Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/A7tQ_GQMsMFOpibXkFG92S3vm-I.roa
File: A7tQ_GQMsMFOpibXkFG92S3vm-I.roa (raw, json)
Hash identifier: EwYGQbcRm0XsKTyJU5SJyjRX3UQqcF0+99QzQSDu/0M=
Subject key identifier: 03:BB:50:FC:64:0C:B0:C1:4E:A6:26:D7:90:51:BD:D9:2D:EF:9B:E2
Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial: 01857082A08EEE63E373217BE3FEFB2A876B
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/A7tQ_GQMsMFOpibXkFG92S3vm-I.roa
Signing time: Mon 02 Jan 2023 03:24:47 +0000
ROA not before: Mon 02 Jan 2023 03:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203618
IP address blocks: 185.92.231.0/24 maxlen: 24
185.92.230.0/24 maxlen: 24
185.92.230.0/23 maxlen: 23
2a03:8d60::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:a0:8e:ee:63:e3:73:21:7b:e3:fe:fb:2a:87:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
Validity
Not Before: Jan 2 03:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03bb50fc640cb0c14ea626d79051bdd92def9be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a5:d0:5b:b4:2f:46:ca:5a:69:83:50:9f:ed:
e1:ce:55:0b:1a:3c:70:d1:fb:12:ac:86:39:48:13:
dd:b0:94:27:c1:d6:71:3f:53:5a:0b:a3:53:5a:91:
f5:77:76:f4:33:f4:4d:b0:39:e5:f6:2d:39:7f:7b:
67:86:7c:72:23:13:ae:fb:3a:6b:fd:48:df:be:a9:
38:0d:8d:18:68:73:2c:da:c3:3b:36:0e:7c:cd:a4:
b0:78:9b:11:21:79:e1:63:11:25:3a:e9:55:02:9e:
f1:9a:d6:51:ba:06:12:09:18:52:8b:5a:9f:9d:ea:
82:10:43:e6:e5:7c:72:eb:2c:5e:8a:a6:21:25:66:
1e:06:7c:bf:7e:1b:ad:82:e9:39:53:16:04:9b:1e:
1d:35:7d:ee:cd:84:0b:79:7a:be:0b:74:e3:de:a3:
84:19:3e:2d:18:4b:32:0c:04:c8:60:29:a0:71:38:
39:14:1a:dc:7f:4b:97:36:ac:76:69:0f:1d:de:43:
d2:08:96:f5:96:60:6e:43:5f:3a:ea:b3:99:e8:0d:
e1:c0:aa:c2:3f:5d:8f:af:8d:c6:17:b2:d9:61:ad:
60:f3:58:e2:42:71:26:46:f0:cd:bf:ba:06:6c:62:
19:b1:b7:14:f2:03:73:3a:e4:77:9a:8e:e1:80:d3:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BB:50:FC:64:0C:B0:C1:4E:A6:26:D7:90:51:BD:D9:2D:EF:9B:E2
X509v3 Authority Key Identifier:
keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/A7tQ_GQMsMFOpibXkFG92S3vm-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.230.0/23
IPv6:
2a03:8d60::/48
Signature Algorithm: sha256WithRSAEncryption
a2:c6:e2:ee:33:9c:54:52:75:2d:62:63:9b:91:c3:2f:6a:0f:
87:78:f5:2e:dc:81:74:f6:42:98:84:88:8a:f3:a7:2f:7f:7a:
9f:a8:ce:32:c2:88:bc:e4:4c:74:90:d2:5b:89:2e:69:8d:d7:
ef:e7:a1:74:c7:4d:d5:7e:22:2b:85:34:9a:06:09:98:0c:94:
50:5b:4f:eb:92:3f:a1:d0:07:bd:df:2b:50:cd:2d:43:53:c8:
5d:15:bc:1f:3b:4c:ab:58:08:7c:b5:8c:5b:6e:d4:f2:2d:f3:
45:25:3b:5a:68:77:66:67:39:03:af:cb:de:ee:d4:a5:0c:be:
d9:44:a1:b9:b0:05:a6:df:6f:01:c1:5f:88:04:ce:72:75:c7:
1f:c8:2f:6d:10:d8:a7:70:e9:7d:b9:bf:c1:ac:e5:30:73:24:
dd:2f:f3:7b:e1:6f:33:d8:20:60:0e:07:c8:db:b3:8b:7a:ea:
40:fa:86:32:1e:10:3e:c8:d4:44:5c:60:62:0e:9f:87:a0:d0:
18:d1:85:ed:77:87:eb:0a:82:27:76:9d:58:4e:42:41:67:15:
28:8e:67:a9:ae:75:13:2a:73:cf:ed:ea:ad:fe:1b:03:56:c3:
76:c3:44:3e:12:e3:13:09:30:ba:e1:2b:96:09:ac:f7:66:ed:
40:ef:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:26 2024 by rpki-client on console-ams.rpki-client.org