Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/j06sHF4mt3dl6vX0e3D0XIiHLj8.roa
File: j06sHF4mt3dl6vX0e3D0XIiHLj8.roa (raw, json)
Hash identifier: jgM0BP3n7sZMzLJ8xsA96bKraIylqegbwt86Srx+HWA=
Subject key identifier: 8F:4E:AC:1C:5E:26:B7:77:65:EA:F5:F4:7B:70:F4:5C:88:87:2E:3F
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0188C10EF94320C462A201CC222F8BC428E9
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/j06sHF4mt3dl6vX0e3D0XIiHLj8.roa
Signing time: Thu 15 Jun 2023 21:56:03 +0000
ROA not before: Thu 15 Jun 2023 21:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 193.32.184.0/22 maxlen: 22
92.249.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 Sep 2023 20:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c1:0e:f9:43:20:c4:62:a2:01:cc:22:2f:8b:c4:28:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jun 15 21:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4eac1c5e26b77765eaf5f47b70f45c88872e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:65:33:a5:7c:9c:03:59:e9:dc:6c:f9:08:
5a:d2:8e:43:35:1e:bc:11:7b:56:e0:58:77:b4:7c:
a9:8f:92:08:30:83:18:f6:8f:c9:48:a9:3d:c8:89:
ef:8a:e1:a0:ee:0a:0e:5d:84:4d:fd:14:d8:80:44:
9e:3f:1f:17:f8:42:d3:54:0b:52:87:06:a7:20:4e:
cb:da:32:e0:33:85:d3:45:ec:5e:3c:ed:f6:4f:ec:
44:fe:03:43:7c:94:7c:53:80:c1:63:05:f6:ce:5e:
2c:ea:52:d0:e1:a1:82:af:a2:a5:3b:a7:2d:59:65:
92:39:1c:29:b8:00:d7:ee:b9:aa:9f:7d:5e:19:d7:
3d:d5:be:58:ec:d9:9e:c8:6b:8e:de:46:56:89:9f:
2e:6a:9b:6b:c4:f9:cb:a9:15:f4:fd:40:5c:24:e4:
97:7b:11:be:88:42:18:b1:26:2e:9e:b6:72:51:66:
20:34:33:68:47:7d:d3:f5:33:4e:d2:42:a8:da:98:
50:23:ed:0b:ce:f5:ee:04:25:3f:2e:a1:3c:3c:aa:
7e:40:01:27:c8:bd:bd:7d:17:93:c4:bb:17:3e:53:
6d:80:8f:53:cd:74:76:0f:40:3e:c0:92:7a:d2:19:
2b:05:58:82:00:47:0b:86:b5:f7:8f:40:78:61:e2:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:AC:1C:5E:26:B7:77:65:EA:F5:F4:7B:70:F4:5C:88:87:2E:3F
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/j06sHF4mt3dl6vX0e3D0XIiHLj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.60.0/22
193.32.184.0/22
Signature Algorithm: sha256WithRSAEncryption
87:9a:42:0d:ee:85:09:54:a7:0c:e7:ca:cc:79:cf:27:ac:c2:
9f:50:7b:ad:0e:17:20:6f:a1:7d:6f:29:0b:d4:cb:a4:dc:83:
0b:d5:d4:44:92:02:ed:8d:09:78:97:5d:ba:67:46:2e:cd:13:
71:d3:82:2c:ba:07:fc:c6:44:f1:92:f5:f3:f1:00:ca:c2:45:
c9:43:a6:26:d8:c5:cd:7c:3d:ba:b9:14:7f:3d:6f:5b:08:de:
e6:9d:ac:5d:ef:25:34:0d:c9:a9:e3:72:2d:16:40:7b:ae:7a:
e1:0c:a7:17:16:66:24:3d:53:11:9d:ac:b2:a9:0f:ac:9a:1b:
fc:30:2d:22:37:91:89:dd:5f:ba:b7:5d:ee:16:01:38:0a:7e:
b2:ce:38:0d:1f:e2:f8:bb:cd:5f:fc:ca:89:a2:1c:b6:c0:27:
d9:9a:43:0c:a1:05:59:08:ae:0a:a0:a4:e0:58:84:be:37:ad:
91:9d:47:11:20:60:33:4f:61:39:3e:a2:e8:6b:16:a1:f6:cf:
37:f7:67:79:bd:9b:73:a9:b0:fd:e7:42:4d:b6:09:c2:1a:cb:
0c:56:a5:23:89:1c:14:3b:a4:b9:10:61:e3:24:5c:ed:ac:fa:
0c:16:25:00:02:17:3e:ff:90:9f:c6:e3:ae:10:03:48:7e:7d:
b6:28:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org