Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/9xjydTiyUCV9P179q_Iw0xsXhy0.roa
File: 9xjydTiyUCV9P179q_Iw0xsXhy0.roa (raw, json)
Hash identifier: gXClTWnSMdFxTDjSCQT7f+3TC7uKRV6+1SuDMbdCIko=
Subject key identifier: F7:18:F2:75:38:B2:50:25:7D:3F:5E:FD:AB:F2:30:D3:1B:17:87:2D
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018C349C1A7DB56C3A10C3BE0E8D5D45A04F
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/9xjydTiyUCV9P179q_Iw0xsXhy0.roa
Signing time: Mon 04 Dec 2023 11:34:54 +0000
ROA not before: Mon 04 Dec 2023 11:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 94.141.100.0/22 maxlen: 32
92.246.132.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 12 Dec 2023 14:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:9c:1a:7d:b5:6c:3a:10:c3:be:0e:8d:5d:45:a0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Dec 4 11:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f718f27538b250257d3f5efdabf230d31b17872d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:6d:7b:c1:a7:0d:1e:87:40:1b:61:54:7f:
47:bd:b8:e9:0c:ad:cb:57:1c:77:9a:70:48:e4:6f:
10:39:e3:e9:1a:4b:4f:1c:7b:59:82:a6:3b:e8:98:
af:2c:84:bc:a7:1a:fe:6f:07:3a:62:6a:bb:b3:38:
bb:9d:5e:bb:f7:46:81:b7:b3:22:75:62:4f:b3:2f:
95:ef:f3:63:df:cf:e9:1b:fd:4e:92:85:ea:1c:40:
38:49:4b:14:a5:b2:d8:e3:bc:f5:6f:90:89:98:af:
33:cb:53:74:94:35:9c:d0:6e:2d:c7:18:e8:a4:93:
85:61:5d:ac:19:e8:1c:a8:db:8b:ab:26:ce:8e:08:
94:db:48:b5:b2:0d:d4:77:86:d1:56:01:61:33:a9:
01:03:8c:58:70:83:8a:8e:c6:9b:55:4f:09:ba:8c:
34:d7:12:79:49:f4:f2:38:58:e7:47:d1:4d:18:22:
da:e3:2c:d2:b0:68:e7:21:3b:64:e9:f5:07:6a:51:
7a:e0:be:f2:3b:a9:30:11:b3:9f:cb:c1:0b:54:7f:
82:fe:56:2d:df:00:c1:17:2f:13:de:ea:8c:02:96:
75:24:a9:0f:42:c2:fb:6f:45:d3:1f:e0:68:37:f4:
32:0a:b9:90:b5:38:9e:41:33:42:e9:e5:67:04:7a:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:18:F2:75:38:B2:50:25:7D:3F:5E:FD:AB:F2:30:D3:1B:17:87:2D
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/9xjydTiyUCV9P179q_Iw0xsXhy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.132.0/22
94.141.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:7d:ee:b0:db:b0:04:b2:cd:97:b9:af:50:a8:d9:01:c2:60:
76:0a:bf:d3:95:de:25:dd:ca:5d:9c:ae:7f:cf:35:e3:9f:25:
d3:5c:03:01:ed:ef:fb:a9:43:d9:c9:a8:45:fc:63:16:72:4d:
af:47:af:ab:cd:2d:7c:1e:d8:52:76:64:5a:af:2c:d7:1c:c7:
c6:bf:57:62:db:cf:f8:50:ea:b2:33:f7:0a:fc:c0:38:a0:34:
d5:d8:d5:32:32:fb:2b:b8:e9:6a:68:20:a2:1c:73:ff:b4:db:
3b:52:ce:01:f4:71:f5:3d:10:79:c8:88:1a:3e:10:99:88:9c:
98:06:d0:67:5b:ee:37:dd:2d:af:2d:f8:06:7b:13:56:fe:38:
66:55:18:a1:c2:f3:f0:21:83:d6:2d:a3:2d:8e:9f:ef:00:3f:
3b:5b:b6:0a:4f:d2:1d:61:19:7c:0f:72:06:27:9c:59:3f:ea:
f4:1d:d5:55:a0:a7:e9:d7:d5:d2:3e:76:ef:39:79:a5:1d:cb:
75:dd:e4:10:84:7e:79:a8:a1:68:01:6f:61:5e:50:6f:f0:bb:
42:77:f7:f7:c4:44:57:e9:7c:4b:27:69:c4:9c:60:a4:c0:a6:
ad:10:2f:82:f1:a6:98:18:0a:16:4e:6d:74:47:6e:94:a2:e9:
b3:92:d5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org