Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w-UguL2NnWrt1wAJDnu_o-bUpS0.roa
File: w-UguL2NnWrt1wAJDnu_o-bUpS0.roa (raw, json)
Hash identifier: L0TIbLaWce/vLjxVpl+t65ym/jOojrWTiilGEgLexpc=
Subject key identifier: C3:E5:20:B8:BD:8D:9D:6A:ED:D7:00:09:0E:7B:BF:A3:E6:D4:A5:2D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE618EEF24BF38D7540DCA385565F0B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w-UguL2NnWrt1wAJDnu_o-bUpS0.roa
Signing time: Sun 01 Jan 2023 10:34:57 +0000
ROA not before: Sun 01 Jan 2023 10:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 92.118.205.0/24 maxlen: 24
92.118.206.0/24 maxlen: 24
92.118.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:18:ee:f2:4b:f3:8d:75:40:dc:a3:85:56:5f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e520b8bd8d9d6aedd700090e7bbfa3e6d4a52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:04:3e:d7:b4:e2:86:5b:ac:56:51:d6:8c:96:
c9:88:26:ca:1b:4f:2e:d1:74:a4:b9:33:b6:63:89:
f0:1f:5e:39:f2:13:a6:7e:0a:09:cb:fe:96:47:fb:
35:6a:bd:5e:51:ca:47:ce:0b:6a:c6:db:81:fe:85:
0e:3e:91:20:fb:ab:4c:c6:42:3d:e4:67:17:06:b9:
d1:c4:b2:88:a7:c4:1e:6b:2a:86:51:67:de:ae:94:
d3:8e:ea:64:54:37:4b:99:4c:37:8f:f4:b6:9a:01:
8b:1b:76:8f:15:c2:a8:24:a5:88:52:d0:ba:e4:0a:
ca:b4:2f:dd:31:ed:f6:eb:30:71:ce:0a:cc:96:0b:
92:e4:c7:d6:1e:c8:3c:4d:d7:e6:7f:31:df:58:80:
31:5c:22:01:fe:18:98:2c:d6:8e:9e:5a:c6:9b:c4:
a2:e5:1b:43:91:0d:7d:20:81:99:e4:d2:dd:86:75:
f4:0c:77:ad:21:c0:7f:2d:59:8b:06:4f:7b:8c:62:
5b:f9:1e:72:0c:85:f1:26:90:e7:b2:69:2f:7a:f8:
24:a0:84:39:72:23:db:6a:1b:48:45:7e:46:e2:57:
c0:bb:18:56:e1:6c:c3:e3:01:4a:d0:7b:0d:ba:ee:
49:62:57:de:15:99:39:3a:ec:bf:14:f8:66:70:52:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E5:20:B8:BD:8D:9D:6A:ED:D7:00:09:0E:7B:BF:A3:E6:D4:A5:2D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w-UguL2NnWrt1wAJDnu_o-bUpS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0-92.118.206.255
Signature Algorithm: sha256WithRSAEncryption
05:e2:df:63:7d:26:19:70:bc:d6:1f:1e:64:df:61:f1:e4:08:
3d:b5:ed:08:a7:c5:24:19:77:8a:9d:1d:b0:28:4a:64:af:6e:
a3:36:0b:d2:7f:82:a0:97:be:19:c4:6e:2f:ff:dd:ae:da:c0:
a7:18:7b:f4:35:4d:34:e8:58:2c:86:44:cd:fc:0a:11:29:6f:
b7:22:73:30:c9:a8:59:d8:80:0d:77:f8:3b:c5:31:31:6f:83:
be:4e:23:b7:cc:10:c1:50:ef:db:04:85:9c:ab:03:28:06:bb:
bf:1d:86:b5:eb:b8:7a:b6:5c:b2:e8:a9:3d:07:2a:87:6d:ce:
9a:db:a7:57:a2:f6:70:10:f1:58:48:f2:4a:9f:06:d3:e3:f2:
92:07:c5:ba:e9:31:60:33:d0:c6:55:8d:29:e0:2f:9a:3b:71:
17:df:c2:37:21:3e:06:8c:f6:53:c3:47:38:0d:37:84:f6:1d:
54:75:ad:d3:eb:5f:14:69:be:aa:8c:79:38:f3:ff:65:77:7a:
92:6d:12:6d:1b:23:42:81:64:cd:12:40:b7:b0:c3:0a:9a:e5:
bd:b1:d7:ef:62:25:a3:3b:fb:63:10:f6:8e:d9:77:45:8f:ac:
48:e8:e5:e8:ff:e4:6b:36:8a:24:7b:de:32:86:ad:fc:fa:a4:
5f:0f:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 12:50:42 2023 by rpki-client on console-fra.rpki-client.org