Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iDjEwFpA6cyXiunpclrXMmvGbHg.roa
File: iDjEwFpA6cyXiunpclrXMmvGbHg.roa (raw, json)
Hash identifier: DpHC9GW98wLHLE5wDapV7k9zXnoOZqPYa+vakrXguSM=
Subject key identifier: 88:38:C4:C0:5A:40:E9:CC:97:8A:E9:E9:72:5A:D7:32:6B:C6:6C:78
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF97D78EFE37650A963E294ECA53A73
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iDjEwFpA6cyXiunpclrXMmvGbHg.roa
Signing time: Mon 02 Jan 2023 00:54:59 +0000
ROA not before: Mon 02 Jan 2023 00:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62411
IP address blocks: 92.247.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7d:78:ef:e3:76:50:a9:63:e2:94:ec:a5:3a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8838c4c05a40e9cc978ae9e9725ad7326bc66c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:c5:1c:93:84:d2:8f:50:4b:10:dc:19:c3:
64:4f:07:43:c8:01:73:c2:2f:c8:ea:05:f7:da:99:
1a:99:2d:e6:35:65:e4:27:da:53:88:ec:a6:0b:43:
88:88:a6:8a:07:c9:4d:b2:7b:fe:86:90:db:1b:ee:
74:be:b1:0a:ce:81:cf:09:46:12:87:07:a5:6e:9f:
ac:5f:b7:f6:4b:b1:f6:23:82:5c:40:b4:78:85:09:
a7:ec:36:1a:e1:5e:ba:55:e3:27:20:15:c6:bc:02:
21:e9:f7:cd:da:8b:22:d3:84:83:d9:c6:9c:47:fa:
ca:ca:82:dc:f9:07:19:16:0a:8a:e8:e9:55:d0:31:
22:9c:e4:10:09:cd:57:9f:0d:ec:5e:01:79:10:ea:
30:69:f9:0f:41:01:5c:02:3a:7e:ca:cf:5f:39:a6:
14:5e:aa:37:b1:be:a9:1c:0f:97:68:e9:9a:6f:a8:
22:fc:88:d7:e4:18:45:68:96:84:50:9c:c8:b7:df:
35:e1:31:75:49:4d:d0:c3:c8:a1:b6:57:2d:e8:bc:
ff:58:b0:b9:d8:29:cf:b2:9e:bd:a1:8b:1e:52:08:
a6:b9:a5:4b:b6:07:78:6a:08:b9:b8:cf:13:f7:c5:
0e:0f:c4:e6:63:8b:d2:c2:8c:f5:6e:06:fd:4b:bd:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:38:C4:C0:5A:40:E9:CC:97:8A:E9:E9:72:5A:D7:32:6B:C6:6C:78
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iDjEwFpA6cyXiunpclrXMmvGbHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.188.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2e:00:9e:eb:3c:49:2c:a1:39:61:3f:5e:e4:3e:f3:66:58:
22:38:9f:3c:0f:4b:11:1f:38:98:38:08:72:d7:58:12:38:4b:
5f:4a:7f:b4:d1:f8:1f:44:96:f7:e6:1f:b8:d3:92:e2:fa:b0:
43:77:73:5d:17:96:3c:07:65:dd:02:0c:f6:f8:a0:8b:01:b7:
a6:b0:72:fd:2e:6c:b7:4b:b2:e6:fb:35:1f:67:22:20:9c:d1:
93:bf:fc:bd:fe:b5:04:05:a1:06:6a:d8:0b:22:2e:89:41:c3:
ce:15:da:7a:8a:f6:03:fe:75:07:09:7a:34:a1:d9:6e:7c:2a:
5a:50:d9:20:74:f8:31:21:1d:62:35:12:ec:05:28:0c:c2:85:
3f:fc:f7:31:8b:bb:8e:f0:4d:73:b9:c3:92:49:ea:38:71:e9:
1b:f2:11:2d:4f:fa:fb:ed:8a:5d:a4:3f:82:33:2e:b6:f9:6f:
08:a2:3e:6e:46:45:47:87:ac:71:ed:14:ac:37:05:8e:08:a3:
d5:b3:03:ec:bc:35:ea:85:49:5f:f1:84:d7:bd:3c:34:26:bc:
3c:25:cd:a0:58:f8:54:c2:5f:ee:0c:7a:5a:9e:46:f9:91:bf:
0a:b8:de:18:c5:b1:7b:95:f7:0d:f5:55:57:be:29:74:a0:86:
e6:4b:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org