Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/fIuD_EDeNwZQyrZFINF94UME620.roa
File: fIuD_EDeNwZQyrZFINF94UME620.roa (raw, json)
Hash identifier: GTj3PZmGyhGyOPD0pKVTAAyNUi7VxsfQXn+0n78uhSY=
Subject key identifier: 7C:8B:83:FC:40:DE:37:06:50:CA:B6:45:20:D1:7D:E1:43:04:EB:6D
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F42AAC5D6532FBBD4853F25D3F6B920
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/fIuD_EDeNwZQyrZFINF94UME620.roa
Signing time: Sun 01 Jan 2023 21:35:18 +0000
ROA not before: Sun 01 Jan 2023 21:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398108
IP address blocks: 92.204.128.0/20 maxlen: 20
92.204.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:aa:c5:d6:53:2f:bb:d4:85:3f:25:d3:f6:b9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c8b83fc40de370650cab64520d17de14304eb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:3c:e3:5e:a1:21:31:04:0f:cc:e9:58:c8:
88:2d:f2:fd:1d:be:58:5a:e0:a4:82:15:d5:b2:37:
6f:44:6b:6d:5b:a6:43:85:4a:36:8b:bb:7b:6d:21:
6a:10:48:93:b0:0c:2d:3f:ba:54:a9:6d:89:a7:d6:
90:92:59:5e:5d:73:6e:04:e0:18:4a:7e:86:2d:5a:
c2:a3:6b:b0:d3:db:27:33:d0:6b:a6:65:c1:ad:00:
a4:8d:f6:69:67:f0:88:52:e8:d1:c1:ce:17:2a:dc:
08:85:99:f0:69:cf:5f:63:e9:35:10:8f:e5:82:ed:
bc:3c:f0:25:a4:83:11:be:83:09:a6:12:97:43:fa:
c4:00:e0:fe:65:50:7b:1a:14:16:1a:f8:26:36:38:
8a:e4:99:9c:9c:1d:db:29:b7:f7:d9:62:b9:5e:e2:
a5:d9:02:3d:28:ed:09:04:44:c9:0e:cb:37:59:23:
4b:5d:74:2b:df:76:85:4d:44:60:79:d2:e3:b1:95:
a0:2c:99:47:09:19:3b:92:82:67:76:a4:3f:eb:4f:
98:cd:91:ed:9d:58:27:fe:77:00:c7:7c:9b:23:43:
5f:16:64:6a:1a:da:98:97:ef:42:bd:72:c8:fb:fa:
51:23:4c:18:a3:02:22:50:4c:e8:33:ff:19:1b:f8:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:83:FC:40:DE:37:06:50:CA:B6:45:20:D1:7D:E1:43:04:EB:6D
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/fIuD_EDeNwZQyrZFINF94UME620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.204.128.0-92.204.151.255
Signature Algorithm: sha256WithRSAEncryption
0c:28:73:11:56:b7:91:c5:55:d9:c1:8f:02:a2:b6:d1:85:b4:
17:28:06:65:3b:36:e0:8b:30:31:82:82:6a:f9:93:f5:49:23:
cb:54:f6:e3:d0:77:32:f9:6b:aa:d8:3b:34:b0:7a:f4:1b:37:
90:03:4c:07:f3:c3:f9:fc:11:72:a7:f2:26:97:fe:5a:33:0e:
81:5f:b5:43:34:40:cc:50:82:bf:99:ad:48:0c:52:f6:33:99:
8d:5c:00:68:3f:85:25:8e:b3:40:97:71:71:ce:4b:20:24:cd:
92:3e:fe:81:c5:e2:b9:b9:9b:75:bf:de:27:b1:de:96:e3:28:
57:30:d3:09:d9:de:8e:8e:df:f8:0e:65:c7:65:29:93:fe:0d:
ad:08:42:a1:dd:51:c6:1a:ae:3f:47:1d:38:d0:f8:b8:79:1a:
a5:a2:e9:eb:27:c6:9d:c3:cc:b5:31:21:6f:8e:69:9e:8b:c2:
ea:63:ea:0f:f0:80:18:b1:72:14:31:ec:33:f7:99:49:3c:29:
b3:5e:83:f1:df:ec:d8:bf:5c:83:36:73:bf:8a:a8:a4:1e:6c:
86:cb:ae:3f:0b:da:31:f3:7c:ba:d0:8a:ec:3e:76:3c:43:c6:
fe:33:ae:26:76:f1:15:6d:e4:86:2c:18:0f:3a:58:fd:9f:d0:
6d:70:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org