Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/Y98oWx4lR79ujfhZqxlkNPfYmtE.roa
File: Y98oWx4lR79ujfhZqxlkNPfYmtE.roa (raw, json)
Hash identifier: ++CHiGZz0mUSIH9uXpTV8FddPo6Kg1CHAoumN9XmdS8=
Subject key identifier: 63:DF:28:5B:1E:25:47:BF:6E:8D:F8:59:AB:19:64:34:F7:D8:9A:D1
Certificate issuer: /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial: 018572E8069064E74F8CC4E1C4D0C010B37C
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/Y98oWx4lR79ujfhZqxlkNPfYmtE.roa
Signing time: Mon 02 Jan 2023 14:34:46 +0000
ROA not before: Mon 02 Jan 2023 14:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43955
IP address blocks: 92.119.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:06:90:64:e7:4f:8c:c4:e1:c4:d0:c0:10:b3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Validity
Not Before: Jan 2 14:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63df285b1e2547bf6e8df859ab196434f7d89ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:50:da:f1:70:bb:bb:d4:f8:a7:a7:0f:dd:
cc:6c:bb:6b:73:58:a1:40:e8:22:ff:1c:6c:b0:cb:
d0:e9:da:8c:6f:a2:f8:81:b5:54:c2:03:d1:35:e1:
0d:5e:19:1e:4a:e4:e1:db:ca:a0:9c:9f:4b:67:a2:
41:46:8c:2d:2d:00:5a:f0:73:38:40:ca:7b:26:d1:
75:37:44:0e:f6:dc:83:ee:9b:57:a4:26:3d:e8:ed:
4d:f4:74:42:88:bb:18:33:d0:c8:4f:3e:23:5a:00:
35:8b:0e:89:dd:86:e3:cd:d1:6b:10:79:56:59:0d:
0c:ac:8e:fc:c4:de:d6:c5:dd:c1:3e:e6:52:96:4c:
de:2d:4e:29:50:de:13:d8:9d:b4:c3:51:1c:19:75:
79:8c:d1:d4:53:04:a4:2c:4b:8a:fc:9f:fa:f0:6f:
47:91:7c:d7:52:31:fb:4c:85:dd:01:65:55:82:c0:
0b:b9:e1:39:28:f6:e9:4c:05:46:b9:a6:ba:b0:df:
8f:8a:8e:2a:9b:35:4a:4a:4d:4e:a0:0c:14:2e:5c:
58:a0:e9:21:b3:a0:54:08:5f:c9:53:23:39:b6:8a:
1a:f7:30:cd:f5:c7:5b:ab:1e:35:1b:da:fb:dc:2f:
a0:dd:e0:e1:ed:0f:94:c8:a7:40:cf:6d:91:ac:48:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DF:28:5B:1E:25:47:BF:6E:8D:F8:59:AB:19:64:34:F7:D8:9A:D1
X509v3 Authority Key Identifier:
keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/Y98oWx4lR79ujfhZqxlkNPfYmtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.58.0/24
Signature Algorithm: sha256WithRSAEncryption
31:63:8a:03:b5:24:be:c5:a7:6e:71:d7:40:8c:33:da:c7:31:
5d:51:7e:08:12:02:2e:81:78:c2:b7:1f:90:9f:0e:3d:c6:d7:
47:33:46:62:32:71:dd:29:a8:26:d5:62:a1:fb:e0:43:70:3f:
63:2f:ad:93:08:0f:2e:f8:d8:2a:05:e5:d5:44:b8:af:63:b4:
0d:f3:cb:5c:e7:e2:a9:c0:91:19:d8:da:1a:98:c0:e7:0a:5d:
73:2f:3f:52:65:e4:62:84:a4:4c:a3:b3:a9:c7:b8:db:eb:2f:
a8:06:e0:2d:5e:6e:5b:bc:35:ce:ad:be:14:5d:5a:f9:c0:ea:
a5:87:cd:69:61:f5:ba:82:74:83:c1:96:07:bb:67:da:d9:a3:
7f:c9:c0:c6:82:78:c8:3f:a3:fe:74:f0:c9:b2:da:d3:d5:d5:
34:e2:bd:19:ad:14:f8:77:a4:a8:1f:56:ae:33:b9:ac:f0:8f:
98:dd:d0:96:3f:68:bb:b3:3b:4e:b6:4b:30:6e:31:dd:ea:3a:
1a:78:95:ce:db:0c:98:00:b2:b7:cf:9e:f8:33:3a:91:72:8c:
f6:91:14:d8:ad:43:58:fd:de:4e:e7:5c:d6:c9:08:1c:cc:bb:
95:ec:a9:93:e3:b7:a2:90:55:a7:cc:46:ce:81:42:d4:65:e4:
1f:4d:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:42 2024 by rpki-client on console-ams.rpki-client.org