Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VAGQbUBJxEsl1HMoN9sdIlnUh_c.roa
File: VAGQbUBJxEsl1HMoN9sdIlnUh_c.roa (raw, json)
Hash identifier: q6IFoJtgQi+3F4NBT6IssKrkZl1qvPmTtXqnLIEOt7Q=
Subject key identifier: 54:01:90:6D:40:49:C4:4B:25:D4:73:28:37:DB:1D:22:59:D4:87:F7
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD531FAAEEDDD8D4D50E84B9C9E9FBC
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VAGQbUBJxEsl1HMoN9sdIlnUh_c.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56684
IP address blocks: 92.114.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:31:fa:ae:ed:dd:8d:4d:50:e8:4b:9c:9e:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5401906d4049c44b25d4732837db1d2259d487f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:50:28:f1:0f:2f:15:4e:78:73:56:f2:ac:
a8:28:17:97:f0:59:9b:04:ed:76:48:fd:38:a0:c0:
5d:e7:ff:5c:7a:44:32:75:39:0a:e7:62:28:e4:ab:
79:0f:bb:fa:36:ee:84:3c:b7:29:bb:e8:4e:8c:44:
91:85:c6:ae:bf:ba:2e:6b:e3:9f:0f:0f:e7:bf:e3:
14:ed:20:20:46:ee:e2:0e:54:fb:fa:47:b2:d2:47:
5b:c7:e6:7f:3c:9f:c9:03:44:84:89:53:87:db:61:
8c:ee:47:b2:53:3e:38:b2:2f:d0:15:95:66:d1:ef:
cc:bd:c7:13:75:e1:9e:76:61:ae:6d:9c:ed:9e:76:
06:98:27:92:00:cf:ab:02:93:76:f0:55:36:a6:fa:
4f:f2:3f:66:49:1e:5a:07:ec:e8:eb:42:22:67:38:
e9:2b:d0:c4:81:7e:5c:e2:f2:28:fe:c6:c0:5e:66:
f1:19:15:2e:81:a5:71:35:55:06:2d:f7:9c:d0:c4:
68:4a:a5:ce:a6:24:6c:1e:a5:ea:7c:65:9f:d1:af:
32:c3:4b:69:c5:f8:9c:25:bc:ed:bd:4b:7f:d2:a2:
11:d5:3f:52:97:62:cd:75:b4:c1:94:27:c7:40:20:
e1:cd:d7:1f:74:c0:47:d2:33:77:9d:1b:b4:4e:56:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:01:90:6D:40:49:C4:4B:25:D4:73:28:37:DB:1D:22:59:D4:87:F7
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VAGQbUBJxEsl1HMoN9sdIlnUh_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.106.0/24
Signature Algorithm: sha256WithRSAEncryption
db:5a:33:2c:a9:b0:69:05:fe:da:22:38:51:6f:52:58:bc:43:
43:e9:0c:91:a0:cc:99:91:d4:af:0e:a3:ea:5d:45:d6:f8:b9:
8b:3b:4d:8e:7a:d8:ab:c3:d0:2c:bd:92:1d:cc:b6:d9:87:94:
d9:ea:53:d6:06:ac:9a:2b:69:63:c5:d2:97:3d:c7:8b:ed:3c:
bc:df:bf:3c:e7:0d:be:4b:30:96:1f:69:56:b0:88:4e:fc:dc:
7a:d6:33:ee:ed:e5:c7:a3:56:bb:1d:b7:92:d8:7b:d1:00:94:
6a:dd:a0:dd:67:ba:2b:cf:32:bc:3e:70:8f:24:89:d7:77:cf:
10:a3:9f:ef:55:fe:22:f1:d8:bf:93:60:14:0a:13:a3:98:92:
31:7d:3c:3d:d1:6a:d7:b2:68:c0:a8:bf:60:56:3b:a5:46:df:
4d:64:e2:72:26:38:0b:36:9e:d8:38:15:67:7d:11:21:54:ba:
2b:c7:53:29:a9:e5:2e:5d:c1:17:7c:60:ff:8c:be:5e:7a:27:
8c:68:ec:1e:79:a6:ab:1f:83:66:0d:de:5e:fb:e7:cc:0e:34:
33:ce:85:f4:7b:f1:d7:51:d0:b1:c6:7b:6c:87:0c:20:d5:f6:
22:46:cd:e7:a2:4d:0b:a7:5c:9d:9b:ce:3b:8c:24:bf:4a:e9:
9b:57:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org