Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1xJlineGyWhR2A4h1pQTDVTBKhA.roa
File: 1xJlineGyWhR2A4h1pQTDVTBKhA.roa (raw, json)
Hash identifier: BrLl5r1UiStJeMId2tHHuOGK2HPz3aPyIDgiVvIQ0Z8=
Subject key identifier: D7:12:65:8A:77:86:C9:68:51:D8:0E:21:D6:94:13:0D:54:C1:2A:10
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018C8EFD5D13A88F5C88FB9937A9507AD0F3
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1xJlineGyWhR2A4h1pQTDVTBKhA.roa
Signing time: Fri 22 Dec 2023 00:46:58 +0000
ROA not before: Fri 22 Dec 2023 00:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 188.95.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:fd:5d:13:a8:8f:5c:88:fb:99:37:a9:50:7a:d0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 22 00:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d712658a7786c96851d80e21d694130d54c12a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:8d:3b:d7:18:52:40:e3:33:38:3b:f5:97:
f3:b5:fc:26:35:2a:8e:03:27:7b:5d:0b:e1:d3:fa:
45:6e:f6:65:69:6a:02:cf:33:9c:74:dc:5c:18:b7:
ec:6a:3a:32:2d:ba:3a:7e:2b:c4:e2:8e:dc:f7:35:
87:fc:d1:0c:aa:6f:f8:82:47:c3:91:cb:62:13:e3:
92:16:df:0a:b4:4a:1d:e9:4a:a6:e1:69:56:9a:fd:
6b:00:ca:2f:c9:6c:ad:16:89:49:8c:53:7f:77:c7:
d2:0b:df:e4:b8:e9:14:6d:84:26:55:55:71:1c:d3:
29:5d:94:15:5e:8f:3a:25:36:ac:46:4c:26:d0:43:
b4:8a:5c:e2:40:43:50:45:56:e4:2d:34:d6:63:0a:
39:d7:4c:21:dc:d5:1c:ae:55:40:47:6a:90:21:61:
bf:f1:72:4c:da:56:13:7b:6c:bf:2e:7f:82:af:dd:
2b:e7:c8:4d:60:c6:cf:be:9f:f5:b0:9f:0a:b8:04:
39:a9:78:6c:de:96:2d:e5:da:f8:f3:7d:49:19:b7:
78:88:d8:3c:c8:24:07:cd:81:24:c4:26:76:bd:de:
c4:cf:e5:05:10:a7:1d:04:c4:d8:f3:82:6a:f8:a5:
1b:f1:40:36:f2:02:a1:ef:49:2b:62:c2:4f:b1:83:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:12:65:8A:77:86:C9:68:51:D8:0E:21:D6:94:13:0D:54:C1:2A:10
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1xJlineGyWhR2A4h1pQTDVTBKhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3f:08:0b:31:f2:c7:2a:f1:ce:3d:4c:2e:b1:77:83:99:37:
9c:09:66:de:c7:de:23:f2:55:45:6c:69:14:59:dd:f4:e4:c4:
9e:b7:54:71:31:41:16:8b:c3:49:01:79:69:ea:8b:5c:ff:9c:
40:3b:94:81:7d:82:57:b3:c1:ba:94:8e:75:bf:02:90:89:e0:
72:82:48:5e:54:95:9c:f8:cd:d3:9c:5e:83:38:0e:48:d6:87:
b5:03:71:cc:f8:32:34:36:da:2e:eb:df:a7:b7:97:39:77:63:
47:f9:f6:e8:0b:0d:0e:d4:20:02:a8:64:1c:bf:cd:2d:5d:bf:
76:d1:70:d8:a5:f5:fe:ba:ae:cc:ca:9e:af:86:00:cc:c3:a9:
a5:da:1c:c8:8f:42:55:b6:73:9b:d5:50:bd:ae:c9:6b:e9:1b:
12:2c:ca:63:54:bf:41:d1:32:d0:a2:8e:5d:60:0a:8e:78:5c:
ba:e2:cb:95:f0:ba:9f:21:43:03:ca:6f:d2:7d:51:8c:c2:d1:
28:0e:9a:78:6f:e5:49:aa:b0:fe:8d:a0:2f:0e:23:41:4f:3e:
86:a0:ce:30:c1:04:3a:da:89:7a:6f:26:26:ab:22:ca:57:ef:
1b:c3:f5:53:bc:d5:b9:8b:41:cb:e1:89:66:55:b0:58:cf:6a:
22:4a:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:34 2024 by rpki-client on console-fra.rpki-client.org