Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/C90_hw9eFVeBhzfVdYGonhyKFTY.roa
File: C90_hw9eFVeBhzfVdYGonhyKFTY.roa (raw, json)
Hash identifier: bg93Td35dJQECck1HeL6WhNM/M85445uvT359KUsBFQ=
Subject key identifier: 0B:DD:3F:87:0F:5E:15:57:81:87:37:D5:75:81:A8:9E:1C:8A:15:36
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 01856F54A97EEC35A46EBFE126AE4BDBB706
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/C90_hw9eFVeBhzfVdYGonhyKFTY.roa
Signing time: Sun 01 Jan 2023 21:54:57 +0000
ROA not before: Sun 01 Jan 2023 21:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20825
IP address blocks: 192.109.211.0/24 maxlen: 24
192.109.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:a9:7e:ec:35:a4:6e:bf:e1:26:ae:4b:db:b7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Jan 1 21:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bdd3f870f5e1557818737d57581a89e1c8a1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:69:98:4f:aa:8b:d6:c9:40:e6:04:9a:1d:
0c:65:f0:5c:fc:42:54:47:a0:b8:44:28:44:9f:4a:
3e:22:4f:96:91:ad:e2:85:51:26:60:3f:00:00:92:
b9:41:4e:b7:38:b7:3b:2d:a4:c6:5f:f2:42:fb:58:
4a:c2:90:07:e4:f2:c7:3f:36:53:d2:c9:93:4c:46:
49:09:15:4d:9f:07:c3:44:3a:cc:80:9b:33:65:0b:
d1:1a:84:d4:57:47:c9:73:1c:21:a1:ec:1a:b9:05:
42:b2:28:2d:17:89:16:c3:93:12:6a:b4:82:b6:13:
a5:8a:b8:52:65:86:50:f8:0a:a9:92:fd:f1:25:2d:
1e:b3:a5:36:39:a0:d9:6d:d7:ab:a7:68:a8:88:59:
df:fc:2f:d8:c9:55:63:48:2b:f7:f9:b9:b9:cd:b2:
7b:92:f0:d0:ca:ce:2a:8f:e2:32:42:db:cb:cb:c6:
bc:c2:04:7f:8c:f2:3c:7e:d7:6a:b9:be:f6:db:70:
dc:cf:11:03:7e:5d:2e:1d:f5:40:01:90:13:c0:0f:
91:46:19:8a:fb:4b:22:93:fe:94:cc:dc:36:87:80:
e2:02:48:25:5d:16:24:be:99:3e:8b:df:fd:c7:ae:
25:10:9e:d0:36:44:39:e9:3f:a1:c1:1e:55:1f:2b:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DD:3F:87:0F:5E:15:57:81:87:37:D5:75:81:A8:9E:1C:8A:15:36
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/C90_hw9eFVeBhzfVdYGonhyKFTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.211.0-192.109.212.255
Signature Algorithm: sha256WithRSAEncryption
56:75:8b:f2:61:86:fa:01:14:ab:38:16:7e:18:b8:ea:6f:05:
41:33:79:75:02:75:7d:cf:23:93:97:0d:f4:95:16:29:c1:09:
4d:c9:cc:7b:e8:92:a2:3a:46:cc:15:6e:5a:e4:a2:fc:2d:c6:
a0:89:97:ed:02:97:f2:f6:dc:cf:32:89:ac:9f:84:8a:fc:56:
d6:af:50:52:cc:96:0d:34:ac:c1:cb:39:47:bb:90:f1:a0:23:
2d:22:c2:06:9b:ac:3d:63:96:90:08:65:74:8e:7a:b0:c5:fc:
d2:ba:6f:96:0f:17:76:59:c2:b4:11:45:6d:1f:1b:e3:ba:e1:
a5:94:11:b4:4b:90:94:45:8b:c2:46:d1:d6:da:e6:4b:eb:f4:
3c:6e:a1:10:fb:4e:47:e4:e0:f3:67:74:49:1a:70:51:7f:18:
16:b7:52:fb:c1:0c:7f:0f:80:06:de:e6:4b:19:2d:f7:74:7b:
47:80:92:f9:22:c0:45:af:b1:59:78:6f:7b:83:32:32:f1:42:
a0:d3:2f:4c:de:b6:99:57:65:39:20:85:3b:93:9a:b0:6b:dc:
dc:05:70:2b:17:33:f3:47:3a:8a:81:2f:da:e7:e0:59:94:b9:
03:d4:5e:f8:eb:d3:93:90:38:91:2f:85:59:96:50:46:ab:03:
c3:8e:b5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:36 2024 by rpki-client on console-fra.rpki-client.org