Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/iqxXAV3pAuM8RNUU8LBA_LC-AnM.roa
File: iqxXAV3pAuM8RNUU8LBA_LC-AnM.roa (raw, json)
Hash identifier: M1h1YKahM1ijytTvZtmS59EYIwW1SopE4MZh4Dxgc2Q=
Subject key identifier: 8A:AC:57:01:5D:E9:02:E3:3C:44:D5:14:F0:B0:40:FC:B0:BE:02:73
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0185707973E6A89D215B9BBB5FF65E213DC2
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/iqxXAV3pAuM8RNUU8LBA_LC-AnM.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 185.92.26.0/24 maxlen: 24
185.92.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:73:e6:a8:9d:21:5b:9b:bb:5f:f6:5e:21:3d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aac57015de902e33c44d514f0b040fcb0be0273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:a9:08:fc:a9:73:be:f8:c5:c6:be:d6:9c:
4b:2c:82:35:f0:93:ce:bb:56:20:f9:5f:3f:53:c3:
0c:cd:88:0d:bb:69:d4:43:ed:81:3d:4f:69:3a:1e:
e5:df:64:ad:4f:0c:70:9f:82:db:6a:0f:63:1a:95:
34:2c:87:06:42:48:06:4c:73:10:61:31:56:b7:cd:
3d:ea:ee:57:b8:49:08:a9:ef:b0:76:8f:7e:4b:cd:
56:c4:3a:32:20:42:fb:39:4b:d4:0f:c4:a7:28:7c:
6f:b6:85:ec:d2:69:10:c4:0a:e9:22:1b:47:7b:a0:
c4:4e:1e:4f:9b:00:41:24:0c:d2:19:dc:da:f3:2b:
36:f6:e0:5f:db:1d:bd:83:eb:8f:50:a1:23:12:ec:
aa:1b:e5:98:47:a5:64:f2:a6:7a:5e:2f:62:46:d0:
0e:f3:ca:5a:40:ed:8c:85:a6:71:f9:05:37:76:87:
54:b7:e9:a4:94:ca:11:43:4d:3b:23:30:8e:e7:c4:
e7:9f:f4:31:df:fb:54:4a:06:0f:75:d9:9a:ee:4a:
bd:70:a9:89:79:39:01:8d:92:21:0a:10:57:67:12:
8a:36:0e:27:d4:8d:a5:9f:80:a7:fb:2a:10:0c:b9:
b6:5c:9e:9b:b0:e6:2f:71:6f:b0:cd:35:40:a5:6c:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:57:01:5D:E9:02:E3:3C:44:D5:14:F0:B0:40:FC:B0:BE:02:73
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/iqxXAV3pAuM8RNUU8LBA_LC-AnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.25.0-185.92.26.255
Signature Algorithm: sha256WithRSAEncryption
70:19:7a:9c:48:3d:ff:52:cf:46:be:28:77:ed:cd:91:ad:d5:
c3:69:5d:00:18:1c:4b:f3:ab:57:79:b9:11:c4:74:d2:09:04:
0e:ad:4d:22:1d:4b:d2:4d:5f:a0:70:11:29:0f:01:be:7f:24:
db:e4:d4:30:0e:08:d4:8d:15:07:70:49:1b:b0:b7:94:14:a1:
03:65:e5:91:46:d4:df:ed:d2:e1:c0:22:df:db:2c:b1:3c:62:
d9:47:aa:a9:1f:92:cc:6f:53:51:ec:b3:a5:07:f1:94:65:e5:
dd:f9:00:07:f2:8b:ea:23:b4:67:14:27:7a:d8:8c:52:fd:31:
59:7b:5a:4d:59:3a:e9:3e:cc:b4:f3:ac:09:49:11:ec:33:50:
16:69:a3:35:dc:2b:fa:a1:2d:67:fd:f5:8f:df:c8:1f:4a:57:
ac:ca:cd:02:df:a4:3c:ab:46:c6:2b:41:a6:6c:53:58:f8:c2:
52:f1:08:37:ff:2d:8f:d0:5f:57:9d:e2:7a:64:95:f0:78:6e:
17:2b:39:9d:0c:12:fc:46:49:19:00:bb:6b:be:35:68:40:27:
a0:1d:91:3a:ad:28:05:62:c5:d7:b8:c8:0c:db:c3:ce:8f:f7:
67:35:c4:c1:c3:c6:eb:8b:f0:65:13:5a:4e:d9:e8:85:b9:35:
79:48:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:19 2024 by rpki-client on console-fra.rpki-client.org