Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/fg7UtzgoaFQS30cVG6qJrcB23wY.roa
File: fg7UtzgoaFQS30cVG6qJrcB23wY.roa (raw, json)
Hash identifier: kYOPxIKRv4QzQS6PeDrMUUhx5AZRuItbFhKEfU4xAeY=
Subject key identifier: 7E:0E:D4:B7:38:28:68:54:12:DF:47:15:1B:AA:89:AD:C0:76:DF:06
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 018572FA86C1714B164DCBFD64B5DC85D17A
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/fg7UtzgoaFQS30cVG6qJrcB23wY.roa
Signing time: Mon 02 Jan 2023 14:54:59 +0000
ROA not before: Mon 02 Jan 2023 14:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213117
IP address blocks: 92.119.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:86:c1:71:4b:16:4d:cb:fd:64:b5:dc:85:d1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jan 2 14:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e0ed4b73828685412df47151baa89adc076df06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:cc:d9:b6:5b:4f:cb:34:2e:d5:cd:63:78:
7c:3b:63:8a:3b:f7:72:a9:56:f1:41:8a:33:ba:64:
38:07:c5:ac:6e:0c:1b:27:33:2a:9d:0e:f1:9b:88:
3d:a0:dc:b9:c9:5d:4a:93:99:38:4f:f2:01:97:c8:
15:04:c3:06:04:65:8b:ec:08:62:8f:0e:5c:eb:72:
69:35:63:99:fb:89:05:19:ac:d6:95:fc:9b:2d:66:
92:1a:d5:d8:8d:01:f1:1f:53:33:42:22:df:9f:b3:
9a:1b:87:9d:4e:69:aa:3f:75:ee:2e:11:9d:d6:f9:
a1:b3:40:a2:7e:db:e8:c0:29:67:6b:15:18:f1:16:
db:59:9c:7f:4b:e5:64:33:14:10:b5:e1:69:43:49:
7f:a0:e1:f1:81:af:1d:5a:52:bd:89:00:55:8f:43:
01:b0:b4:38:97:c0:58:34:64:6e:dd:2d:82:00:a9:
c6:4c:74:0c:f3:45:2e:a6:77:0b:a6:7f:d8:5a:0c:
55:71:cd:89:a5:3c:4a:8d:b7:18:25:a5:39:22:51:
1d:f7:a3:e0:a4:eb:62:bf:13:48:be:f3:5d:98:ea:
2d:f9:52:4c:7c:82:34:2a:d0:0b:34:84:ee:5b:9a:
28:84:c6:87:93:bf:c7:b8:e2:ad:19:13:57:63:40:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:D4:B7:38:28:68:54:12:DF:47:15:1B:AA:89:AD:C0:76:DF:06
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/fg7UtzgoaFQS30cVG6qJrcB23wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.216.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e7:ae:91:44:27:66:9c:3b:74:4c:b8:1e:2f:70:20:b4:eb:
2e:49:16:ae:83:42:a7:24:2c:9a:b9:e3:5f:ba:0d:09:61:20:
b0:5a:ab:ac:c9:4d:8e:51:d0:d6:0c:73:26:53:29:4a:ff:4a:
5d:07:bf:21:63:fb:60:66:af:a5:f3:ff:30:3e:d6:ad:f3:2f:
7d:81:ce:83:43:87:49:8a:bc:56:9f:b2:27:2a:d1:15:9c:e2:
9d:22:a8:c7:f0:7d:de:35:a3:8b:ed:1a:f2:fe:8a:f5:89:fa:
fa:22:e1:92:85:5a:c1:88:19:b1:a4:63:33:ae:f6:6b:a1:4e:
27:06:7a:b6:19:1c:25:d0:3e:85:d4:e8:7c:07:05:ea:7b:f9:
09:f6:81:72:cd:9a:30:44:81:9e:21:71:cd:ef:81:29:f8:78:
29:68:af:70:95:8c:bc:21:56:97:43:e1:97:2b:b0:52:66:fd:
32:91:7e:54:45:ee:9c:03:82:ca:fd:05:e8:82:ea:2a:5a:02:
20:44:70:bb:aa:26:17:9c:9c:96:59:d9:c6:aa:3b:b3:f3:44:
41:70:a8:4a:6a:1c:32:4c:ec:05:1c:52:d5:cf:bb:9a:c1:94:
ae:0c:77:1a:7d:60:a4:05:1e:c4:fb:50:f6:a5:1c:76:37:08:
92:58:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:31 2024 by rpki-client on console-fra.rpki-client.org