Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/ulqnxX3h2JYaNtsvPNApFebSfkg.roa
File: ulqnxX3h2JYaNtsvPNApFebSfkg.roa (raw, json)
Hash identifier: JVoXOGjTw2njLGTVsCZvarzD6HB8sfzSDGyzqVMuUA4=
Subject key identifier: BA:5A:A7:C5:7D:E1:D8:96:1A:36:DB:2F:3C:D0:29:15:E6:D2:7E:48
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018E60CBAF1D8BF446F6352AD0CFAB317659
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/ulqnxX3h2JYaNtsvPNApFebSfkg.roa
Signing time: Thu 21 Mar 2024 11:35:45 +0000
ROA not before: Thu 21 Mar 2024 11:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 92.119.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 13:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:cb:af:1d:8b:f4:46:f6:35:2a:d0:cf:ab:31:76:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Mar 21 11:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba5aa7c57de1d8961a36db2f3cd02915e6d27e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:16:8f:90:ec:c6:cd:76:34:7a:18:4b:0e:
11:da:7f:ed:fa:60:00:b0:88:e6:1d:57:a6:24:10:
f6:7b:6f:12:92:9f:63:24:dd:1b:2e:cd:ba:3e:7a:
31:d6:79:c8:2d:10:fd:c1:8c:86:cb:5b:e8:0a:96:
51:23:1b:a4:5b:f0:dd:68:5e:3b:fb:ae:0b:9e:ed:
30:e1:6f:8f:df:4a:47:c9:49:75:d9:d8:47:c6:c5:
4c:81:c7:42:7f:3f:9b:e8:93:8a:11:a0:5f:59:6b:
d8:3f:9a:7f:9b:81:58:00:d4:20:f9:69:f0:66:30:
fd:ea:b6:d5:ce:46:9a:6d:3c:7e:9d:fc:f6:28:8f:
57:0f:73:cc:4e:39:f0:2f:6b:b6:f7:55:0b:8c:48:
43:3d:24:c4:5c:03:96:1c:4d:6b:6e:0b:04:93:91:
31:56:15:16:57:89:5b:82:fc:a3:11:6d:62:7f:83:
fb:11:39:00:cd:8c:35:a3:7b:c5:9e:fd:13:2e:8c:
cd:32:ce:a6:56:ce:19:ab:c5:63:11:48:11:ee:c1:
7a:db:bf:d4:76:6e:f7:07:22:69:ef:14:c5:d5:0f:
fb:c8:09:e7:d5:72:90:94:85:cd:5e:41:75:77:02:
72:74:06:b3:dd:95:40:83:2a:2d:01:2b:29:aa:46:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:A7:C5:7D:E1:D8:96:1A:36:DB:2F:3C:D0:29:15:E6:D2:7E:48
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/ulqnxX3h2JYaNtsvPNApFebSfkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:71:6d:d6:6a:64:b7:ea:d8:1e:97:d9:7b:59:ab:22:98:e9:
4b:9a:ab:9a:85:1e:6b:8d:e4:b5:57:be:a3:41:be:42:c2:b2:
cf:5b:af:7a:60:c2:e5:a5:51:c2:60:f5:86:75:35:0f:50:4a:
b8:4c:da:38:6e:f1:87:1a:51:a2:33:1d:ca:96:64:44:0f:85:
f0:8e:42:f9:1b:5c:fe:e8:b5:19:05:10:1f:28:be:6a:40:db:
6f:ce:d2:9f:9e:3e:a6:fe:ba:e3:4d:ba:68:1d:7c:9a:d5:65:
4a:dd:b2:52:8a:65:ce:1c:8e:89:88:e9:45:cd:02:2c:5a:cb:
89:38:b7:b9:fd:39:8a:90:55:a7:9e:62:34:d5:c4:98:2b:9f:
13:4f:83:da:79:c5:ff:c6:ab:7a:3a:b4:ec:ca:c0:0c:f1:b1:
ae:9f:20:24:2a:19:20:19:1a:a1:90:48:29:40:a2:6a:ce:76:
5f:1c:68:1e:b3:0c:f3:af:f7:41:13:de:3e:99:c9:6f:f2:f6:
1a:02:e5:03:9e:f9:39:3f:85:f4:26:ad:fb:71:d1:b8:38:8a:
90:00:28:af:e9:89:1d:6d:5f:63:ce:bd:be:17:57:41:03:68:
7e:ea:9c:05:84:4c:fb:69:81:48:1d:da:14:fa:30:92:71:3a:
54:7e:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 17:45:18 2024 by rpki-client on console-fra.rpki-client.org