Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/xizohgehAqBE3MIhbu4fqOn3_ww.roa
File: xizohgehAqBE3MIhbu4fqOn3_ww.roa (raw, json)
Hash identifier: XALHPN7oMPxlizHuO9PCTbuRVdVIwZETc6btG5qUkM8=
Subject key identifier: C6:2C:E8:86:07:A1:02:A0:44:DC:C2:21:6E:EE:1F:A8:E9:F7:FF:0C
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01903A85062EF860427918E4DC1D87F0EF00
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/xizohgehAqBE3MIhbu4fqOn3_ww.roa
Signing time: Fri 21 Jun 2024 11:18:34 +0000
ROA not before: Fri 21 Jun 2024 11:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.244.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 05:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:85:06:2e:f8:60:42:79:18:e4:dc:1d:87:f0:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 21 11:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c62ce88607a102a044dcc2216eee1fa8e9f7ff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:f6:71:a4:e8:a7:5b:ae:01:8e:ad:0e:48:
7d:e8:91:61:15:1e:d7:ba:6e:7f:b8:8c:c1:e0:a6:
80:92:27:6b:0b:dc:a9:7a:56:c4:f1:12:63:60:72:
8e:39:69:6d:50:40:97:2c:3b:22:c6:30:df:46:1a:
74:f4:bf:f2:48:f6:c5:6e:cd:0a:30:96:91:70:d3:
20:4d:e3:35:a2:34:d3:c6:c0:f2:48:84:17:30:6c:
da:fb:e8:dd:1d:bd:ed:53:04:c2:49:98:ea:fe:7a:
92:9e:a1:2a:e6:ba:53:8a:e2:cb:7d:91:68:94:4d:
61:ca:4e:13:2d:60:dc:ff:a1:d9:ad:8c:70:11:84:
b7:dd:8e:e4:75:d0:54:51:e4:4d:46:40:03:41:8a:
83:ea:be:13:b2:7e:46:b8:c0:d1:46:26:e2:50:ba:
7c:61:f6:3a:53:87:62:29:e9:81:52:4b:8e:38:77:
b4:d9:ad:14:ab:c2:ff:0c:c7:a7:49:a0:63:70:02:
12:b0:72:50:b4:a6:0f:3b:1b:c4:bc:ca:3d:18:96:
be:92:a9:eb:92:3f:76:2c:b3:ab:7e:39:cb:06:10:
2c:fc:4a:7f:79:9c:89:2a:4b:3f:d6:ff:3c:89:00:
a5:b3:3b:f1:67:19:e1:dc:a9:b0:a7:c9:1e:c9:79:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:E8:86:07:A1:02:A0:44:DC:C2:21:6E:EE:1F:A8:E9:F7:FF:0C
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/xizohgehAqBE3MIhbu4fqOn3_ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.123.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f3:b0:35:00:af:a0:41:5f:73:5b:e4:0a:93:1e:0b:8b:7f:
f5:81:69:7c:cb:9f:0d:b5:94:cb:3a:5d:33:f6:a1:ef:6c:c8:
b8:47:7f:cd:ea:4f:ff:58:08:5f:d5:22:6a:15:93:c9:da:47:
d9:82:ce:e7:44:66:64:ee:28:75:78:53:36:50:0d:2b:fb:c8:
97:6e:7f:a0:d2:3b:27:be:3d:97:ef:a6:44:9f:b9:8c:37:b4:
a0:10:cf:3a:cd:ba:1a:35:df:2a:35:35:a5:36:5e:b6:08:8f:
de:cf:96:89:2a:26:1c:29:b0:d4:e5:66:95:f9:86:10:39:38:
1e:a3:2a:93:0d:9f:99:d5:e1:fe:23:ce:52:6a:fd:77:40:01:
14:12:2b:f9:76:9e:3b:0b:7a:6a:55:93:a5:32:9f:f8:29:7f:
7c:e6:99:ea:95:96:1c:ed:23:66:1b:ec:cb:ce:1a:93:8b:fc:
da:85:b4:61:3b:a0:e7:3c:e3:91:76:a3:5f:3b:bb:d9:ef:ca:
70:c9:16:bf:bc:91:4e:98:83:b1:0f:60:9b:89:45:8b:05:a3:
0f:d5:aa:1c:54:13:01:4f:d4:31:b7:7e:96:27:61:6a:e3:83:
4c:39:b1:a8:44:0c:97:af:8f:bb:24:54:22:cc:1d:15:5e:a0:
bb:15:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 06:41:13 2024 by rpki-client on console-fra.rpki-client.org