Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/yxUhHxdgaERGomuewL74O1x_y7E.roa
File: yxUhHxdgaERGomuewL74O1x_y7E.roa (raw, json)
Hash identifier: t4vHPG5m5PEAb/GH8LxUraxHUOajyyJNzLPVWt+tIlE=
Subject key identifier: CB:15:21:1F:17:60:68:44:46:A2:6B:9E:C0:BE:F8:3B:5C:7F:CB:B1
Certificate issuer: /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial: 018CC6B9127E437062E3F4224A8B3BBA7A0A
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/yxUhHxdgaERGomuewL74O1x_y7E.roa
Signing time: Mon 01 Jan 2024 20:31:06 +0000
ROA not before: Mon 01 Jan 2024 20:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57935
IP address blocks: 92.119.56.0/24 maxlen: 24
92.119.59.0/24 maxlen: 24
185.73.115.0/24 maxlen: 24
185.73.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 15:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:12:7e:43:70:62:e3:f4:22:4a:8b:3b:ba:7a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb15211f1760684446a26b9ec0bef83b5c7fcbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:2f:71:ae:e9:6e:33:5a:c2:a1:9e:7c:5e:
7c:83:3a:b7:1e:52:c5:68:6c:8d:e8:9c:d4:5d:85:
d8:b9:c3:4e:1d:3d:86:dd:41:f4:16:06:50:5f:c2:
13:c9:0c:16:86:56:75:ba:cf:1c:3b:99:90:67:8c:
a1:09:0b:e3:cb:6d:49:3f:79:ee:fb:f3:86:19:79:
c5:fd:36:55:d7:e2:c9:47:b8:9f:d3:50:b9:a7:19:
0e:8b:1e:d8:82:40:70:70:1b:07:d9:fe:37:7f:fc:
4a:d5:90:b5:35:7f:e2:34:4a:0b:37:52:7d:bc:a8:
8c:39:20:4f:ec:2c:97:47:4f:8a:86:b4:1a:3c:dc:
56:ab:5f:30:69:46:ba:02:37:26:1a:af:64:34:00:
7d:ed:b2:15:3c:96:ef:6e:9f:11:73:cb:db:16:2d:
36:06:b4:ed:6a:f2:a7:a2:29:90:9d:06:f2:6e:01:
8e:ba:00:24:df:40:1b:b5:58:fb:ed:00:42:b0:19:
03:be:ed:cc:d5:65:0f:da:00:07:c3:94:a6:d3:bb:
d8:6b:4a:7a:97:be:a5:3d:42:9e:fc:b2:2d:31:41:
0b:2e:67:5a:ee:49:67:39:12:de:ed:22:2b:03:77:
72:41:25:65:b8:5f:7b:0f:d4:ea:38:4a:fa:8a:a0:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:21:1F:17:60:68:44:46:A2:6B:9E:C0:BE:F8:3B:5C:7F:CB:B1
X509v3 Authority Key Identifier:
keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/yxUhHxdgaERGomuewL74O1x_y7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.56.0/24
92.119.59.0/24
185.73.113.0/24
185.73.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e2:6d:5f:0d:e8:70:b7:68:1a:d2:22:27:7b:79:79:25:2f:
db:30:3a:bb:43:f3:ee:10:02:32:67:27:46:0c:68:d1:7a:bf:
51:5f:b8:52:5e:94:d6:5b:3c:a2:a6:75:d1:b2:31:73:0e:b4:
b2:2a:13:d0:6e:4f:16:16:d1:76:83:79:19:4c:31:bd:db:6e:
3b:12:61:b5:b0:7d:73:f7:75:90:32:65:ed:5f:d8:53:b4:c2:
b4:63:d6:ec:89:b2:6d:2d:fc:82:ae:01:30:92:9a:cb:2c:b1:
8a:67:5b:fe:a6:21:33:0e:11:7a:b0:a8:9a:d3:3d:90:af:1b:
59:ce:aa:5c:fc:d0:74:5e:81:a4:b5:ff:0f:6f:76:fc:28:96:
8c:db:42:c3:2d:b6:f8:e7:5c:9c:95:f5:79:2a:58:a3:7c:0a:
80:97:23:5a:6e:11:59:72:d3:2d:04:ac:a0:35:ef:8d:71:25:
b3:70:0f:2b:a0:82:67:ee:52:e7:d4:be:67:88:bc:94:a6:71:
d9:89:b2:09:cb:99:b1:a0:e8:5a:13:76:90:e2:d4:8b:15:7a:
77:13:9d:f1:6f:59:ac:23:8e:ed:db:c9:c8:e8:c1:52:36:d2:
c1:19:2e:57:3d:d6:02:dc:cd:1d:ac:2a:16:2c:cf:4a:8f:bc:
5c:e6:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org