Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7seVXtFenAGozTIV4BJM2qn3glQ.roa
File: 7seVXtFenAGozTIV4BJM2qn3glQ.roa (raw, json)
Hash identifier: UQAyj54GWFRoBy2GFTO6RfXyA98sJrQ1IZD5o2ylii4=
Subject key identifier: EE:C7:95:5E:D1:5E:9C:01:A8:CD:32:15:E0:12:4C:DA:A9:F7:82:54
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D31248050AE8D195194F6290E028C2E22
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7seVXtFenAGozTIV4BJM2qn3glQ.roa
Signing time: Mon 22 Jan 2024 12:28:12 +0000
ROA not before: Mon 22 Jan 2024 12:28:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 92.249.48.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 05:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:24:80:50:ae:8d:19:51:94:f6:29:0e:02:8c:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 22 12:28:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eec7955ed15e9c01a8cd3215e0124cdaa9f78254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:0e:57:1d:2d:68:9d:d6:c7:74:02:83:ad:
1d:0d:a7:c9:c7:fd:ac:dd:3f:5e:12:2c:21:8a:12:
88:42:10:7d:75:8e:1e:09:0d:67:6a:a6:2c:64:f8:
59:be:80:5b:38:7f:72:fe:5d:bf:6d:13:e7:5a:86:
1d:5a:4b:96:36:51:c0:09:34:c5:3d:34:42:88:26:
3d:9e:c5:f8:79:07:03:d3:da:43:7a:c6:77:42:0d:
ae:1b:ed:c2:45:15:ec:eb:5d:73:f1:83:70:40:2b:
52:2c:9d:2a:42:ff:07:f8:5f:b1:53:0b:82:79:98:
a4:ef:3a:26:a1:84:af:85:82:78:30:74:dd:57:01:
0e:50:13:26:60:69:d7:79:33:85:ce:22:db:09:cf:
9c:d6:6a:46:dd:f4:1b:e0:d5:57:f7:b4:56:55:c1:
80:2e:9e:77:d8:16:83:14:68:57:6e:64:2f:81:96:
e9:90:27:e2:ad:3f:ac:d4:e8:0a:95:8a:a4:d3:61:
b6:79:d1:65:5d:b2:54:69:5d:b6:cf:97:73:fe:d6:
6d:6e:22:38:c7:7b:54:5e:e4:74:10:c0:9e:5e:ee:
74:54:a2:05:78:e4:e4:5d:ca:83:5d:64:52:c7:7f:
e8:3a:9a:fb:e2:91:e6:65:8c:cf:18:42:e9:6f:e2:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C7:95:5E:D1:5E:9C:01:A8:CD:32:15:E0:12:4C:DA:A9:F7:82:54
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7seVXtFenAGozTIV4BJM2qn3glQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.48.0/24
193.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
20:94:84:37:1e:50:4a:7d:ff:51:30:6a:54:0c:40:f2:cc:0f:
0e:8c:60:96:46:08:16:db:a8:c9:bc:5f:18:5d:ed:83:61:36:
b1:32:eb:62:5c:a2:c2:bb:90:b6:9a:29:cf:f3:26:24:36:70:
19:13:76:bd:ea:f3:81:59:b5:b7:24:5a:da:4d:56:54:d7:7b:
e4:32:d1:31:f6:27:4f:94:b8:78:34:a2:2a:60:3d:e5:2c:9a:
5f:e1:3d:6a:20:9b:c6:08:18:b0:26:60:d8:42:00:0c:36:0b:
40:f9:26:7d:66:7e:0e:6b:11:6e:3e:c2:73:7a:70:a8:b8:91:
30:a7:ae:04:f6:c6:e3:75:fc:1f:82:15:e2:d0:fd:e4:df:a9:
a6:09:fe:90:0f:f6:2f:09:47:a2:ce:44:8e:af:75:f3:ed:85:
00:b1:c5:d2:c5:b1:bc:e4:ea:45:85:b4:75:4f:7f:4f:fe:f0:
19:91:83:53:0f:04:c5:27:4b:ba:80:94:3a:91:5d:43:19:2d:
b4:36:c7:fa:05:3c:1c:08:0b:c1:e6:a7:8e:f4:ca:c0:0a:57:
bc:03:38:1b:fe:34:c1:26:71:35:47:54:e7:eb:5e:2e:4c:86:
85:c1:60:6a:32:eb:28:22:95:05:5e:6d:19:0a:0d:66:7e:8c:
4a:c4:58:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 08:39:54 2024 by rpki-client on console-ams.rpki-client.org