Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/agQTSssLTezZbEl92Ifatew_K68.roa
File: agQTSssLTezZbEl92Ifatew_K68.roa (raw, json)
Hash identifier: s3rJ2vau+PsTbYVchvSFk19i3rGG5IL9uey4gw5C/Ok=
Subject key identifier: 6A:04:13:4A:CB:0B:4D:EC:D9:6C:49:7D:D8:87:DA:B5:EC:3F:2B:AF
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018F9A8C1C3E8F1B5F369B984665DCD7B87E
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/agQTSssLTezZbEl92Ifatew_K68.roa
Signing time: Tue 21 May 2024 09:47:04 +0000
ROA not before: Tue 21 May 2024 09:47:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 06:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:8c:1c:3e:8f:1b:5f:36:9b:98:46:65:dc:d7:b8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: May 21 09:47:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a04134acb0b4decd96c497dd887dab5ec3f2baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:8e:6b:c3:96:f2:82:71:24:87:d0:a7:58:
b8:dd:dc:8c:af:c1:50:ec:af:29:84:98:c0:a9:4b:
c9:2b:d3:21:f0:34:c6:58:cb:25:94:01:3e:b2:f1:
31:e8:54:53:0e:24:26:ca:3c:c0:3b:6d:1f:4e:35:
9c:e8:98:45:9d:d4:f5:4c:62:c2:7b:74:b6:3d:46:
38:05:43:96:06:38:3c:48:cd:e2:b6:92:dd:b2:65:
94:13:fa:65:fc:a2:83:04:37:68:b8:a2:4a:1b:05:
ad:8d:08:52:0e:12:a9:be:53:2b:86:be:40:33:68:
17:71:a1:22:5b:ef:72:3f:bf:2a:24:92:fe:98:a7:
39:28:a4:5b:6f:91:9f:01:8b:85:8f:4f:f1:fb:49:
ed:2f:4a:22:94:d1:39:b9:fb:57:9a:91:d7:90:b9:
67:89:d8:33:9e:61:de:2a:6f:b3:0a:97:a1:a1:42:
31:1b:5a:be:1c:02:2d:fc:56:c9:99:8a:e5:73:77:
15:9a:89:96:fd:17:4b:6b:03:c8:a7:08:8c:d7:40:
59:b3:b7:cb:a3:d8:bc:84:d0:d0:46:ef:3b:2c:bb:
a8:66:cb:00:b3:05:22:2e:f8:70:c3:0d:cd:b8:2f:
5d:a0:ec:2a:e5:99:62:3e:0f:45:96:4c:15:61:da:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:13:4A:CB:0B:4D:EC:D9:6C:49:7D:D8:87:DA:B5:EC:3F:2B:AF
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/agQTSssLTezZbEl92Ifatew_K68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
38:bc:48:e5:25:b0:37:3c:e5:be:d4:8c:7b:6c:f6:ff:12:50:
61:30:ce:ce:bd:5d:16:22:77:e9:81:9d:d3:15:de:f1:6d:3a:
99:4b:1d:05:7f:90:f4:b2:e8:62:7c:e4:55:d9:09:e7:64:15:
e0:21:28:a4:4a:62:3c:ad:8f:44:d8:b9:8f:dd:81:08:bf:b2:
92:1f:cc:72:1e:11:00:1b:8d:f7:73:d4:f5:74:cc:a4:00:04:
93:5d:1e:ac:1c:e5:56:c3:3c:6d:85:f2:1c:4c:dc:e3:62:f9:
5e:5d:2c:46:a8:4a:1c:ea:87:69:af:e3:67:2c:09:1f:6e:bb:
4c:6f:c2:75:f6:09:13:f5:98:91:0f:b9:13:ee:e0:7d:9f:87:
74:5b:70:65:45:7c:09:3d:bc:82:9e:de:f6:08:ed:6e:ea:2e:
2b:42:08:e3:fb:21:97:a4:6e:ca:1c:9c:20:a8:f5:00:4e:4e:
54:3a:2c:9f:3f:61:87:01:fd:49:80:62:85:73:19:14:96:57:
3e:b2:52:a1:21:5f:80:24:34:d7:aa:7e:b2:81:41:bb:3f:6e:
3b:18:c9:c3:2a:00:2a:c9:40:8f:62:c9:b1:0d:8d:44:ac:81:
68:8c:6f:ee:c3:14:65:6e:b0:9a:dc:1c:83:37:75:f0:4a:4f:
d1:6a:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 12:41:29 2024 by rpki-client on console-ams.rpki-client.org