Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-xyMLo2Eb7f1vqPugoGrocpTNPA.roa
File: 1-xyMLo2Eb7f1vqPugoGrocpTNPA.roa (raw, json)
Hash identifier: oAxZ/IU0t6+UiwViXQwQxMiS6bWOQeqFNvo1JFQGzQ4=
Subject key identifier: FB:1C:8C:2E:8D:84:6F:B7:F5:BE:A3:EE:82:81:AB:A1:CA:53:34:F0
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0185CF0D5CB9D6BD0260822F7781D6CD0BEC
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-xyMLo2Eb7f1vqPugoGrocpTNPA.roa
Signing time: Fri 20 Jan 2023 12:00:37 +0000
ROA not before: Fri 20 Jan 2023 12:00:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 92.119.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 21 Jan 2023 09:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:0d:5c:b9:d6:bd:02:60:82:2f:77:81:d6:cd:0b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 20 12:00:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb1c8c2e8d846fb7f5bea3ee8281aba1ca5334f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:d4:61:42:26:57:70:ec:e1:b0:13:b6:46:
3c:19:76:d9:cf:85:54:e8:2a:84:4b:2b:ab:6c:5b:
66:98:24:ca:84:27:a5:18:d5:b1:e4:07:46:0e:d7:
64:da:b9:44:02:b4:bf:a5:9a:fd:a3:74:a1:a9:3a:
ed:9f:f7:e6:03:14:88:1e:df:13:88:1f:e9:fb:5f:
1a:b9:e7:e9:7b:55:d0:fd:2a:4b:35:e7:e3:11:60:
7c:c3:d4:da:6f:4b:35:9c:da:5b:77:dc:ef:1c:72:
8f:83:1b:a7:34:94:11:1c:a2:1e:6c:20:d1:f9:d1:
e9:e6:0a:4d:b9:a3:93:fd:81:a8:7f:40:37:95:b3:
1a:d3:5d:c0:5f:67:63:23:08:45:62:02:90:72:f1:
3c:78:c8:ed:75:76:5f:76:60:43:e1:e2:e2:72:ec:
4a:79:c5:90:1e:90:ed:b5:b6:1d:e6:f0:dd:32:2d:
5a:d6:8c:97:46:62:bc:53:21:ec:59:38:38:ac:3a:
24:ad:78:a5:c1:b7:68:06:f2:7b:ee:ee:55:d5:3b:
78:c7:16:78:48:6f:b8:42:36:86:d6:76:7b:57:01:
61:7c:0e:5e:46:96:a0:f6:41:9d:b4:ef:da:bf:90:
64:f5:e4:bf:93:c6:93:4f:3b:8a:d6:96:e7:90:d6:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:8C:2E:8D:84:6F:B7:F5:BE:A3:EE:82:81:AB:A1:CA:53:34:F0
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-xyMLo2Eb7f1vqPugoGrocpTNPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
79:41:d3:c8:0f:71:08:b5:87:aa:d1:0b:16:3b:fb:2b:c7:9b:
bd:f0:9c:c5:c1:5f:02:20:db:df:b2:5a:5f:f6:88:ad:04:e8:
e3:04:a8:30:47:e0:a4:a0:1c:e8:0a:8a:f3:d7:c6:dc:7e:9d:
8a:c0:70:0c:46:73:20:10:ce:4b:56:2b:a5:e8:ba:f6:6f:db:
d3:1d:e8:08:ff:fb:9e:f5:25:50:a1:31:19:45:ee:9b:b7:73:
ce:4c:5c:b6:c2:d1:ba:ae:71:ec:09:05:3c:5d:a3:63:69:73:
db:8d:a4:78:12:4f:94:53:36:64:6d:01:02:bd:1e:b0:cf:00:
2b:cc:68:7f:b5:3f:6c:a1:f9:85:1c:9f:63:23:fc:72:45:fd:
9c:8a:ec:89:9a:f4:ec:b3:28:60:0e:32:1d:e5:49:85:e7:af:
ba:5e:03:c5:61:d5:66:3d:79:c4:4b:fc:0f:33:64:0d:43:b5:
f3:a6:b0:c2:d0:34:a1:fa:99:9a:81:13:db:a3:07:a3:1e:f4:
2d:89:03:cb:1c:41:8e:9e:ea:9d:7d:e1:e7:ff:8d:d6:92:79:
f9:0e:88:73:e7:32:95:ad:e5:36:ea:0f:a7:b7:ee:fa:33:be:
3e:d7:8f:1c:0d:fe:a7:4f:cc:3e:b3:bc:a5:b6:b1:eb:c1:f4:
e6:e7:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:27 2024 by rpki-client on console-fra.rpki-client.org