Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/AQc5jNbngV9gJKJjoEI_ViwzBGQ.roa
File: AQc5jNbngV9gJKJjoEI_ViwzBGQ.roa (raw, json)
Hash identifier: rllptF0iFIOsita0UBFRatPmL5DUGgTf3Ceeel6Xqnc=
Subject key identifier: 01:07:39:8C:D6:E7:81:5F:60:24:A2:63:A0:42:3F:56:2C:33:04:64
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018BC960F9224918BA30B8BB8EDB5EBC8AF3
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/AQc5jNbngV9gJKJjoEI_ViwzBGQ.roa
Signing time: Mon 13 Nov 2023 15:50:57 +0000
ROA not before: Mon 13 Nov 2023 15:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 94.141.100.0/22 maxlen: 32
92.246.132.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 27 Nov 2023 15:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:60:f9:22:49:18:ba:30:b8:bb:8e:db:5e:bc:8a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Nov 13 15:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0107398cd6e7815f6024a263a0423f562c330464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:17:84:b4:21:a5:1b:9e:ee:46:6f:ba:e6:
d2:f4:7f:3d:52:e2:3f:7f:c1:d1:85:d8:1d:dc:39:
0d:17:dd:f0:b1:5a:63:13:db:9a:68:53:f7:07:be:
79:1f:2b:f9:99:19:5f:db:f4:df:c7:4a:0c:71:a2:
ed:c7:70:4b:4e:ed:ec:7a:71:3f:b5:6e:c9:f4:d1:
b0:95:77:e7:b3:43:d3:28:6e:8a:b5:be:b9:39:4b:
75:88:50:7c:cd:55:bb:6c:f9:52:71:cb:ed:03:9f:
3f:aa:81:ca:82:bd:65:6b:dc:24:16:bc:f7:98:f0:
04:14:55:cb:b3:46:c4:32:2f:87:6b:ff:3e:91:01:
02:70:b7:bc:b7:23:aa:a2:30:be:ae:b8:eb:3a:3d:
eb:e9:65:3e:05:93:8e:ce:80:d6:46:91:2d:69:37:
6b:8d:f5:51:98:c4:97:a7:8f:59:54:f4:2b:78:d6:
16:d3:a1:2f:b4:c0:fd:f7:be:08:c2:9e:14:59:47:
05:0e:f5:f8:20:fc:2f:f5:a4:a5:b2:b5:ed:48:2c:
fb:46:55:a9:7c:27:e1:17:bd:b0:04:a3:4a:38:9a:
1e:3a:a7:71:a9:9f:d0:56:2d:cd:77:0a:89:73:70:
70:f3:37:8d:2e:da:5b:ca:b3:28:3d:39:0a:be:ae:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:07:39:8C:D6:E7:81:5F:60:24:A2:63:A0:42:3F:56:2C:33:04:64
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/AQc5jNbngV9gJKJjoEI_ViwzBGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.132.0/22
94.141.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:c0:54:6e:3c:01:12:7d:1b:a0:7f:51:62:e4:6d:d7:64:cd:
25:40:e1:75:f2:01:8a:f3:35:eb:e6:58:41:6e:94:63:a3:e2:
7e:ae:0e:13:07:f3:8a:3f:d5:a0:e3:b6:67:36:36:3c:45:0d:
4e:5a:59:cf:b2:05:3c:22:1a:53:44:e6:49:44:8a:f5:fd:6a:
ba:bc:c1:e7:b0:f4:b1:1e:91:5e:fd:3e:0b:3b:3c:ea:dc:89:
21:c4:dd:6d:b9:f0:fe:8a:c1:e6:1d:be:e6:7d:e4:a9:d0:1e:
54:13:c7:c8:45:ed:ca:db:6d:2a:1f:67:aa:d3:65:2e:f4:29:
ea:45:02:fe:a7:3c:a5:a4:80:11:0a:e1:c5:44:93:a6:92:ac:
ce:10:0a:c5:92:c8:2a:8b:29:b3:39:ca:5e:cf:c1:6e:b1:54:
a4:9a:58:3c:21:42:cd:e9:34:69:95:66:0f:f8:a1:b1:b7:59:
51:16:82:be:2b:dd:aa:00:9d:8d:62:46:2a:9b:cd:55:ef:3a:
58:27:5b:83:41:41:0c:9a:33:d7:03:8a:3c:76:34:ec:47:7e:
80:cb:ac:a8:f3:a6:82:86:55:f2:8b:94:ec:de:a4:b1:95:ba:
5b:d1:99:38:74:c2:69:bb:be:a0:1b:66:e2:f8:70:19:0f:e4:
ca:66:74:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org