Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/X83e7u9ibMVwVqmiUalGGmJG0f8.roa
File: X83e7u9ibMVwVqmiUalGGmJG0f8.roa (raw, json)
Hash identifier: ppPBAX/Y/9Map+M5IxXlvAhlfwdSK9kA2W1k1eLisuE=
Subject key identifier: 5F:CD:DE:EE:EF:62:6C:C5:70:56:A9:A2:51:A9:46:1A:62:46:D1:FF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0187139CDCBD9D01CBBC477E863CCDE243DF
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/X83e7u9ibMVwVqmiUalGGmJG0f8.roa
Signing time: Fri 24 Mar 2023 12:34:19 +0000
ROA not before: Fri 24 Mar 2023 12:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58022
IP address blocks: 188.241.122.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:9c:dc:bd:9d:01:cb:bc:47:7e:86:3c:cd:e2:43:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Mar 24 12:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fcddeeeef626cc57056a9a251a9461a6246d1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:cb:6c:6e:bd:de:69:d2:7d:b2:cf:04:25:
18:4f:a0:58:d7:89:7a:b8:54:83:11:d3:dd:59:cc:
ee:9a:13:fa:b7:47:68:c3:db:2a:e5:c0:cf:a5:70:
5a:90:6d:5e:6a:91:e9:f3:a0:7c:76:e5:49:83:5c:
bb:23:62:36:b1:de:29:46:8d:d8:04:8c:61:0d:df:
40:63:48:4b:c8:94:1c:9f:80:27:9f:33:08:bb:46:
7b:88:af:cf:29:fb:04:08:43:f5:dd:c5:08:08:c6:
f1:b8:3f:59:9b:e3:c4:fb:58:9e:7a:b5:35:12:90:
b2:63:b7:e8:85:75:1b:37:e2:48:25:02:6b:c5:a3:
86:63:1d:b6:7a:5d:ad:64:c4:4c:d0:de:df:3b:45:
ee:59:cb:e6:ea:4c:fb:c7:c2:25:23:29:55:d5:3e:
a9:1d:5b:70:0e:0b:67:74:75:03:4a:79:dd:4b:03:
5d:5b:f4:89:33:b7:bc:5b:1e:10:51:13:2e:2a:98:
90:7a:c5:68:8a:6a:2b:b3:e4:5a:49:ec:a8:86:fe:
53:af:5f:fe:57:b2:cc:70:bd:7a:fc:aa:90:1d:28:
85:ea:36:f0:71:ca:d5:8c:db:9d:93:fb:d6:ca:87:
8c:8b:b0:18:4c:c7:29:5c:15:70:f1:c9:30:b2:33:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:DE:EE:EF:62:6C:C5:70:56:A9:A2:51:A9:46:1A:62:46:D1:FF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/X83e7u9ibMVwVqmiUalGGmJG0f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.122.0/23
Signature Algorithm: sha256WithRSAEncryption
ef:e8:fa:cb:0b:70:44:65:fb:1f:bf:0c:09:3e:7b:14:de:58:
8a:1a:fe:b5:ec:73:88:21:3f:b4:54:ed:64:61:34:53:e4:e9:
f2:dd:60:a1:9c:78:f6:5b:70:b6:a8:0b:83:3a:6a:5c:f6:28:
ea:07:9d:24:78:f4:6a:09:f9:a1:ec:a3:5d:ea:d0:f2:19:cb:
dc:5e:2e:62:9c:df:4d:53:20:fc:d8:22:02:db:9d:a5:fd:b8:
88:76:ba:d4:11:d3:e0:8f:20:52:37:0b:58:ea:8a:e7:b7:bd:
b3:e3:36:9a:a8:65:ef:0c:66:53:6b:94:4f:31:39:e6:27:a5:
10:f3:2d:dd:af:63:28:25:46:3d:d0:ec:07:0a:9e:c2:04:97:
e1:95:4c:1e:34:f3:e2:99:e0:0d:c3:a9:5a:ec:64:95:df:ab:
49:bc:22:f5:d2:cb:89:c7:53:6e:df:0a:0e:c4:e3:77:6b:ce:
f9:0c:1d:fa:8c:e4:d6:3a:49:0d:fa:1a:f6:8b:04:36:15:f8:
82:c2:d2:6c:35:75:a0:79:b1:9e:aa:c1:cb:6c:b7:b8:bc:21:
f2:1a:e5:95:c1:71:51:17:33:79:d2:f0:8d:bd:59:a5:c9:3a:
5d:7c:88:1c:b8:9d:80:eb:70:1b:bf:ba:a1:fd:f5:23:81:59:
20:ba:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org