Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/0XIItc_J-2RcbMROYHcLUvsxoa4.roa
File: 0XIItc_J-2RcbMROYHcLUvsxoa4.roa (raw, json)
Hash identifier: GhCK6GYowzNz81UJPGbl37cyUQFq6HLR4Dw9zciOFXs=
Subject key identifier: D1:72:08:B5:CF:C9:FB:64:5C:6C:C4:4E:60:77:0B:52:FB:31:A1:AE
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 01856C4113727639EAE4BEB4F8A315503603
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/0XIItc_J-2RcbMROYHcLUvsxoa4.roa
Signing time: Sun 01 Jan 2023 07:34:42 +0000
ROA not before: Sun 01 Jan 2023 07:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 188.92.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:13:72:76:39:ea:e4:be:b4:f8:a3:15:50:36:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Jan 1 07:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d17208b5cfc9fb645c6cc44e60770b52fb31a1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:22:8b:b5:27:48:07:93:13:5d:6d:bd:39:
e4:e0:10:3a:a4:7e:af:3b:e0:bb:59:3f:72:36:3d:
39:e2:c6:46:b1:7f:45:94:35:91:a2:81:57:08:bb:
c9:13:be:ef:15:5b:a7:ed:c1:f9:4f:a8:b5:ec:1e:
e2:21:31:0f:db:a6:17:a9:40:80:bc:9a:f2:01:1b:
fb:a9:18:5f:83:c3:c8:38:a6:64:22:47:c6:66:f6:
95:3b:46:51:0f:08:3e:2e:ee:e7:e9:20:33:fe:c2:
60:ed:0a:ba:f4:04:95:09:7a:28:2c:8f:05:4c:5a:
f3:16:bf:1d:7d:f9:6e:03:e4:a5:50:c8:3d:bd:85:
ef:96:3b:5b:c2:58:79:af:c9:ee:2d:73:9f:6c:41:
6b:e2:a6:33:88:89:e7:d8:02:d8:27:0a:84:55:3d:
77:33:be:a7:f2:7c:58:52:bc:66:4d:8b:6a:07:8b:
6a:aa:45:82:be:80:ab:bf:be:30:95:f9:e0:be:23:
9b:98:6c:fb:a2:73:ad:a9:e7:bf:d9:d4:78:31:11:
bb:f7:9b:fd:33:f1:4c:24:1c:ae:46:85:b8:21:56:
af:32:a7:74:f1:10:2d:c1:2c:65:f2:de:8b:1e:13:
28:57:df:e5:5b:79:f9:25:77:bb:68:96:79:4a:70:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:72:08:B5:CF:C9:FB:64:5C:6C:C4:4E:60:77:0B:52:FB:31:A1:AE
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/0XIItc_J-2RcbMROYHcLUvsxoa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:c6:bb:3d:14:12:63:bf:d8:b6:16:5e:62:cb:4c:05:6e:c3:
74:67:a6:b8:75:9d:0a:23:cc:43:d9:01:b7:b8:19:9b:91:5c:
8b:e1:d6:fb:d7:85:64:19:ee:7b:74:83:d5:ca:46:95:54:d8:
24:7d:94:ab:31:c5:5e:c5:b3:26:00:04:9a:cb:83:6f:cd:56:
61:ca:58:db:bd:22:33:08:62:7e:f0:f3:d6:5b:d2:05:82:bb:
6c:24:fd:e7:c5:1d:6e:3a:25:98:90:7e:b4:44:90:6e:6f:81:
2a:85:73:1d:e4:3f:b4:51:89:7b:e5:b8:5e:2f:fa:57:9b:89:
27:8a:98:e9:78:71:74:b7:b3:03:98:9f:cd:f0:1d:b4:e5:75:
ba:7f:fb:3e:11:69:00:f1:ef:f5:88:ed:6e:d8:01:53:38:fd:
a9:51:09:03:0d:8b:f9:f0:55:75:39:b8:76:a6:57:41:26:d4:
f3:d6:52:46:44:41:b2:22:8e:33:b8:91:e8:99:f7:cf:f2:b2:
c0:b2:41:61:bd:18:26:0e:5a:26:d9:83:7c:6f:e3:12:e7:a5:
b0:6b:da:99:1c:73:d8:f8:7f:cc:38:bd:60:c1:e6:01:8f:ea:
2f:db:a6:f0:9a:04:5e:93:da:07:a7:5a:bc:47:be:cb:07:fd:
19:76:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:15 2024 by rpki-client on console-fra.rpki-client.org