Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/kOOnYVPdCHHLfEozWicN9y4zWx4.roa
File: kOOnYVPdCHHLfEozWicN9y4zWx4.roa (raw, json)
Hash identifier: A6NwlSXTYVqumCadGi1L286+0YOCRn8VoDj0DeWlSlk=
Subject key identifier: 90:E3:A7:61:53:DD:08:71:CB:7C:4A:33:5A:27:0D:F7:2E:33:5B:1E
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01867F4DE722829FB8847D77534C6F8E2271
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/kOOnYVPdCHHLfEozWicN9y4zWx4.roa
Signing time: Thu 23 Feb 2023 17:24:17 +0000
ROA not before: Thu 23 Feb 2023 17:24:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 92.119.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:4d:e7:22:82:9f:b8:84:7d:77:53:4c:6f:8e:22:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Feb 23 17:24:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90e3a76153dd0871cb7c4a335a270df72e335b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:a3:f3:9c:95:d8:a6:98:26:20:52:ab:53:
98:ee:4b:39:be:2f:ed:a0:11:1d:35:e0:27:ef:24:
7f:8d:6d:93:be:b0:31:09:7b:71:27:09:2a:1c:e8:
47:ed:75:df:5b:9b:63:bd:69:b4:a1:18:95:46:d4:
5c:48:2b:b1:a0:ea:26:dd:84:e7:98:5b:56:2f:be:
98:91:e2:72:1e:4e:e1:a5:d3:a7:ad:25:5e:59:57:
f9:28:a8:f5:1d:d8:93:64:ed:b9:be:f9:1a:40:aa:
33:95:e1:da:e8:a4:86:c0:66:16:4e:aa:43:91:47:
a4:86:16:d3:ef:b1:c9:3b:c2:f5:f4:60:3a:75:07:
95:92:db:46:db:46:41:ce:15:6a:8b:6c:e0:bb:fe:
ca:c3:2a:f1:ad:12:a9:e1:74:5a:64:d7:5a:23:e5:
99:e2:0c:55:f1:e5:33:ff:41:39:47:1c:4e:14:b4:
67:a7:d9:c1:a2:b6:ca:44:7d:9e:9d:08:26:09:bc:
d4:9b:49:d5:58:40:d9:c8:15:94:93:75:9a:e0:c2:
78:21:5d:76:a5:46:eb:ff:86:d1:5f:c7:81:7b:b9:
47:4d:05:ef:05:2f:e6:91:88:c9:a5:f9:75:e5:1e:
2c:c0:ec:cd:39:77:e8:22:31:b4:52:1c:43:6d:e8:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:A7:61:53:DD:08:71:CB:7C:4A:33:5A:27:0D:F7:2E:33:5B:1E
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/kOOnYVPdCHHLfEozWicN9y4zWx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.182.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cd:f4:04:92:a4:fd:c4:32:15:de:48:88:ca:52:f0:3b:0b:
b7:31:75:22:95:8e:f5:37:d2:e3:fe:66:41:2e:23:6d:48:4a:
22:aa:fb:e1:0d:83:39:29:35:20:67:c2:19:f1:fa:3f:36:12:
cc:c5:98:e9:74:b0:85:12:ec:6b:fe:dd:ec:f5:7f:6c:30:50:
e3:d6:9b:e9:38:34:f8:1e:9f:ea:dd:c7:e3:11:fa:d8:67:6e:
8a:cc:71:3a:8c:7d:75:da:b0:4e:38:eb:d2:c5:ed:53:28:7f:
5b:1e:c1:a0:37:f8:61:9f:fd:58:0c:fb:41:cf:07:8e:b6:03:
7d:f2:a0:41:bb:1f:f8:cb:21:3c:e8:25:62:56:64:07:f6:2d:
b3:cb:cb:01:c8:47:43:07:22:03:87:49:6d:14:18:c9:75:1b:
5d:c3:68:c6:cb:61:19:85:7d:04:fd:fd:6c:90:f6:b9:35:b6:
c6:7a:c5:d2:ee:dc:ea:f1:de:f6:30:6a:c4:51:44:53:c0:0b:
fc:b1:1c:fa:7b:d2:21:60:c2:1a:97:78:2c:a6:ce:67:44:69:
a4:7a:4b:d7:05:90:d9:10:82:e4:91:64:d2:52:36:06:73:f6:
62:34:d3:0f:85:85:f0:3b:04:5f:fe:b1:d2:32:46:4d:6a:9e:
ab:8e:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:26 2024 by rpki-client on console-ams.rpki-client.org