Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Cw6fSEX010gE2sskjcCAU3z5ABQ.roa
File: Cw6fSEX010gE2sskjcCAU3z5ABQ.roa (raw, json)
Hash identifier: EpfkbA29UNYSBOUMw5ZYVVHm2e0UD/zXRVjP4bXQkuE=
Subject key identifier: 0B:0E:9F:48:45:F4:D7:48:04:DA:CB:24:8D:C0:80:53:7C:F9:00:14
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F429E415C5348B8640AD9D487F4845B
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Cw6fSEX010gE2sskjcCAU3z5ABQ.roa
Signing time: Sun 01 Jan 2023 21:35:14 +0000
ROA not before: Sun 01 Jan 2023 21:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60253
IP address blocks: 92.205.192.0/20 maxlen: 24
2a00:116a::/40 maxlen: 48
2a00:116a:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Feb 2023 00:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:9e:41:5c:53:48:b8:64:0a:d9:d4:87:f4:84:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b0e9f4845f4d74804dacb248dc080537cf90014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:be:3b:af:a2:ce:89:e1:37:91:9c:23:d2:
88:b7:17:e7:2b:65:26:60:25:5f:a9:15:08:05:58:
a6:ba:48:a3:51:d5:7a:3f:fe:4d:ce:ad:8b:09:5f:
77:71:22:16:2b:07:38:9b:96:17:ed:e8:8c:9c:26:
34:e0:fd:cf:02:a4:66:ef:a3:af:0b:69:d1:2c:29:
3d:d1:00:89:90:a1:39:55:eb:73:9c:fa:9d:24:47:
29:28:9f:5d:6e:f4:14:5b:e0:25:e7:91:24:6d:fd:
90:3d:df:17:da:02:b9:bc:5f:a5:cb:bc:08:32:7c:
f9:ab:26:9e:3f:6c:76:7a:98:be:83:c7:6b:bc:b5:
4f:d1:05:a1:5a:4e:ad:4d:9b:84:b3:13:54:76:a6:
74:0b:cf:35:27:1d:37:8d:00:26:0e:73:8d:74:f7:
1e:aa:84:a6:cf:ea:f4:93:9a:11:98:ab:6d:5c:24:
9c:1d:7b:c6:96:57:2a:f3:40:ab:c2:42:04:bb:22:
6b:e1:09:eb:db:b8:46:9b:1f:0b:b2:09:ef:ff:85:
90:83:f7:aa:b9:c6:17:62:da:3d:c6:11:f9:02:58:
0c:b3:9e:e8:23:a4:3b:f1:61:d3:c7:6d:5e:03:25:
f2:f5:23:8d:02:83:72:9a:9a:70:70:3b:16:83:b7:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0E:9F:48:45:F4:D7:48:04:DA:CB:24:8D:C0:80:53:7C:F9:00:14
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Cw6fSEX010gE2sskjcCAU3z5ABQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.205.192.0/20
IPv6:
2a00:116a::/39
Signature Algorithm: sha256WithRSAEncryption
1a:3d:f8:13:be:74:98:76:0d:11:9f:6d:e1:48:d4:31:e2:50:
a5:6f:94:df:36:c5:3d:4b:72:5f:8d:1a:dd:4d:2f:2c:76:1b:
69:aa:53:08:64:5a:e9:28:e5:a0:7d:15:9b:fc:83:cc:69:9f:
06:d0:6c:15:43:4f:87:0d:46:0e:46:91:aa:94:fe:d0:e8:38:
bd:ae:fa:ff:b4:21:be:54:af:53:e6:58:bd:9b:82:10:28:a1:
e7:a0:60:96:54:e3:c6:3f:2b:f2:7e:f2:b0:45:cc:35:4f:45:
0c:dc:e0:a1:c8:10:44:9b:da:42:34:9c:c8:79:ce:27:6d:f6:
04:fb:27:1d:d6:f6:6d:79:97:df:96:6b:e3:2d:84:ea:13:94:
08:77:3e:3b:2a:0f:5a:e7:a9:fa:c5:c8:2e:08:ac:e2:28:49:
d0:72:5c:8e:e0:ce:14:c6:9d:19:75:64:c5:c2:7c:95:1d:53:
46:62:7b:23:02:fe:8c:40:e8:33:24:00:06:d8:6f:9b:02:47:
2c:67:2f:3d:c8:5e:14:09:b3:64:cf:1f:ad:3e:c2:ac:da:46:
30:a7:ab:39:a1:ea:09:7c:94:22:aa:c1:25:e5:a1:a4:f3:65:
84:b3:35:d3:e5:b8:e6:eb:91:3a:90:46:97:c3:b5:55:4a:ed:
0f:b9:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org