Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/1uFwBqeurmX4lGeHAV6wayKLEPg.roa
File: 1uFwBqeurmX4lGeHAV6wayKLEPg.roa (raw, json)
Hash identifier: ds5jBA9jDoDIxdksP2gracCFbW/SH96CMEBF0XgpUY4=
Subject key identifier: D6:E1:70:06:A7:AE:AE:65:F8:94:67:87:01:5E:B0:6B:22:8B:10:F8
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 01856F14CC0ED8B96AA0AEDFECDF62B4A1DC
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/1uFwBqeurmX4lGeHAV6wayKLEPg.roa
Signing time: Sun 01 Jan 2023 20:45:11 +0000
ROA not before: Sun 01 Jan 2023 20:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15615
IP address blocks: 92.63.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:cc:0e:d8:b9:6a:a0:ae:df:ec:df:62:b4:a1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Jan 1 20:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6e17006a7aeae65f8946787015eb06b228b10f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:a4:77:f2:ba:8c:fb:04:06:bf:45:5c:18:
14:41:46:df:f3:1f:75:a2:41:7c:17:84:e8:1f:39:
54:65:6c:6d:f1:97:25:01:34:23:91:2e:79:2d:93:
64:c6:80:f4:ef:9d:d5:65:f9:b2:34:be:7e:bb:1d:
69:d9:8c:20:2c:5e:1f:4d:1a:ee:d8:e1:40:be:17:
91:13:29:01:58:d5:b3:c4:0e:05:e5:f3:65:75:ab:
bd:47:f1:e5:34:33:1d:18:0c:a1:18:3a:86:b4:a8:
6a:e1:fb:14:1e:db:c9:00:c9:41:96:7a:0f:59:4f:
c4:bb:51:12:2d:84:8f:1d:c8:84:0b:57:40:a6:66:
df:bf:86:dd:a1:b3:fa:9c:c7:bf:08:d4:c3:56:aa:
5b:f2:de:7c:79:47:b7:c3:b6:f6:b5:25:7f:70:60:
b9:ea:d9:2f:8a:db:8f:ba:09:bb:9a:40:de:52:62:
07:8d:23:d1:9e:ea:40:b5:57:bb:29:44:27:32:a6:
bd:9a:9d:75:c4:09:17:a8:c7:14:31:4f:0d:34:c4:
47:dd:56:43:15:9a:47:c5:7d:75:1b:59:4e:12:e5:
03:fd:82:4f:76:5e:94:73:31:86:19:ea:4d:00:9b:
87:c2:90:a7:99:47:5c:fa:51:9f:78:2f:77:6e:aa:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E1:70:06:A7:AE:AE:65:F8:94:67:87:01:5E:B0:6B:22:8B:10:F8
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/1uFwBqeurmX4lGeHAV6wayKLEPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.87.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6b:eb:c9:f1:28:2f:75:62:c3:49:e8:ee:dc:6b:1c:2c:bd:
e1:a5:b3:ec:6d:92:54:d6:5b:de:83:dd:23:49:9c:e8:c2:3b:
10:7a:49:14:5f:43:7b:5b:05:35:f2:32:57:a3:14:b7:e9:f9:
06:09:ad:33:9e:0f:f6:bf:dc:f6:b2:e6:17:f8:aa:0d:df:75:
be:20:4a:d6:1d:e2:93:c5:a5:f5:0b:bf:c9:11:59:a7:d3:65:
ac:1e:90:36:23:73:5f:f0:64:d2:6e:04:73:cc:ca:c0:dd:3f:
92:74:f3:73:23:d5:1b:f4:61:dc:1d:31:6d:f8:78:ac:cc:e0:
ce:9c:4f:a7:be:54:d0:a7:40:66:d4:77:2f:a0:61:93:af:8e:
99:71:22:a7:ca:15:3d:77:13:f8:de:50:08:4c:d8:9a:f6:61:
81:52:a0:cf:10:77:10:d2:ec:b8:b4:0f:9e:c1:0e:28:0c:ea:
71:98:b4:71:0c:a4:94:46:cf:c8:d7:c0:a2:ad:ab:ac:ef:72:
f6:82:bb:2b:2e:32:92:7f:e5:e3:95:04:ce:b4:e6:22:15:a4:
11:8c:9a:7a:95:da:bc:5d:13:6a:dc:54:a4:21:f5:e3:76:4a:
9e:39:93:fd:91:3a:77:60:c4:12:ed:1e:ef:50:b9:aa:d5:66:
4e:a0:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:54 2024 by rpki-client on console-fra.rpki-client.org