Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/G961fJWAOqXBTXgezwxcebOwbNg.roa
File: G961fJWAOqXBTXgezwxcebOwbNg.roa (raw, json)
Hash identifier: 5teq3TgWS0JzQbta+a1FS883b3HH0p0C8V6TdSyDzMc=
Subject key identifier: 1B:DE:B5:7C:95:80:3A:A5:C1:4D:78:1E:CF:0C:5C:79:B3:B0:6C:D8
Certificate issuer: /CN=6827dc221544fc74215112a5812de196a2872e86
Certificate serial: 01899BC28F1DD47370C1C1957952EAF5FC1A
Authority key identifier: 68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/G961fJWAOqXBTXgezwxcebOwbNg.roa
Signing time: Fri 28 Jul 2023 09:09:26 +0000
ROA not before: Fri 28 Jul 2023 09:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29076
IP address blocks: 188.92.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:c2:8f:1d:d4:73:70:c1:c1:95:79:52:ea:f5:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6827dc221544fc74215112a5812de196a2872e86
Validity
Not Before: Jul 28 09:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bdeb57c95803aa5c14d781ecf0c5c79b3b06cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:9a:32:1a:bb:64:97:a3:71:24:f3:44:4e:
65:22:02:64:69:0c:51:fd:a3:00:d8:e0:cc:07:12:
61:96:41:9c:b2:ab:3c:33:d4:05:18:1e:9c:33:85:
a0:4b:c7:59:3b:db:23:62:02:8e:1a:3c:c4:1a:9d:
22:f7:3b:e5:ff:97:72:67:9a:4a:40:ce:fb:49:9b:
6a:72:85:ae:7c:21:de:b7:47:e3:1e:9d:e0:e7:9c:
e7:52:89:2f:d4:5b:d5:b2:2d:e5:27:e4:20:fd:de:
5e:da:6b:6a:75:7d:9a:32:50:bb:c5:18:09:8f:8f:
4d:73:4e:b1:46:97:de:40:69:08:52:c2:f6:f7:ea:
b4:30:e1:0b:de:5b:9e:a1:e3:d3:1a:1c:95:a6:04:
ca:fe:a1:df:02:ae:12:e6:c0:d5:7d:7e:94:b8:38:
41:69:be:7d:c3:fb:a3:52:83:07:9f:9c:eb:97:f1:
09:64:a7:93:0e:46:e6:e3:ca:b7:4e:75:7e:d8:56:
61:6c:93:93:57:4b:cb:08:cf:43:26:9c:ae:a9:df:
ac:e3:dd:93:e5:76:75:30:40:a3:4d:41:1b:a2:34:
63:9d:7a:c1:4d:b4:83:7c:b6:11:b5:19:5d:d0:b9:
8f:ea:84:9e:3b:6b:ad:b5:ab:d6:77:ad:70:65:9a:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DE:B5:7C:95:80:3A:A5:C1:4D:78:1E:CF:0C:5C:79:B3:B0:6C:D8
X509v3 Authority Key Identifier:
keyid:68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/G961fJWAOqXBTXgezwxcebOwbNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.176.0/21
Signature Algorithm: sha256WithRSAEncryption
cd:4e:aa:ab:26:e2:86:d3:f6:f6:84:04:88:70:7f:88:5b:91:
00:8f:4f:a7:a0:16:16:25:9f:b4:4d:78:57:5c:98:e2:ff:17:
80:9a:d2:ad:d5:13:66:f1:d5:88:1f:20:1e:ce:d4:44:c9:14:
fe:fb:99:3e:5f:4a:b3:02:d9:3b:cf:b4:82:b3:49:f8:2e:0f:
09:0c:00:d6:a4:3e:cd:43:a5:03:c4:e7:f9:70:bb:11:3f:01:
2d:5b:9a:de:b3:76:3b:7c:5d:e3:e8:b0:c1:0b:21:f5:c7:02:
cb:02:b3:61:2b:0c:88:23:74:f5:b4:e8:3d:15:b6:b6:aa:84:
90:5d:f7:60:52:e4:08:b1:fc:20:d2:82:18:88:8b:56:30:25:
ab:bb:04:a0:d0:91:55:e0:60:68:2d:3e:95:f3:fb:90:92:75:
8a:b5:34:69:b9:ad:31:46:4e:de:ab:df:64:99:e4:16:97:6c:
84:06:ae:3c:87:73:00:cf:5f:cb:dd:09:44:b0:ab:6f:03:a6:
76:69:94:b7:52:3c:4e:d5:57:84:b7:d0:2f:38:2e:3a:1c:38:
4c:87:bc:20:af:29:e0:b4:7f:57:7c:ac:2b:07:55:b8:1b:37:
6d:8f:1e:5c:2f:13:39:aa:97:9c:bb:cd:53:38:e9:8d:a3:8f:
68:c6:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:26 2024 by rpki-client on console-fra.rpki-client.org