Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/J2xB8HzakqiwttdB_66GN-V2OIU.roa
File: J2xB8HzakqiwttdB_66GN-V2OIU.roa (raw, json)
Hash identifier: 3/uZBjZE/JZvQXKQnva0Fcohzre3RfJ1FYZOZE+qRlg=
Subject key identifier: 27:6C:41:F0:7C:DA:92:A8:B0:B6:D7:41:FF:AE:86:37:E5:76:38:85
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0187233FCCF7EA6AD99FA56E887045DC55A5
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/J2xB8HzakqiwttdB_66GN-V2OIU.roa
Signing time: Mon 27 Mar 2023 13:26:36 +0000
ROA not before: Mon 27 Mar 2023 13:26:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 92.249.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 12 Apr 2023 19:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:3f:cc:f7:ea:6a:d9:9f:a5:6e:88:70:45:dc:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Mar 27 13:26:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=276c41f07cda92a8b0b6d741ffae8637e5763885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:03:d6:47:8c:36:0b:6c:31:c6:d2:9f:9d:
2b:78:f0:21:1d:ed:d3:b1:09:ba:42:58:5a:61:35:
85:c7:16:26:7d:e5:d3:bd:83:62:e8:35:ac:6d:23:
ce:70:2c:51:6b:1c:19:e8:ef:da:67:fb:48:9b:39:
a8:e6:b4:0f:f5:30:0a:b4:fc:a6:3b:9a:74:b6:c9:
f5:57:28:9a:a2:a9:1d:cc:dd:98:6c:ca:31:19:00:
84:49:3f:f1:11:32:c1:3c:14:05:35:e1:88:40:11:
04:49:e9:2c:9a:b0:20:f6:1f:32:aa:05:47:50:f6:
52:0e:a3:c8:de:36:b0:8f:91:fa:90:a9:82:01:ed:
2e:7e:da:5b:de:08:c6:63:dd:89:ee:d3:c0:0b:35:
a5:a9:67:18:f2:0c:a3:70:b9:ce:50:5d:1d:f7:4c:
43:d7:9b:fb:12:3d:85:04:ac:2d:71:d9:97:20:ff:
33:33:2a:8d:5f:79:b8:49:9b:2b:6b:af:bb:e1:cb:
4c:a8:8f:30:c2:b1:54:30:a9:9c:98:07:3f:43:58:
cc:e9:da:31:ee:a3:58:e6:ca:3e:f5:b5:d9:af:b8:
a6:82:7f:ac:8d:ce:0b:64:37:78:ad:c4:cd:6b:68:
a4:3b:c8:f6:58:2b:11:86:9c:0e:3a:64:ce:3a:1e:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:41:F0:7C:DA:92:A8:B0:B6:D7:41:FF:AE:86:37:E5:76:38:85
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/J2xB8HzakqiwttdB_66GN-V2OIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.60.0/22
Signature Algorithm: sha256WithRSAEncryption
44:9a:b2:9d:31:31:17:5c:39:13:e5:0d:62:b0:90:72:77:fe:
a3:b1:d8:ec:3c:90:2a:04:11:10:a2:96:85:eb:33:84:4d:9a:
22:cf:64:55:4f:09:7b:08:a6:0f:4f:f4:eb:d5:8f:47:77:d4:
8d:67:66:85:f2:19:4d:a0:32:b0:80:c4:99:a5:3c:36:66:ef:
5c:a4:ad:5f:20:a7:9a:53:96:72:84:a6:10:3b:d0:71:24:22:
98:c0:fa:c2:99:a0:2c:1b:1b:b5:2f:32:85:81:43:6c:7f:c5:
8d:cd:18:ed:fd:fd:2f:79:e2:c2:83:fa:80:7d:0a:58:0e:da:
b1:87:5e:9b:51:50:b4:1b:ff:63:c2:d8:2f:00:1e:42:34:0e:
ec:4f:d1:5e:ce:50:42:05:ea:b9:8d:d1:9a:fa:6f:62:5a:57:
2f:14:d9:5e:67:5c:66:2f:97:ee:4d:3f:1a:e9:6f:72:58:8f:
5a:fb:81:0a:93:66:e5:61:84:dd:7f:91:d7:cd:30:23:3d:da:
ba:cf:00:67:01:16:96:a6:49:70:f3:5f:cf:fd:c0:6f:0a:17:
9e:20:ac:67:9e:04:a4:10:c4:b6:3f:6f:6f:ec:f3:87:8f:f4:
d0:8a:b7:dd:07:50:63:a3:37:a9:aa:ff:95:1b:0b:1b:3f:67:
ae:29:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org