Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xfY3QOF7JlplDOieNIbIMhx2BjA.roa
File: xfY3QOF7JlplDOieNIbIMhx2BjA.roa (raw, json)
Hash identifier: /EkwpIWG00AKm+wZWd8TQFLaZoBLxv9QSE8kbdRYYo4=
Subject key identifier: C5:F6:37:40:E1:7B:26:5A:65:0C:E8:9E:34:86:C8:32:1C:76:06:30
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEED95385A1CCE8367D02EDA658E0B7
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xfY3QOF7JlplDOieNIbIMhx2BjA.roa
Signing time: Sun 01 Jan 2023 06:04:53 +0000
ROA not before: Sun 01 Jan 2023 06:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206118
IP address blocks: 188.114.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d9:53:85:a1:cc:e8:36:7d:02:ed:a6:58:e0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5f63740e17b265a650ce89e3486c8321c760630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:a6:ef:3d:57:e7:6f:a3:db:79:ab:0b:fb:
d6:c6:a4:c9:36:00:3a:ee:6d:e2:29:21:2d:c4:f7:
0f:00:00:46:f4:8c:7c:06:a3:a1:d4:50:b0:f7:3d:
46:e4:1b:99:a4:8f:78:92:70:91:2c:5f:4b:bb:57:
3e:80:55:87:77:b5:8b:d3:96:f3:73:5e:5e:0a:82:
c0:61:b9:a1:0d:21:76:4b:f7:61:d6:53:5a:3f:84:
5e:64:af:fd:71:53:4f:97:c6:ab:83:59:f1:cf:a1:
44:b9:bd:4c:ad:a6:d0:25:2b:83:3a:ff:20:36:07:
3d:4b:51:a3:9e:17:66:96:ab:a8:43:08:9b:81:8d:
87:bf:34:20:d9:45:96:49:02:87:dd:99:2c:ef:7e:
28:3d:20:4d:87:6a:07:60:35:ea:2e:ef:80:d3:67:
6b:56:52:25:72:e6:93:9e:a0:39:e1:3e:93:90:8c:
17:6b:c6:56:f5:df:2d:bc:d7:46:86:16:1a:26:22:
3c:b6:a4:7f:48:22:12:01:47:c3:a2:c9:7e:4d:11:
02:6c:dd:d6:98:bb:b2:bb:fa:70:85:ad:e5:88:07:
81:77:8d:4d:3e:73:35:9f:9c:ee:bd:21:11:b7:c8:
38:61:3b:1e:87:33:01:9c:62:08:90:e7:85:38:a1:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F6:37:40:E1:7B:26:5A:65:0C:E8:9E:34:86:C8:32:1C:76:06:30
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xfY3QOF7JlplDOieNIbIMhx2BjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.69.0/24
Signature Algorithm: sha256WithRSAEncryption
93:46:c7:50:a3:e4:d8:fd:b0:68:ed:5d:3c:a8:51:2f:67:34:
30:e9:2e:58:17:2c:f5:17:83:44:68:f1:ae:28:d2:11:47:11:
34:e8:0c:7b:08:2d:ce:22:01:b4:bf:9c:40:53:b5:34:8c:b9:
3d:93:69:91:e7:71:95:2a:27:0e:a8:88:84:7c:0f:45:15:45:
04:6f:de:da:70:74:a8:d4:91:8e:83:c8:d3:3c:c7:1f:67:9a:
0f:34:95:e5:db:d1:70:e8:3f:54:55:e9:d5:92:88:ed:00:be:
aa:5b:fa:68:f7:9d:d7:35:01:64:87:10:1e:42:5d:f5:56:dd:
86:f1:1d:0b:16:10:37:92:46:7e:30:71:50:07:85:dd:5e:f6:
fc:bf:02:82:54:58:db:df:7d:0b:8f:ac:c8:66:ce:7e:f5:a3:
73:26:e6:72:16:89:3b:72:ad:0c:38:52:ad:fe:ba:2e:c4:8e:
5d:7e:74:d3:fb:b8:f0:0b:9b:02:8b:06:17:6b:ed:ee:cd:c8:
db:e5:25:17:09:15:ad:f9:68:ca:d6:8a:72:44:a9:8b:b6:7d:
fd:d6:da:e1:2e:8f:4e:64:aa:89:3a:87:62:2e:0b:3b:80:fc:
95:8f:58:ee:8b:59:7c:35:86:d0:e9:7f:40:dd:42:51:97:81:
77:47:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org