Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/slKA-FeAJ4nNw-_IxJDD-J6pd4o.roa
File: slKA-FeAJ4nNw-_IxJDD-J6pd4o.roa (raw, json)
Hash identifier: /VFm0VgNWFLA1biPyDmJGGpXJohUo4SljkldUvcUWCU=
Subject key identifier: B2:52:80:F8:57:80:27:89:CD:C3:EF:C8:C4:90:C3:F8:9E:A9:77:8A
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 0185723108F67C9A0DFA5E31BDFDB4E7812D
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/slKA-FeAJ4nNw-_IxJDD-J6pd4o.roa
Signing time: Mon 02 Jan 2023 11:14:54 +0000
ROA not before: Mon 02 Jan 2023 11:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211325
IP address blocks: 92.61.180.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 24 Apr 2023 08:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:08:f6:7c:9a:0d:fa:5e:31:bd:fd:b4:e7:81:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Jan 2 11:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b25280f857802789cdc3efc8c490c3f89ea9778a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:86:8a:7e:b7:01:97:a7:a5:8c:c0:2a:27:
a8:e9:68:f4:69:2d:86:29:b4:9f:9a:3a:ca:27:2e:
5a:df:0f:5a:25:e4:68:39:c6:5a:93:9c:34:c3:1d:
1a:63:b7:67:87:e1:4e:07:74:6e:11:63:63:3f:0f:
bf:db:41:34:87:09:e0:50:49:d3:b7:9c:be:b6:3f:
ea:b6:eb:8d:7e:35:27:8b:dd:9b:bb:e9:d4:c5:c0:
78:aa:61:20:91:c5:3d:95:3e:d5:df:47:14:42:71:
0d:3d:24:10:18:64:52:22:60:12:3a:4c:a8:d0:f1:
32:04:87:53:c4:bb:ca:0d:3f:7d:58:a5:75:19:3f:
2f:2b:0e:2c:fe:31:71:6f:0f:a9:67:37:c9:0b:fc:
8b:92:b0:f4:20:1f:59:36:5c:28:2b:2d:05:6b:45:
77:61:8d:c4:e9:f6:b5:bb:0a:1f:11:a3:0a:65:2e:
67:43:af:b3:03:86:99:3d:17:c7:c0:c4:20:94:39:
9d:9f:f4:92:a7:3b:f6:f1:46:08:06:3a:6b:a5:b7:
e0:96:6f:65:0f:e1:43:8c:76:94:bf:25:38:08:da:
ec:21:4f:88:fe:d0:e6:42:76:d1:47:49:e4:58:8b:
c9:11:8e:3d:80:e4:41:39:4e:3c:98:3d:5a:04:54:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:80:F8:57:80:27:89:CD:C3:EF:C8:C4:90:C3:F8:9E:A9:77:8A
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/slKA-FeAJ4nNw-_IxJDD-J6pd4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:03:f8:2f:d5:b3:3d:df:83:c0:21:a7:3b:2d:b6:3c:b2:d0:
19:b1:98:a9:73:e5:57:6d:5e:a5:98:b3:eb:77:c0:5c:1e:44:
e8:a2:9c:3b:21:ef:7e:84:cc:e2:18:0f:80:27:e0:58:93:3e:
47:4b:90:1d:03:30:3d:74:a9:52:ed:20:ad:23:24:41:0c:12:
d3:84:0b:38:b1:c7:d8:79:29:af:21:fe:66:5f:b6:75:2c:00:
a4:a5:73:e2:64:1f:b7:02:04:b6:1a:3c:9f:3d:69:9c:5b:e9:
78:1c:b3:a2:6a:49:4e:7b:3d:50:61:3a:8e:2d:44:73:82:d6:
a2:62:fb:85:6f:65:e3:ed:e9:9c:da:7c:f4:33:ee:b6:40:51:
f3:c9:c5:b9:2e:d4:8d:db:41:f9:1c:6a:96:24:57:46:ed:f1:
b5:c9:ef:e1:30:08:0b:69:7c:a2:ba:5e:f8:31:3c:09:84:7b:
5a:74:cd:27:3c:4e:36:d4:c8:2d:0c:c5:59:3a:63:c3:02:83:
32:d9:12:76:08:5d:11:45:f4:1f:45:77:37:cd:bf:af:de:71:
82:87:00:bf:ae:f5:7c:f0:f0:3d:cb:21:50:a2:40:9b:13:f6:
0e:d4:f7:7c:4e:e7:e2:2c:0f:e5:16:9b:02:8f:05:63:cb:32:
75:80:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:21 2024 by rpki-client on console-ams.rpki-client.org