Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/bOUyVo6IBNMI2S1lPMWr1DJI8bg.roa
File: bOUyVo6IBNMI2S1lPMWr1DJI8bg.roa (raw, json)
Hash identifier: iUz13TokVuBE4X15U+b9uivgWLrqGyVqE9JLBTjgaYs=
Subject key identifier: 6C:E5:32:56:8E:88:04:D3:08:D9:2D:65:3C:C5:AB:D4:32:48:F1:B8
Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial: 0185771E71C8BCB0DF49E1846F65C51C6F23
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/bOUyVo6IBNMI2S1lPMWr1DJI8bg.roa
Signing time: Tue 03 Jan 2023 10:12:41 +0000
ROA not before: Tue 03 Jan 2023 10:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199773
IP address blocks: 92.60.155.0/24 maxlen: 24
92.60.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:1e:71:c8:bc:b0:df:49:e1:84:6f:65:c5:1c:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Validity
Not Before: Jan 3 10:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ce532568e8804d308d92d653cc5abd43248f1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:01:0c:b7:cd:16:9f:5d:9a:ae:b1:f6:6d:
a5:1d:80:af:e1:78:c5:39:14:84:ba:ff:6f:51:cf:
de:8c:df:78:42:f4:03:f3:ef:4e:20:ae:03:bc:7f:
ad:fd:6e:db:5b:6b:2c:15:06:52:bd:d7:2e:ab:18:
d3:b8:22:37:c4:7f:98:05:c2:68:0d:f7:a3:76:22:
fd:af:f1:47:1e:28:26:7d:cf:4a:7d:05:dc:d3:85:
a8:08:07:eb:fc:c5:81:b7:db:02:c9:f0:23:7c:56:
44:f0:02:ae:ea:03:5a:60:1b:48:57:b3:ca:9e:b1:
43:6e:c3:b7:b9:a2:1c:62:91:e0:bf:d4:80:b1:4b:
59:fd:0f:d1:69:8c:c2:2d:7d:61:89:35:ae:53:4f:
76:55:63:93:03:dd:fa:24:fc:81:23:82:90:0f:c8:
09:ba:8b:09:29:c6:05:ab:25:c3:80:3e:01:b7:61:
0a:93:44:1c:7b:9a:5f:89:1d:97:41:66:aa:d4:38:
7e:5e:a1:a6:c6:75:bc:95:16:05:0e:42:74:f8:22:
e5:97:a8:a0:69:8f:f7:9d:8d:bf:29:90:ce:31:1c:
a4:b2:fd:90:c9:58:32:c4:e7:8b:9e:8d:63:89:00:
04:da:65:50:06:1c:83:05:0f:10:7d:c7:92:94:8c:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:32:56:8E:88:04:D3:08:D9:2D:65:3C:C5:AB:D4:32:48:F1:B8
X509v3 Authority Key Identifier:
keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/bOUyVo6IBNMI2S1lPMWr1DJI8bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.155.0/24
92.60.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3b:a0:52:7b:a7:fb:79:e0:73:b3:27:fb:8e:d1:41:b2:00:
b2:80:40:a9:f7:ca:9a:7d:a6:0a:a5:32:f0:1f:34:0a:0f:32:
3b:db:0f:21:14:d3:56:e2:f6:41:a6:5e:c8:9e:5a:66:e1:72:
1e:fa:99:24:eb:dd:1a:d0:e5:76:eb:2e:67:96:c9:de:51:a0:
ca:06:15:97:b0:1f:84:44:3e:4f:52:cb:e8:fe:97:94:f6:f6:
03:86:55:47:32:9f:31:c6:19:1c:b0:47:24:4f:e6:24:6b:e2:
ed:ab:8f:ad:11:41:2a:ac:10:f6:38:bb:be:c9:e6:06:30:e9:
b7:cb:46:6b:5d:a2:3b:7c:28:6c:a7:b8:e5:cc:a8:7c:a2:fc:
98:7a:a2:1d:30:ba:91:29:da:ec:80:e5:13:3f:36:21:2c:a7:
65:b2:05:53:62:b1:25:45:b5:63:e8:ba:8e:07:47:d2:73:02:
a4:85:3b:e6:06:64:04:8a:54:a1:1d:44:ee:3d:26:20:53:3b:
a1:e9:1c:3f:0a:f4:75:82:ec:a1:ea:f0:8a:7e:d1:9a:c2:b7:
02:de:a9:f3:fa:4c:92:b4:fc:18:ca:b2:3a:3a:d3:33:b7:05:
14:14:66:e1:54:1c:c2:ea:18:cc:de:d0:e3:ba:d7:50:1d:ea:
c4:1d:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:54 2024 by rpki-client on console-ams.rpki-client.org