Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/_xdXlZp5kn2xawV-ntSpJlZrJT0.roa
File: _xdXlZp5kn2xawV-ntSpJlZrJT0.roa (raw, json)
Hash identifier: noOF4AeXD0euuoBITt5hOzBw5eHNukZisRv7LM37Pss=
Subject key identifier: FF:17:57:95:9A:79:92:7D:B1:6B:05:7E:9E:D4:A9:26:56:6B:25:3D
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 01856C41129CFCDB83DD64CFD2733A991759
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/_xdXlZp5kn2xawV-ntSpJlZrJT0.roa
Signing time: Sun 01 Jan 2023 07:34:41 +0000
ROA not before: Sun 01 Jan 2023 07:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40178
IP address blocks: 188.92.120.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:12:9c:fc:db:83:dd:64:cf:d2:73:3a:99:17:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Jan 1 07:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff1757959a79927db16b057e9ed4a926566b253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:28:08:34:7d:f6:af:64:33:8c:94:da:46:b4:
87:63:99:af:20:99:8e:3a:64:97:ff:18:f4:65:45:
50:58:49:3b:0d:3f:ed:e9:c5:f0:1a:4e:39:8a:a2:
0e:b1:dc:74:d5:09:8e:f6:fc:18:ff:cb:44:fb:b8:
5c:a0:75:c6:0d:d9:e6:d9:95:0b:f2:a0:94:98:db:
eb:54:f0:f2:79:65:9c:22:56:32:07:8e:8d:ec:63:
13:c4:1e:f1:03:c9:da:6d:29:a3:f2:66:9d:d8:f4:
42:5c:13:1c:95:51:a4:d2:38:53:cc:f2:90:49:8a:
f7:80:b2:94:82:9e:d1:2e:14:8c:8b:90:f3:ee:9a:
e3:8d:c4:ce:20:0e:45:be:b7:28:db:1a:dd:9e:3a:
06:64:c9:05:e3:45:6f:3c:68:be:20:69:a9:56:03:
73:f7:12:ff:07:34:4d:84:7f:55:74:bd:87:b9:2a:
ab:b3:bd:ca:24:09:33:7d:37:bd:07:9c:11:4d:56:
d0:fd:84:9c:11:41:b6:08:09:36:75:2e:f0:ca:90:
c3:91:11:3c:f3:cb:5a:b1:67:11:f2:4f:6d:e4:a0:
4e:e8:dc:46:bc:91:4a:57:19:c7:79:a9:34:16:33:
c4:f0:24:fb:f6:3f:7a:47:59:3f:34:ee:5a:1d:e4:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:17:57:95:9A:79:92:7D:B1:6B:05:7E:9E:D4:A9:26:56:6B:25:3D
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/_xdXlZp5kn2xawV-ntSpJlZrJT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:1f:14:3d:c7:9b:6f:fa:bc:7d:21:dc:80:08:17:d2:8c:de:
e7:bb:cf:d9:1c:f9:1d:5c:c9:61:f8:5c:b0:01:6d:70:e7:49:
50:e0:eb:9c:dd:d5:70:2f:58:89:64:27:64:ac:4f:ae:9b:8e:
23:43:b9:bc:1a:1b:c3:7e:ff:94:f3:58:ad:c3:6e:6d:2a:c7:
14:bc:31:02:45:18:c3:7b:f1:2b:f2:92:28:28:b8:0c:b6:83:
90:af:fb:64:4c:88:6c:cf:9f:da:6c:3f:bd:f1:9b:69:6b:ce:
b8:72:97:70:15:6b:ee:9d:01:ef:c3:9b:a6:8a:64:4c:e2:ce:
4e:23:9e:f8:30:e1:c5:0d:36:1f:03:23:b2:1b:90:a2:6d:0a:
7a:3c:f2:42:b5:55:a4:1a:38:1d:73:5e:39:c5:ee:72:ac:96:
9e:37:54:27:94:5c:17:f7:96:c1:b1:a7:15:af:6e:34:6c:42:
13:8b:b1:d1:5c:6c:e6:a9:ef:ce:61:07:66:bd:80:60:8b:3b:
d9:ba:09:87:4f:82:76:42:1c:4e:97:db:4c:e4:3e:90:26:9d:
02:f4:17:47:10:51:62:57:38:51:b7:31:bc:52:3e:5d:cb:89:
36:8b:da:9b:e4:35:a1:a1:49:24:03:56:4a:22:58:81:23:8f:
f5:fb:37:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsQRKc/NuD3WTP0nM6mRdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODcwMzNmYzZhODdkM2I4ZDBjYjNjZTFhYjJiYWJiZTUy
YmEzMTEwHhcNMjMwMTAxMDczNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjE3NTc5NTlhNzk5MjdkYjE2YjA1N2U5ZWQ0YTkyNjU2NmIyNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgigINH32r2QzjJTaRrSHY5mvIJmO
OmSX/xj0ZUVQWEk7DT/t6cXwGk45iqIOsdx01QmO9vwY/8tE+7hcoHXGDdnm2ZUL
8qCUmNvrVPDyeWWcIlYyB46N7GMTxB7xA8nabSmj8mad2PRCXBMclVGk0jhTzPKQ
SYr3gLKUgp7RLhSMi5Dz7prjjcTOIA5Fvrco2xrdnjoGZMkF40VvPGi+IGmpVgNz
9xL/BzRNhH9VdL2HuSqrs73KJAkzfTe9B5wRTVbQ/YScEUG2CAk2dS7wypDDkRE8
88tasWcR8k9t5KBO6NxGvJFKVxnHeak0FjPE8CT79j96R1k/NO5aHeRUwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8XV5WaeZJ9sWsFfp7UqSZWayU9MB8GA1UdIwQY
MBaAFEuHAz/GqH07jQyzzhqyurvlK6MRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZGZiY2YtMzEzYi00N2I5LWJmOGUt
YTc3OGEwYzE0ODU5LzEvX3hkWGxacDVrbjJ4YXdWLW50U3BKbFpySlQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82ZGZiY2YtMzEzYi00N2I5LWJmOGUtYTc3OGEwYzE0ODU5
LzEvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvFx4MA0G
CSqGSIb3DQEBCwUAA4IBAQCmHxQ9x5tv+rx9IdyACBfSjN7nu8/ZHPkdXMlh+Fyw
AW1w50lQ4Ouc3dVwL1iJZCdkrE+um44jQ7m8GhvDfv+U81itw25tKscUvDECRRjD
e/Er8pIoKLgMtoOQr/tkTIhsz5/abD+98Ztpa864cpdwFWvunQHvw5umimRM4s5O
I574MOHFDTYfAyOyG5CibQp6PPJCtVWkGjgdc145xe5yrJaeN1QnlFwX95bBsacV
r240bEITi7HRXGzmqe/OYQdmvYBgizvZugmHT4J2QhxOl9tM5D6QJp0C9BdHEFFi
VzhRtzG8Uj5dy4k2i9qb5DWhoUkkA1ZKIliBI4/1+zeZ
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:53 2024 by rpki-client on console-fra.rpki-client.org