Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/qm1bHODq0zd9y18Jg7jgvP5Qxdw.roa
File: qm1bHODq0zd9y18Jg7jgvP5Qxdw.roa (raw, json)
Hash identifier: UHnl1KDHI9qBxZNQtIf9xRLKToMhPELmtRGJprWFcEM=
Subject key identifier: AA:6D:5B:1C:E0:EA:D3:37:7D:CB:5F:09:83:B8:E0:BC:FE:50:C5:DC
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018AEF25B317C317FD0BBB882F9EE0793166
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/qm1bHODq0zd9y18Jg7jgvP5Qxdw.roa
Signing time: Mon 02 Oct 2023 06:48:59 +0000
ROA not before: Mon 02 Oct 2023 06:48:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43431
IP address blocks: 188.244.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:25:b3:17:c3:17:fd:0b:bb:88:2f:9e:e0:79:31:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Oct 2 06:48:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa6d5b1ce0ead3377dcb5f0983b8e0bcfe50c5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:a5:8e:95:f4:61:ef:6d:c0:7c:d1:e6:31:
d9:a5:18:b0:f9:67:42:5b:eb:40:00:31:95:9c:5f:
5c:f8:87:e7:2d:78:b2:28:ba:17:d3:80:66:59:f8:
70:23:9d:99:8d:30:ad:41:01:b0:a4:60:db:ce:b3:
2e:6b:3c:1e:7a:c6:cc:4d:e4:c6:9a:fe:92:8d:aa:
9c:5d:48:14:35:36:b3:b3:bc:2d:97:5a:a5:74:a6:
5d:11:17:41:c3:0a:b1:ae:a9:99:9a:c3:86:e9:e2:
03:05:36:af:67:65:d0:e6:e6:c6:42:25:6c:2b:5a:
e8:dc:5e:70:23:47:46:8a:23:54:1c:a8:b9:83:b8:
a9:a5:91:48:fa:b4:76:03:94:d8:f2:4a:1c:9e:82:
3b:a6:16:ae:6c:39:ba:66:3d:f6:5f:77:0c:87:f8:
4f:47:ba:3f:d0:59:2c:20:ca:18:f1:04:a9:96:70:
a0:d4:e5:a4:b8:62:10:99:de:8e:89:3a:ee:df:bd:
d0:2a:25:c8:59:76:ad:2c:ad:2e:19:2e:87:99:84:
89:8e:78:24:9f:01:9a:71:df:52:55:78:9c:18:19:
60:f5:d5:a7:3d:54:dc:e6:72:71:cd:e1:53:e8:2e:
16:ac:45:19:03:f4:b7:a7:45:ee:0c:40:01:b6:be:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6D:5B:1C:E0:EA:D3:37:7D:CB:5F:09:83:B8:E0:BC:FE:50:C5:DC
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/qm1bHODq0zd9y18Jg7jgvP5Qxdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c7:7c:ce:48:c1:c1:be:e1:d2:a0:bd:19:51:43:7d:8b:38:
d7:79:a9:53:11:95:86:96:06:34:a6:2d:b6:dc:11:b9:d1:f7:
e4:1e:c8:91:71:18:02:62:fa:90:33:8c:a1:6e:e0:70:1d:c2:
94:42:da:2a:63:75:05:89:5d:49:fd:05:ef:31:4f:b9:c6:61:
4e:7d:9a:6d:bf:fb:10:d1:27:33:ed:f8:1d:be:8b:2a:86:64:
0b:b5:a2:24:2f:de:7a:60:50:7b:d3:5b:55:6c:a5:3a:14:f9:
fb:9d:84:75:4a:a9:1e:97:5b:fd:0c:c7:c9:d3:0a:92:de:c1:
b9:fc:3d:11:4c:67:44:ca:1a:6b:71:c7:eb:98:68:5d:58:8a:
4b:61:38:b9:1d:d7:4e:60:2b:25:21:9e:e0:8d:d9:ca:f1:04:
c2:12:2c:50:b4:85:f4:4a:fb:cd:37:ae:3c:89:98:c6:71:4c:
e7:5d:79:f4:a5:d9:5a:c9:58:1b:fc:eb:d5:98:7f:eb:3f:80:
35:e3:87:df:a7:78:c0:36:30:cb:13:62:30:7e:29:f0:bf:13:
10:4b:1e:59:58:fa:1b:8b:f9:c3:0e:66:eb:77:09:c4:a5:25:
18:4a:d3:ee:8d:82:4d:d1:2d:48:ea:ab:7c:42:86:84:65:b4:
0e:87:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:01 2024 by rpki-client on console-ams.rpki-client.org