Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/Gc3jbUKwV6Q0YFg5hlH5OQ2eT-k.roa
File: Gc3jbUKwV6Q0YFg5hlH5OQ2eT-k.roa (raw, json)
Hash identifier: W73hcf8IzJqikHt0s4onPn9XYrIglkOAUw3aY6E4nMw=
Subject key identifier: 19:CD:E3:6D:42:B0:57:A4:34:60:58:39:86:51:F9:39:0D:9E:4F:E9
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01856CC16322BBE36E68A4EED5E2DBD2BD35
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/Gc3jbUKwV6Q0YFg5hlH5OQ2eT-k.roa
Signing time: Sun 01 Jan 2023 09:54:51 +0000
ROA not before: Sun 01 Jan 2023 09:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44185
IP address blocks: 92.60.48.0/22 maxlen: 24
185.91.200.0/22 maxlen: 24
2a01:b200::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:63:22:bb:e3:6e:68:a4:ee:d5:e2:db:d2:bd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jan 1 09:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19cde36d42b057a4346058398651f9390d9e4fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:e5:12:88:00:6a:0a:d7:0e:f4:ce:01:de:
8f:21:ff:20:36:cd:31:f3:6c:3e:8a:70:76:48:d9:
f2:3f:c6:34:87:d7:1f:14:52:01:e4:51:6b:9c:6e:
2b:4b:ae:ce:43:92:6f:b9:20:94:bc:ef:68:ea:43:
7c:cd:d3:29:a8:54:d5:19:6a:49:24:d2:d9:17:f4:
fb:e3:03:32:43:82:49:af:9b:86:78:c1:c2:08:7e:
2f:b8:09:ec:32:0b:9d:37:c9:b5:db:66:c2:53:7c:
b5:7a:f5:59:a0:b4:2f:46:5c:aa:06:1b:42:8a:48:
ef:90:aa:68:d2:69:a0:91:24:93:b4:22:8e:d6:f1:
76:dc:dd:90:ac:61:30:b4:d4:46:26:8e:f9:c1:74:
cb:6b:13:d1:8e:67:88:74:ee:74:df:5e:74:68:a4:
3f:23:c8:25:cf:94:c0:ba:d2:93:93:32:c4:31:d6:
2d:f1:9f:60:08:6c:3c:91:5b:90:99:5e:97:7d:2f:
40:4c:a8:f9:94:95:b8:b8:a3:09:86:1f:9f:b7:18:
50:93:b8:c9:1f:91:cf:5b:a1:4f:fc:41:6e:5b:8d:
71:8d:9e:28:b1:01:3f:83:3a:fa:05:16:79:6e:93:
5e:6a:46:1f:06:db:35:c3:51:2a:7c:ec:27:e7:fb:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CD:E3:6D:42:B0:57:A4:34:60:58:39:86:51:F9:39:0D:9E:4F:E9
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/Gc3jbUKwV6Q0YFg5hlH5OQ2eT-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.48.0/22
185.91.200.0/22
IPv6:
2a01:b200::/32
Signature Algorithm: sha256WithRSAEncryption
8a:0d:7c:3f:42:e0:cf:bd:b8:94:c8:5f:30:ef:50:14:ff:8b:
06:b3:b6:f1:8c:4c:a4:ae:c4:ff:ed:f5:1f:d4:88:c4:33:39:
f8:7e:2f:d4:74:df:b4:7f:35:95:ad:66:e6:cc:27:14:d5:e8:
90:12:f8:8d:69:52:17:b9:8c:d0:b1:70:8b:ec:47:ba:7c:7e:
c3:78:06:1e:87:ef:ad:51:e9:6e:9a:24:2c:f7:95:98:b3:78:
1b:df:bf:f1:8b:2f:33:63:d1:05:d5:7c:64:a6:fd:16:fb:1e:
27:ef:2c:4c:90:05:80:9b:19:b2:ef:0b:37:df:dd:a8:7a:61:
d2:c7:9d:1a:5c:01:ae:b1:aa:91:23:db:25:d4:0a:d9:86:f6:
17:fa:a2:bf:47:20:bf:46:96:81:fc:b5:f2:20:17:2d:02:c8:
86:a4:a2:e1:88:71:57:2d:d5:7b:52:82:78:e1:dc:a9:8c:ba:
30:18:1a:b2:13:f2:1e:67:1b:46:33:75:2f:e8:e3:b3:c5:f1:
af:ae:10:58:e0:f2:61:8b:5e:bd:9d:2d:a9:11:48:64:cb:75:
e5:6a:a3:12:81:14:43:4a:b4:8a:de:05:6f:b0:5b:b1:b2:17:
f8:a5:d3:64:51:62:ac:4f:ec:55:f4:56:ec:a1:ec:84:95:31:
6c:78:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:41 2024 by rpki-client on console-fra.rpki-client.org