Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/U-Y8TrABoyQ7r-jlMhrrno0lINg.roa
File: U-Y8TrABoyQ7r-jlMhrrno0lINg.roa (raw, json)
Hash identifier: 5Xe6kIFdB/mg2fhKXbM49JsfVelfETVgjsglwlVc//w=
Subject key identifier: 53:E6:3C:4E:B0:01:A3:24:3B:AF:E8:E5:32:1A:EB:9E:8D:25:20:D8
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018CC6B935E6DD37635B767D17A05323D663
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/U-Y8TrABoyQ7r-jlMhrrno0lINg.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 92.119.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jan 2024 14:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:35:e6:dd:37:63:5b:76:7d:17:a0:53:23:d6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53e63c4eb001a3243bafe8e5321aeb9e8d2520d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:32:19:1e:f5:18:5d:b3:25:8e:4b:a4:ef:
9b:5a:4a:ed:1d:f4:b8:fd:ee:d1:15:bc:5f:99:0b:
8f:24:12:d7:20:e2:b7:4f:24:23:db:90:12:cf:68:
a9:e5:2d:1f:0b:d1:d8:a3:5f:77:06:50:94:87:67:
b0:34:d7:bb:af:3f:c8:af:d1:95:1a:fa:40:ea:7a:
ac:ed:d6:de:d1:ad:f5:4b:d1:2d:9b:16:a1:66:9f:
85:64:ce:59:6f:fb:56:fc:71:a6:9d:a9:e3:94:85:
00:7a:7c:f4:c7:56:2c:e7:bf:98:cb:6b:18:fd:45:
92:6c:d7:7e:ed:78:2c:66:71:c1:2e:60:07:34:db:
8a:17:69:29:6d:d9:82:b8:80:e5:dd:87:f7:79:54:
43:3a:b2:0b:4e:eb:4c:25:4f:f9:f9:db:21:1c:96:
bd:9e:39:8e:ec:a5:70:c2:ed:d6:ab:cf:05:d2:90:
de:dd:1e:86:6c:b8:16:fd:77:7e:69:77:01:02:0c:
17:03:ad:46:d1:5f:e7:3c:95:0a:9e:00:02:68:f5:
f1:31:79:d9:6a:49:cf:56:a4:aa:c2:32:60:72:b2:
91:87:5d:35:2b:67:6c:17:1b:2c:21:29:14:29:08:
a7:95:94:a8:b3:5d:90:85:6e:f3:1c:55:30:fa:52:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:3C:4E:B0:01:A3:24:3B:AF:E8:E5:32:1A:EB:9E:8D:25:20:D8
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/U-Y8TrABoyQ7r-jlMhrrno0lINg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.182.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f4:b8:15:db:a3:ed:3c:cf:92:fa:06:ad:c7:82:11:ba:c6:
3c:c8:b9:44:21:b4:f4:7a:5d:21:b5:25:e5:f2:48:72:ca:2b:
24:f6:a5:87:8c:b2:57:0c:e2:e4:cf:75:66:c9:ea:46:bc:5f:
24:a4:5a:51:06:51:e3:6f:27:14:3e:48:58:ec:4d:e7:d8:47:
b3:8a:e4:0e:3b:f8:29:af:f0:2c:dd:a9:7e:18:8e:f4:40:61:
5e:39:34:b7:b6:80:02:20:3c:2d:b4:71:7c:7e:d1:84:57:d0:
ed:8b:d5:d4:56:49:39:1c:9e:60:a1:ff:da:34:81:45:92:15:
bb:34:2c:f4:08:d2:d9:6e:0e:61:0e:fe:a6:4f:89:42:9e:9d:
25:f7:7e:72:37:8c:e2:23:49:45:5a:1c:21:76:05:9a:9b:d8:
84:36:6b:c0:d4:1f:f3:ff:c1:75:6a:02:0b:09:d9:b8:a1:8c:
57:9b:6e:38:4d:74:36:72:bf:d0:99:21:b8:1f:b7:98:c0:80:
be:f0:16:e4:2d:59:f1:8a:4e:23:c1:85:37:5f:0c:50:87:3f:
bb:f1:84:33:73:63:32:f8:04:0e:26:b0:e5:89:a2:8d:31:7f:
af:3d:e5:07:68:8e:5b:05:46:1b:5e:d7:55:19:11:0e:e9:43:
f4:07:2d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 27 19:29:00 2024 by rpki-client on console-ams.rpki-client.org