Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tsAALKPnSrRyPCgItlqbprdlA0U.roa
File: tsAALKPnSrRyPCgItlqbprdlA0U.roa (raw, json)
Hash identifier: zt2RIAPnPu6xXXbBrOfeMKRcSPvPlWjIHhg40OwSi/U=
Subject key identifier: B6:C0:00:2C:A3:E7:4A:B4:72:3C:28:08:B6:5A:9B:A6:B7:65:03:45
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE617B6AF5BC8EDEABC49F1C36A17B2
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tsAALKPnSrRyPCgItlqbprdlA0U.roa
Signing time: Sun 01 Jan 2023 10:34:56 +0000
ROA not before: Sun 01 Jan 2023 10:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41944
IP address blocks: 92.118.206.0/24 maxlen: 24
92.118.205.0/24 maxlen: 24
92.118.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:17:b6:af:5b:c8:ed:ea:bc:49:f1:c3:6a:17:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6c0002ca3e74ab4723c2808b65a9ba6b7650345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:fa:7a:2d:76:74:bd:30:32:87:b3:00:a8:
64:16:e5:b7:61:6e:17:30:9e:a6:62:61:00:42:0e:
1d:84:bc:44:b3:bd:58:86:a6:c5:30:7f:f0:aa:cd:
8b:b3:3b:e6:92:c2:a5:f6:0b:68:70:ca:ba:5d:01:
ce:92:9d:d3:e3:95:d5:9f:0e:db:e0:a1:4a:d5:b6:
81:10:f5:6f:a5:a6:7d:37:4b:cb:fc:66:a7:f1:51:
27:43:34:93:d8:57:fc:1c:73:45:8b:90:eb:23:19:
cd:43:74:11:31:f7:28:8d:ee:0f:f8:91:df:f1:81:
45:6f:19:62:54:34:28:ac:af:ce:c0:c5:4d:aa:78:
37:f6:75:c1:39:2b:41:dd:01:3f:a1:0c:0d:df:d9:
28:9a:9d:d6:cc:b0:c6:c0:c0:77:8b:a5:7b:e6:e1:
43:ec:97:e1:4f:0d:e0:4e:53:51:09:e2:9c:6d:c4:
49:7c:55:3a:39:2c:2d:c3:86:8e:08:60:9b:67:37:
84:1b:f4:1e:63:b5:0b:a2:8c:8e:65:ee:af:ef:85:
dc:92:d5:43:27:57:19:92:08:41:06:0a:57:6b:22:
e3:be:09:68:f3:45:3c:25:15:e7:65:0f:95:75:7c:
a2:d9:01:5f:05:63:46:fe:01:bc:e1:c0:9f:13:54:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C0:00:2C:A3:E7:4A:B4:72:3C:28:08:B6:5A:9B:A6:B7:65:03:45
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tsAALKPnSrRyPCgItlqbprdlA0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0-92.118.206.255
Signature Algorithm: sha256WithRSAEncryption
8a:a2:fd:b5:9b:d1:c8:d1:2a:37:c7:e8:5d:c9:8a:d4:8e:42:
dc:0a:59:b8:be:71:ea:84:3e:35:6e:43:c6:22:98:72:60:cb:
93:2e:7a:23:a6:70:d6:fb:f5:e0:0a:17:49:f1:27:1b:f3:20:
64:6d:14:e9:22:80:f7:4d:3a:bf:40:f7:99:89:8e:0c:bd:59:
d2:94:43:1d:82:6b:35:88:f9:11:e4:09:8c:02:30:51:8e:d1:
bb:40:b4:5e:d9:b6:ba:d8:e5:ea:84:4c:9f:81:8f:1b:d0:18:
02:12:69:e2:00:e8:a5:f2:fc:46:90:bf:2e:d1:72:7f:a6:b7:
4b:d6:30:06:4b:2c:f1:9f:9d:2e:21:3e:82:b3:1f:02:c5:54:
92:20:5d:04:b3:40:ff:6a:04:64:7f:5c:be:11:6a:c6:0d:fd:
9d:73:a6:d7:d4:8c:09:b2:b9:bb:c6:c3:65:3e:aa:ef:40:24:
88:a9:5f:52:05:c7:86:92:07:56:ce:6f:8d:66:06:ec:12:92:
2e:ee:fb:94:cd:e2:c7:c6:ae:5e:bb:6d:f3:c1:74:85:1e:d2:
72:9e:04:65:a3:47:0f:7f:d2:02:da:52:7a:2c:21:fa:63:ad:
fc:95:5f:b9:1b:03:d5:3e:2a:27:18:95:70:61:3c:11:c9:94:
9a:26:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 12:26:07 2023 by rpki-client on console-ams.rpki-client.org