Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/iSvMNFiy_M8uo4tA-mqM7HntOns.roa
File: iSvMNFiy_M8uo4tA-mqM7HntOns.roa (raw, json)
Hash identifier: 0xAE1h5i9xBRqyaVdJxomsjbBtvB2oDhNeAm+Tdakik=
Subject key identifier: 89:2B:CC:34:58:B2:FC:CF:2E:A3:8B:40:FA:6A:8C:EC:79:ED:3A:7B
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018CDAB2023A3291E4F0EAAF1E4AD07DA048
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/iSvMNFiy_M8uo4tA-mqM7HntOns.roa
Signing time: Fri 05 Jan 2024 17:35:48 +0000
ROA not before: Fri 05 Jan 2024 17:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 92.246.136.0/22 maxlen: 32
Validation: Failed, certificate revoked on Thu 01 Feb 2024 14:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:b2:02:3a:32:91:e4:f0:ea:af:1e:4a:d0:7d:a0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 5 17:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=892bcc3458b2fccf2ea38b40fa6a8cec79ed3a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:5a:c4:57:e6:5b:ba:09:8c:a0:70:ac:dd:
29:5f:58:08:f1:9b:a0:b7:06:3e:f0:c2:fa:aa:5e:
d4:45:75:d0:2a:a9:e3:d6:99:f2:2b:75:5b:80:2b:
2f:a0:bc:c2:23:17:ec:32:33:eb:ea:5f:70:25:ee:
60:cf:14:98:c5:00:a1:4a:2e:88:6a:af:06:ce:59:
13:a7:ed:94:6c:20:d7:e2:ae:7c:3a:29:22:57:6b:
c0:16:b3:d7:54:45:d5:7b:b2:93:de:b7:f1:94:8c:
62:d8:14:05:89:e5:ef:00:07:ce:97:ef:1c:af:2c:
5b:0f:60:8a:ba:6c:0a:c2:e0:8d:4c:15:40:38:b2:
dd:06:ed:e7:07:3a:d2:02:c2:89:6e:58:d0:71:8f:
d5:aa:30:af:54:41:ea:77:f7:7e:36:cb:54:02:00:
36:8f:43:b5:ba:23:00:46:c2:2b:82:e6:d3:48:cf:
08:e7:e5:b6:bd:93:90:c3:83:ff:0e:7b:ab:73:78:
4a:0c:18:dc:82:1a:e8:74:4b:6b:b6:dd:b5:22:78:
59:a5:77:5b:16:11:12:97:80:e1:68:c2:91:d4:4f:
5c:d2:aa:2a:e8:99:f6:7d:43:46:bc:5d:57:8a:14:
b5:19:7c:8b:54:30:3e:0a:ff:89:a5:6b:5a:35:28:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2B:CC:34:58:B2:FC:CF:2E:A3:8B:40:FA:6A:8C:EC:79:ED:3A:7B
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/iSvMNFiy_M8uo4tA-mqM7HntOns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.136.0/22
Signature Algorithm: sha256WithRSAEncryption
95:e1:83:0d:c5:f0:b0:24:13:69:10:91:ee:8a:87:5c:0e:a0:
05:33:d0:49:63:b8:82:9f:b5:98:68:2c:8c:81:f7:f4:b0:70:
c7:8c:dc:1b:06:7f:0f:a0:0b:d3:f1:f4:69:d7:27:81:eb:01:
5e:d1:1c:37:66:57:e4:e5:f5:c4:51:37:8f:f7:a8:73:38:28:
4a:e1:ce:d1:f2:31:a3:67:e8:43:9f:28:7d:ce:ea:4e:05:32:
b0:ab:8a:4c:aa:aa:7a:3a:4c:06:8f:02:d9:d2:47:b4:f6:55:
07:80:98:44:82:46:66:54:4b:fe:fd:c3:f0:96:59:ed:fd:e7:
31:e0:a5:c0:4d:57:d3:cf:64:93:ab:93:87:79:20:13:fe:1e:
19:20:9d:25:16:b4:db:ab:04:73:75:8a:42:04:ab:ad:71:da:
36:59:16:8d:8e:04:4c:87:f8:6a:86:65:17:e9:cd:2d:f1:12:
b1:31:56:4d:08:e5:b2:8a:19:ef:a2:c6:84:b0:f3:21:2b:08:
e6:3c:ec:5f:f2:e0:c9:d0:1c:ba:91:d1:9f:1c:8c:f5:8e:0f:
e3:fd:01:6a:ce:74:eb:f1:dc:18:98:52:ea:b1:71:ce:f9:32:
42:cc:ac:6d:76:ff:9d:f2:01:2b:f7:ec:3e:04:24:f0:2f:78:
e9:6a:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org