Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xLyRdrGCIz3MQxYVGjK9SshMvW0.roa
File: xLyRdrGCIz3MQxYVGjK9SshMvW0.roa (raw, json)
Hash identifier: WVTLM3rwzt7HY3sux001tyH9Bz3ALr5gpHC5OhcNXSs=
Subject key identifier: C4:BC:91:76:B1:82:23:3D:CC:43:16:15:1A:32:BD:4A:C8:4C:BD:6D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01875637FD02C4EEB06D8A1E5DC2ED5338A5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xLyRdrGCIz3MQxYVGjK9SshMvW0.roa
Signing time: Thu 06 Apr 2023 10:58:42 +0000
ROA not before: Thu 06 Apr 2023 10:58:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212897
IP address blocks: 188.255.202.0/24 maxlen: 24
79.175.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:37:fd:02:c4:ee:b0:6d:8a:1e:5d:c2:ed:53:38:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 6 10:58:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4bc9176b182233dcc4316151a32bd4ac84cbd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:d6:0a:d0:05:61:70:16:a1:55:36:72:be:
a5:71:12:27:cd:94:8a:06:88:08:f1:21:58:bd:5f:
62:22:a2:1e:e1:64:c6:db:73:97:c8:3f:85:b5:0c:
c9:b4:15:4b:70:e5:d4:2b:36:ab:30:7d:68:64:bc:
2e:49:a3:cf:b9:1a:88:20:f3:f6:7c:43:3b:57:dc:
e4:7e:ec:db:c9:a2:88:c5:de:03:8c:33:98:09:78:
52:73:a1:f4:4b:e3:cc:37:c7:fa:4b:1d:34:11:f7:
95:ef:e7:9f:3b:5c:54:b7:66:0e:92:44:1f:e1:46:
73:2f:35:40:87:eb:a1:fe:8a:5c:84:9c:95:17:63:
d5:9e:e7:44:c4:56:3e:64:6e:be:b2:1e:77:91:0b:
3c:17:53:44:18:a1:43:5f:47:f1:1c:65:03:04:1f:
71:ea:75:48:39:70:ee:b3:29:92:3c:10:a4:a9:12:
e2:c1:10:e1:45:74:af:91:3b:9c:2a:60:7f:29:7e:
9b:af:bb:c7:23:90:f9:55:39:1d:42:a0:f4:ea:b7:
e5:98:c9:b6:c9:af:ba:43:f8:80:9b:53:bf:75:16:
f4:8f:ef:35:63:74:cb:f6:62:c2:0c:67:d6:3f:f8:
0c:a0:1f:8a:74:2b:51:91:51:4b:e6:4f:4d:fb:b2:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BC:91:76:B1:82:23:3D:CC:43:16:15:1A:32:BD:4A:C8:4C:BD:6D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xLyRdrGCIz3MQxYVGjK9SshMvW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.71.0/24
188.255.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:25:98:e7:09:38:ad:16:53:5e:d4:58:d1:2c:59:bc:74:5f:
7d:7e:60:ea:4e:eb:b4:99:58:31:90:09:34:5c:19:83:3f:fb:
6f:98:6a:fa:ed:0e:01:fb:e7:5e:a6:6a:5d:f6:73:77:41:86:
6f:eb:b9:06:1f:90:38:fb:13:52:b7:00:79:66:f0:a0:fa:b1:
05:e7:a8:b1:8f:9a:86:5f:71:af:b3:3a:7e:d0:19:c6:b6:e9:
40:89:d6:31:2d:2d:56:e6:8a:02:67:3b:54:26:b4:42:23:1f:
5c:1d:c6:29:bb:6c:73:aa:3c:ac:c5:11:5c:e5:03:46:19:70:
c8:e9:04:2f:65:5b:0e:a9:13:04:f4:cf:2e:db:a8:87:e9:7c:
54:5a:88:72:0d:54:66:f9:35:f3:65:44:16:28:1a:de:f8:1d:
d6:ed:03:43:19:62:75:7b:1d:7e:18:77:07:da:bd:fc:fb:dd:
ac:67:df:8c:50:79:0e:2e:dc:24:ac:bf:47:14:d1:54:ad:3b:
8e:bc:6a:d2:65:d6:1d:6b:81:ca:b5:92:a3:28:e2:6d:e8:f4:
1c:8f:fb:0d:03:fb:3c:4c:34:0c:8e:d0:34:db:e0:b4:39:ce:
07:1f:ed:b1:05:07:03:49:65:de:3a:a8:97:93:a6:0b:f9:99:
d7:ab:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org