Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8dPz1YqiBqL7Vy2b-M151IEaSXU.roa
File: 8dPz1YqiBqL7Vy2b-M151IEaSXU.roa (raw, json)
Hash identifier: UxNLxRr4EUWb1zVBFQQgE1CeSw9Mdh7To5mIoMYEZiI=
Subject key identifier: F1:D3:F3:D5:8A:A2:06:A2:FB:57:2D:9B:F8:CD:79:D4:81:1A:49:75
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0185CF0D5BDCF7C4BC6F1AA608DD6E190AB4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8dPz1YqiBqL7Vy2b-M151IEaSXU.roa
Signing time: Fri 20 Jan 2023 12:00:37 +0000
ROA not before: Fri 20 Jan 2023 12:00:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 92.119.164.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:0d:5b:dc:f7:c4:bc:6f:1a:a6:08:dd:6e:19:0a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 20 12:00:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1d3f3d58aa206a2fb572d9bf8cd79d4811a4975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:80:62:c9:3e:4b:74:f7:5e:39:40:a7:9e:
b0:94:28:53:d7:72:2f:b9:17:9f:88:ee:6e:36:da:
9a:a1:4f:8e:a5:f3:06:6f:0f:66:28:5b:04:6a:b3:
2b:8f:db:f4:d2:2e:5d:4f:d4:93:b4:c7:9d:d2:9e:
78:07:ea:70:ba:f6:8e:2e:6c:b0:d8:78:3b:ba:09:
ae:a5:5e:b0:0b:d0:d4:2f:1a:55:86:8a:05:7b:45:
cf:73:47:64:c3:08:70:12:5d:0e:1c:71:d1:bd:9a:
db:ed:61:c6:93:ab:34:4f:71:20:5e:8d:0f:93:c2:
27:bf:14:a3:8c:ca:2c:ab:81:64:38:a3:79:7d:fb:
07:39:4c:56:c0:d5:c6:87:f0:28:ac:f3:ec:aa:31:
8a:a1:33:7f:7f:c1:ac:aa:f5:90:42:1b:0a:ce:68:
21:2d:d8:5d:0f:7a:4d:e0:c4:06:49:b8:0c:0c:90:
cd:6e:75:69:36:dd:76:b8:bf:03:18:02:c4:a5:51:
98:e8:1c:52:84:2c:87:11:5b:ee:90:e6:8d:43:94:
28:0b:16:3a:18:39:37:8d:bf:51:7b:a5:88:2a:b9:
26:d8:79:c2:bb:e2:02:61:e6:81:04:eb:a6:3b:86:
5f:49:a6:1a:56:12:59:f8:e1:bf:3a:f5:fa:43:27:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D3:F3:D5:8A:A2:06:A2:FB:57:2D:9B:F8:CD:79:D4:81:1A:49:75
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8dPz1YqiBqL7Vy2b-M151IEaSXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
32:2d:35:a2:a1:48:e1:17:49:df:68:69:96:c4:e5:b2:83:fa:
bc:51:1b:f2:c8:af:fc:ab:ff:cf:e9:f2:a6:db:bc:53:04:a0:
e3:8a:ac:e7:56:fa:05:6f:a8:f0:fe:37:de:d4:cc:22:6f:9b:
f7:6c:1a:29:ea:2a:04:f4:4b:19:b8:e4:e7:87:e4:5d:a3:e9:
02:80:9a:f1:ee:58:be:dc:11:c5:8d:b3:e2:09:c0:b2:7b:cd:
a0:99:ab:6c:47:09:38:00:5a:53:9d:49:03:10:77:28:55:a5:
bb:a7:a0:4e:ef:c7:8b:44:05:98:10:e9:2e:a6:46:8f:46:ef:
fa:a1:bc:93:09:75:ff:7f:4a:26:dd:a4:55:f1:2d:36:4d:69:
ac:b7:00:f8:19:d1:8b:12:76:94:70:52:32:14:a9:82:26:22:
ef:c2:0a:33:f9:e1:e0:37:64:01:34:41:22:9a:a0:f9:53:09:
4a:a9:cf:4a:eb:76:99:79:02:da:61:45:81:69:94:ac:b2:73:
05:f1:db:f2:aa:bd:54:35:53:4c:2a:1a:da:c9:85:89:1f:dd:
6d:2f:c9:f8:0b:84:e4:27:7e:f5:f9:d0:ef:36:19:0c:4d:98:
18:4d:10:4f:6e:78:b4:14:2b:fd:a8:be:12:48:53:48:1a:1e:
37:f7:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org