Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/3xhl-to2Hjt4idK9DGMfmTvgwa4.roa
File: 3xhl-to2Hjt4idK9DGMfmTvgwa4.roa (raw, json)
Hash identifier: HhGc8ezjYMkE9Wiq35jOsnDd9ASogkarz2+A/T1lAPE=
Subject key identifier: DF:18:65:FA:DA:36:1E:3B:78:89:D2:BD:0C:63:1F:99:3B:E0:C1:AE
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 018572837693B67DEBC58EE25EB1361142F3
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/3xhl-to2Hjt4idK9DGMfmTvgwa4.roa
Signing time: Mon 02 Jan 2023 12:44:56 +0000
ROA not before: Mon 02 Jan 2023 12:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198099
IP address blocks: 188.247.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:76:93:b6:7d:eb:c5:8e:e2:5e:b1:36:11:42:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 12:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df1865fada361e3b7889d2bd0c631f993be0c1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:77:e4:7e:a1:59:22:b0:59:10:2e:4f:0b:
17:ba:6d:5a:19:5e:6b:6a:f8:82:25:6e:6c:d7:80:
eb:27:f2:16:a3:bf:28:62:6d:bb:66:7e:d3:2e:dc:
a2:a8:66:f8:76:66:0a:e7:70:bf:7d:ad:f5:77:b0:
9a:c9:a7:ae:d3:f5:ef:19:cf:07:4d:d8:a4:7a:e0:
3f:f4:ad:de:03:af:be:ed:42:9e:60:bd:ef:54:70:
bd:7f:f3:29:93:e2:f8:97:17:3d:24:40:21:fc:b1:
b6:be:b4:be:fa:0e:ae:26:bc:9b:d8:bf:5a:79:a4:
fd:69:f4:45:9f:d7:a7:72:a3:7d:17:6f:c2:e6:63:
68:f5:62:72:82:d7:c1:1f:b4:f8:0e:6d:77:c9:12:
0f:9a:5e:25:c5:4b:7e:ea:e6:a5:8b:a2:36:b9:a7:
3c:cc:be:bd:88:55:5f:94:26:cf:d5:c8:de:2d:1f:
53:7d:34:d9:b1:92:06:4d:e3:54:93:c2:19:7c:32:
b7:28:4d:46:60:b0:e1:2d:4b:30:bb:70:a2:68:52:
53:85:bf:e5:55:54:42:e4:4a:72:0b:a9:7f:32:b8:
21:29:8b:98:04:18:be:4d:fa:9d:c4:03:bd:49:eb:
6d:9a:7f:39:06:a7:11:28:44:06:1f:6f:e9:80:c5:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:18:65:FA:DA:36:1E:3B:78:89:D2:BD:0C:63:1F:99:3B:E0:C1:AE
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/3xhl-to2Hjt4idK9DGMfmTvgwa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.134.0/24
Signature Algorithm: sha256WithRSAEncryption
00:94:4a:b0:cd:c7:d9:af:8c:1c:58:b2:73:26:b3:d8:d9:1c:
8c:c7:96:88:ac:c6:be:7a:5c:1f:e1:bd:f0:48:ef:26:9d:de:
e6:b0:d6:67:37:cf:87:68:53:93:3a:6e:7e:6b:4f:1d:b0:7e:
e3:ac:b1:15:95:b3:06:8e:0e:13:94:80:9d:9b:ff:bf:db:d4:
a5:57:cb:ad:26:57:24:96:aa:8b:1a:ad:ff:49:19:b5:35:59:
76:1b:82:e7:c7:4e:b0:91:f7:39:3f:aa:1d:42:5a:2f:0d:6f:
05:c5:ca:63:76:ad:45:70:03:1d:c2:42:80:ea:25:50:1a:5e:
db:6f:35:9f:48:26:21:8c:95:0e:8d:d1:7c:c5:98:fb:e6:56:
8b:8c:0c:14:b0:6c:ca:d0:1c:2d:5d:98:8f:35:70:22:36:f0:
f1:9d:c3:4e:77:8a:7d:1a:40:01:fe:58:ba:ab:d9:c5:bf:30:
2c:2c:8d:4d:36:ca:81:41:7c:b4:f2:4c:81:82:05:ee:9e:66:
65:f5:ee:b4:6a:08:1b:a4:9f:b4:d0:6a:bc:1d:9c:f5:40:d0:
c3:b4:4e:0e:06:9a:38:e0:8a:a9:42:61:83:c4:16:1e:fa:76:
6f:fe:f1:8e:7a:15:94:10:88:1b:cf:06:96:cb:84:8e:89:71:
d4:8e:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org