Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xjAd1YEYc-aD1oJki1eIK0ZnwfU.roa
File: xjAd1YEYc-aD1oJki1eIK0ZnwfU.roa (raw, json)
Hash identifier: /+ql1yyGcY/BSjaH/kOW+uSouplZhrO/Jmvw441kNKY=
Subject key identifier: C6:30:1D:D5:81:18:73:E6:83:D6:82:64:8B:57:88:2B:46:67:C1:F5
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEED7242F50181C0C810C79F53AED82
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xjAd1YEYc-aD1oJki1eIK0ZnwfU.roa
Signing time: Sun 01 Jan 2023 06:04:52 +0000
ROA not before: Sun 01 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205598
IP address blocks: 188.114.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d7:24:2f:50:18:1c:0c:81:0c:79:f5:3a:ed:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6301dd5811873e683d682648b57882b4667c1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:30:65:41:ef:79:30:01:f6:eb:e4:12:ea:
ea:57:6b:ea:e4:01:88:98:d5:8d:75:39:34:22:c0:
bc:68:fa:35:18:a0:d3:a8:06:70:81:7d:1d:54:eb:
4d:a1:1b:ed:82:0d:07:19:e0:cd:9e:04:fa:8a:56:
8d:14:ff:9c:d6:a5:e0:38:29:b6:bf:51:cc:0d:75:
bb:cc:cc:a0:dd:46:9d:5c:32:f8:4f:f8:d3:a8:4e:
c7:a3:38:96:a8:09:6b:76:bf:8c:a8:17:9c:3c:e1:
68:2e:eb:c4:f9:38:e2:02:ad:59:02:de:73:c0:5c:
e1:9f:28:fc:88:3d:aa:61:1f:45:10:dd:98:99:2f:
9c:0a:fd:d1:28:a8:c7:d8:35:da:cb:8e:69:45:47:
9a:bb:fb:88:ce:9f:bc:5f:5d:d5:58:17:5d:ca:5b:
ad:2b:66:3b:02:88:99:ff:87:1d:47:74:78:47:d9:
1d:97:93:91:ab:61:f1:46:02:91:f5:33:e9:c2:65:
ef:5f:9c:54:b1:14:d4:27:7e:80:f7:f8:cb:4c:38:
e0:0a:d1:19:fe:61:55:94:c4:2a:c7:28:a3:af:0b:
af:6a:d5:c2:1c:c5:a1:ff:30:27:97:6b:35:b8:1e:
f8:13:c1:ff:4d:94:08:f8:76:d7:13:0c:37:38:70:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:1D:D5:81:18:73:E6:83:D6:82:64:8B:57:88:2B:46:67:C1:F5
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xjAd1YEYc-aD1oJki1eIK0ZnwfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8e:80:dd:0d:32:a8:58:56:c8:17:5e:16:4b:2c:bc:ec:08:
0c:cd:f8:70:33:65:31:6a:f4:23:45:d3:39:a9:9d:d0:86:21:
8c:f6:30:11:da:af:9c:9b:f7:6f:f3:60:5d:65:54:76:b3:b6:
d3:59:01:37:87:dc:77:1b:79:46:6f:95:d8:2c:7d:8b:eb:2e:
21:d4:70:b7:f2:31:e5:48:38:7b:15:31:bd:d4:8f:4f:49:01:
10:3a:73:b2:2c:7f:70:35:19:26:63:c4:f4:b2:0e:89:2d:68:
3a:65:d1:e8:f6:9d:fd:3d:3e:56:76:99:9c:12:8c:e4:7c:51:
bb:0d:72:35:9c:34:bf:70:67:5a:61:da:de:bd:ed:93:b7:fa:
14:f4:5f:d8:05:ce:91:5d:9f:ca:57:49:75:0e:02:3a:63:cd:
33:75:a6:82:3c:90:e6:91:22:b9:15:d9:df:c3:9b:19:63:e4:
0c:91:09:dc:3c:4d:5b:6d:39:46:bd:d4:9b:05:b4:4f:bb:ac:
3e:32:74:e2:b9:ad:9e:d3:3c:41:10:c1:96:2a:7e:f8:c5:f6:
92:08:6d:29:e2:3e:ed:7c:42:d2:21:e1:c2:52:d7:d9:16:fa:
c5:34:dc:9d:13:02:8d:b0:8b:d1:77:fe:38:61:f1:8e:84:c8:
ff:3e:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org