktltLfNuClenKWbw5ens.roa (raw, json)
Hash identifier: ddJSVW0ym4Irvl49q9vWIsQ0AF5oAKyBdYaiRlBtAhY=
Subject key identifier: 14:9F:0D:BC:CC:24:B6:5B:4B:7C:DB:82:95:E9:CA:59:BC:39:7A:7B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019395A887AB86B2CE845EBBA30149644702
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FJ8NvMwktltLfNuClenKWbw5ens.roa
Signing time: Thu 05 Dec 2024 07:11:10 +0000
ROA not before: Thu 05 Dec 2024 07:11:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207474
IP address blocks: 188.132.166.0/24 maxlen: 24
188.132.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:a8:87:ab:86:b2:ce:84:5e:bb:a3:01:49:64:47:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 5 07:11:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=149f0dbccc24b65b4b7cdb8295e9ca59bc397a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:2d:11:f1:5a:fb:77:2a:cf:20:3e:e1:22:
cd:3d:1a:ff:48:85:1f:67:25:fd:8a:f8:b4:63:24:
a6:88:a3:40:6b:3b:5a:c5:de:21:a5:a3:f9:26:d4:
87:53:eb:02:aa:89:39:ef:c4:56:84:3f:e5:e1:15:
c9:60:ba:a5:e8:49:ab:7c:bf:9b:ec:82:5c:c1:93:
77:49:02:85:89:10:7e:73:e1:4c:6c:02:f3:fb:06:
74:ef:d6:e4:43:75:ea:bb:e7:57:d5:61:c2:a5:c4:
d2:a1:bd:ea:1c:e3:2c:f1:d2:19:7c:2b:15:55:67:
af:0a:14:81:f2:c9:49:41:29:c5:2a:5b:20:85:42:
87:5a:b4:d0:76:e7:36:7a:b2:ce:62:27:36:a8:75:
65:02:ef:c7:72:21:ae:14:68:dd:a3:ab:0b:6d:1b:
c5:d3:ad:2d:62:0f:43:ec:0d:f3:82:75:06:01:41:
39:19:28:ac:31:d1:86:58:ae:e9:8c:2a:e9:20:70:
9f:d3:79:68:5c:44:55:cc:97:88:64:f2:88:0e:c6:
fb:73:6a:98:10:55:de:da:cc:05:af:3f:11:a0:14:
8e:30:28:cc:06:01:3d:80:90:fd:e8:28:09:6b:e9:
2b:e9:5a:9c:38:0a:a3:16:65:37:01:4f:5b:c1:ae:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9F:0D:BC:CC:24:B6:5B:4B:7C:DB:82:95:E9:CA:59:BC:39:7A:7B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FJ8NvMwktltLfNuClenKWbw5ens.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.166.0/23
Signature Algorithm: sha256WithRSAEncryption
31:eb:6a:58:17:90:3f:60:4b:3e:cb:c3:b5:bd:a6:57:47:a0:
58:ff:af:28:7e:19:30:84:d4:98:0d:66:9b:bf:d6:b8:bd:46:
11:db:7b:62:a1:22:0c:e9:cb:7e:0f:e9:47:04:ce:66:86:9e:
ab:88:0f:ef:38:1a:81:48:46:8d:13:14:80:2c:59:fd:a4:79:
84:60:4a:6a:d0:bf:b5:a2:12:48:62:4b:00:a8:31:75:40:3e:
74:59:64:73:4f:6d:b4:95:79:43:9b:96:08:57:fe:2b:61:cc:
da:51:dd:5c:31:eb:0c:7f:58:88:11:cf:45:96:0c:c8:bb:97:
52:5e:cf:9e:08:70:ac:40:dc:82:72:6b:30:ef:e7:d9:cf:00:
38:49:3b:4a:5f:79:df:db:34:1a:ff:49:f3:d2:8f:03:2a:a3:
24:55:83:d2:fe:ab:2a:33:4a:64:54:26:b6:68:3a:59:56:ce:
ce:c6:1a:68:0a:81:79:23:6f:f9:71:3a:45:7e:32:6c:7a:35:
62:d8:73:66:f2:65:dc:2f:f4:85:a5:ea:72:d8:3c:ab:24:23:
7f:aa:88:15:10:01:66:21:82:0e:66:fd:49:87:57:5c:37:2a:
47:5d:ad:e0:f1:11:2b:e0:8e:68:64:0d:0b:fa:bf:16:9c:ba:
ef:17:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:22:29 2025 by rpki-client