Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/9-o4uXcOEwAj5O0FMxjVKtPQozk.roa
File: 9-o4uXcOEwAj5O0FMxjVKtPQozk.roa (raw, json)
Hash identifier: ExxBC5rkObU5//x7yRSmwXL7iYdptaOA3+FD4fLcOME=
Subject key identifier: F7:EA:38:B9:77:0E:13:00:23:E4:ED:05:33:18:D5:2A:D3:D0:A3:39
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 018987C8707A23F059308E8CE7A94DA49CF9
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/9-o4uXcOEwAj5O0FMxjVKtPQozk.roa
Signing time: Mon 24 Jul 2023 12:03:27 +0000
ROA not before: Mon 24 Jul 2023 12:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197753
IP address blocks: 92.118.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:c8:70:7a:23:f0:59:30:8e:8c:e7:a9:4d:a4:9c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Jul 24 12:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7ea38b9770e130023e4ed053318d52ad3d0a339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:06:90:6d:fe:3b:48:d3:c3:08:06:69:37:
d4:84:42:9d:df:ab:c9:0b:5e:00:47:e3:a6:ed:0c:
1c:1a:5c:54:e0:6a:b3:5a:63:de:f1:c2:64:a3:55:
6f:be:ba:2f:d3:65:42:9d:5f:66:9a:a2:d6:ab:b1:
4e:90:3c:03:a3:ac:82:75:39:19:75:db:a7:04:0a:
28:4b:70:fd:5c:c3:9e:2b:83:ea:d6:9f:6e:b1:3a:
bb:1f:76:c6:11:c7:91:4b:db:5f:b8:d9:d4:2a:6d:
df:47:d3:f9:3e:2e:83:2f:04:c5:38:33:cb:99:ce:
53:1a:5d:68:22:5f:24:d7:57:d9:59:ec:9c:4b:e9:
2a:07:66:31:34:64:fe:0d:28:b4:ee:76:f1:f2:08:
7a:b4:a5:e2:92:51:d2:1d:43:04:c4:82:0d:03:9c:
27:81:6d:e5:a9:06:8a:54:0d:b8:14:a5:9c:53:86:
ff:03:39:9e:29:94:df:bf:f4:d3:47:91:35:71:40:
a9:1b:40:2e:15:53:f9:51:c2:8f:c6:aa:ad:45:45:
49:a9:56:d7:01:c6:6e:bd:6a:67:16:a4:a8:b0:e1:
0a:ed:a0:c4:98:ef:f3:a4:9d:ca:a6:df:cc:d4:26:
54:ee:c3:fa:ca:d7:1a:0a:53:59:38:01:2c:dc:ba:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:38:B9:77:0E:13:00:23:E4:ED:05:33:18:D5:2A:D3:D0:A3:39
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/9-o4uXcOEwAj5O0FMxjVKtPQozk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9f:39:1f:66:2c:3a:93:2f:61:fb:4c:7f:76:59:41:b4:2c:
0d:c6:39:72:cf:46:48:7e:c4:cb:6f:5a:75:50:23:bb:b9:5f:
9a:70:3c:31:e8:8a:ea:9d:e1:28:88:b0:de:00:07:26:a4:f4:
3d:2b:2f:3b:46:cd:e0:97:7b:79:2e:52:bd:42:be:67:90:42:
6b:14:81:a5:fe:6f:98:b9:e7:aa:a2:4e:32:a1:36:ea:15:de:
44:7e:39:df:e8:89:2d:e8:af:b7:a6:f5:30:6b:52:c7:aa:36:
27:25:86:5a:97:60:4e:b6:a2:b4:61:d2:21:d1:87:13:9e:25:
80:e1:b8:df:ee:99:4b:2e:af:cd:a5:6d:83:5a:cc:4c:4e:e0:
4b:4a:91:1a:bd:74:99:64:38:07:ad:da:0f:f5:4c:33:6d:e2:
07:17:c3:fd:76:d1:e7:d7:ba:02:7e:a1:65:d6:6c:95:58:20:
c1:58:0c:43:e3:a4:c4:ff:31:bd:31:8b:5c:62:c8:b6:fc:10:
f5:47:8c:dd:c9:c5:66:cf:a2:95:41:32:30:ab:53:d0:f1:2f:
7a:67:aa:1f:2c:9b:13:ea:a6:de:b0:0b:17:2b:a6:f2:b7:6c:
4e:c7:71:1f:f3:61:cb:9a:9d:0c:2c:f7:7e:a8:8e:64:aa:5b:
a0:4e:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:33 2024 by rpki-client on console-ams.rpki-client.org