Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7fxeECnHUvUspqXI24OHDzE6yjE.roa
File: 7fxeECnHUvUspqXI24OHDzE6yjE.roa (raw, json)
Hash identifier: WsNUYNX8ew50tuFhYqM377wJauRyck9mVKYBNqIwq4A=
Subject key identifier: ED:FC:5E:10:29:C7:52:F5:2C:A6:A5:C8:DB:83:87:0F:31:3A:CA:31
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E33BBC82E4F42E0C0049BF7FDD47E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7fxeECnHUvUspqXI24OHDzE6yjE.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41944
IP address blocks: 92.118.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 20:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:33:bb:c8:2e:4f:42:e0:c0:04:9b:f7:fd:d4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edfc5e1029c752f52ca6a5c8db83870f313aca31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:62:6b:d9:25:14:f0:a7:78:4d:b4:da:91:
17:c0:38:ab:9e:20:3f:74:97:f9:45:d9:be:66:ba:
83:34:db:73:4a:79:23:d2:9a:0d:1d:10:1d:1c:66:
8d:03:b3:63:4e:bb:66:15:af:2b:84:65:c9:fa:1b:
d9:0a:c5:eb:0a:bf:b7:bd:22:d4:25:1a:d0:49:31:
f5:19:0d:e7:34:72:76:05:f1:21:b2:ee:a3:62:10:
84:db:b4:f5:c5:34:ae:74:2c:55:25:d1:21:25:5d:
73:46:78:e7:a5:bb:2a:1d:7f:9f:31:76:62:89:32:
7a:fa:68:d5:e6:23:64:fa:55:0d:0e:13:d4:01:51:
50:f0:0f:32:f7:a1:3a:b7:20:eb:06:4f:d2:30:20:
49:a4:e5:8b:5f:dd:04:5f:d0:95:33:aa:20:30:e5:
24:d0:8d:c3:43:ea:ba:dc:1d:1e:6f:02:4f:48:da:
4d:17:d5:a3:84:6a:29:e5:c7:1a:9d:38:23:81:fa:
b8:c9:61:c7:31:78:d9:f3:67:da:ca:76:38:5a:5e:
2e:92:80:fb:b1:24:6c:5d:65:07:d4:74:44:ae:03:
41:fa:2b:5a:a8:04:0e:2d:13:2e:55:43:b1:84:2e:
8e:2e:d8:be:fe:c9:e0:5a:75:5d:0b:f3:9e:73:37:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FC:5E:10:29:C7:52:F5:2C:A6:A5:C8:DB:83:87:0F:31:3A:CA:31
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7fxeECnHUvUspqXI24OHDzE6yjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
40:65:aa:5b:8f:71:47:ef:a6:5a:cc:97:a0:85:6b:ca:84:dd:
8f:d4:de:fb:89:5a:a0:6b:44:69:81:37:50:e4:2d:c9:95:11:
1f:11:78:59:66:6a:e7:c7:9e:e3:14:ef:dd:70:e6:50:8e:c3:
78:b1:b6:25:0c:24:0c:63:ff:dc:79:c6:62:ae:96:f7:3c:25:
9b:13:a3:4a:17:0c:0a:1b:56:ed:f3:cc:af:c4:40:9b:bf:70:
7c:37:4d:4d:cb:97:d8:2c:ce:ea:f3:92:75:ca:69:41:01:73:
8c:cc:1b:78:1f:64:6a:83:b9:02:f7:11:25:2f:4d:51:8f:b5:
d9:3c:40:cc:82:0f:82:ec:9c:29:be:f5:e5:b5:c5:a5:03:ef:
ee:91:df:7e:2d:c9:e9:cb:0e:69:a8:99:b0:42:d5:46:12:b7:
6c:bf:ad:62:e2:a7:08:7b:44:b7:c9:3c:3a:97:c3:7e:f9:f8:
1f:de:7a:e5:72:0a:0f:79:5d:77:9d:e0:82:a7:54:a9:e2:f6:
a4:4d:ec:23:db:78:f8:b0:fa:e2:d6:72:0a:51:2e:b4:e7:83:
99:d3:7b:83:fa:2b:18:56:cc:7d:06:1c:9e:37:5a:a6:99:32:
bc:5c:8e:6c:7a:da:fb:ce:f7:d9:4a:3a:01:c3:f2:45:55:40:
04:7b:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:13:26 2024 by rpki-client on console-ams.rpki-client.org