Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/IWRJkqMN62HT9fkSGWM9ulJ-kdw.roa
File: IWRJkqMN62HT9fkSGWM9ulJ-kdw.roa (raw, json)
Hash identifier: 5F1RwFpK/TwdWl0Rp6hPwX8VMp/eI9L6pxjS6MQdmBI=
Subject key identifier: 21:64:49:92:A3:0D:EB:61:D3:F5:F9:12:19:63:3D:BA:52:7E:91:DC
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE61EEF548B72E13041891DEDCD83C7
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/IWRJkqMN62HT9fkSGWM9ulJ-kdw.roa
Signing time: Sun 01 Jan 2023 10:34:58 +0000
ROA not before: Sun 01 Jan 2023 10:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 92.118.205.0/24 maxlen: 24
92.118.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:1e:ef:54:8b:72:e1:30:41:89:1d:ed:cd:83:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21644992a30deb61d3f5f91219633dba527e91dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:1d:ad:4b:71:91:1d:ea:0a:b4:a7:6d:2c:56:
c8:a9:1b:cd:3d:c6:24:8c:7a:3d:0c:cc:b6:48:4c:
01:c7:0a:31:55:4f:d3:32:f6:62:bb:93:d8:bf:3a:
0b:2e:6b:f6:07:30:89:36:a2:e7:3a:d7:e9:61:93:
2d:0b:1e:93:eb:b1:5d:dc:dd:ab:e6:15:b1:2e:e5:
ec:02:2b:f5:9c:32:9d:5a:b9:76:70:f0:45:0e:46:
09:f8:f0:f1:63:45:2d:ef:5a:47:f5:e3:69:d7:f0:
b9:43:31:59:07:10:09:b3:38:4c:50:10:5b:5c:95:
69:d1:4e:3b:bb:b4:ee:e5:46:19:b6:8e:13:d4:0d:
cc:6f:f9:26:4e:24:72:46:22:0e:c0:81:00:ad:22:
8b:5e:96:89:d0:c4:1e:3f:1a:b2:83:7c:cb:9d:83:
0d:5d:32:57:3c:62:d0:96:56:8b:d5:77:58:7b:76:
49:9e:b6:50:c2:3d:d5:42:b0:ff:c9:26:33:e7:7b:
83:fb:ad:e4:92:b2:9b:d9:cb:8f:2a:da:00:07:ae:
33:d5:67:e6:7b:72:af:b3:0a:98:8d:23:0a:97:a4:
52:fd:11:57:f1:5c:a1:bc:06:c3:d9:0e:30:7c:75:
4b:fb:07:9e:af:3b:f7:82:3b:ab:66:c3:d0:8e:d4:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:49:92:A3:0D:EB:61:D3:F5:F9:12:19:63:3D:BA:52:7E:91:DC
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/IWRJkqMN62HT9fkSGWM9ulJ-kdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.205.0-92.118.206.255
Signature Algorithm: sha256WithRSAEncryption
11:cc:43:0d:ef:20:fa:f0:e5:61:89:8f:96:41:98:4c:51:cf:
a1:92:aa:eb:88:18:af:54:37:21:a4:5d:fc:24:ae:53:f9:68:
24:fb:1a:be:59:a6:fe:1e:4a:14:bb:e7:99:aa:a5:59:9b:bf:
17:1b:2a:18:78:02:2a:95:5b:97:e2:9e:91:27:d7:40:e1:6d:
6d:ac:41:70:ff:07:d1:d6:73:f6:84:c7:05:f6:05:a7:69:ad:
88:13:a5:c5:dc:19:9a:18:16:95:60:1d:25:61:29:f8:17:6b:
e1:05:99:51:a7:d8:bc:1b:83:1e:3d:d0:7a:3c:93:cb:6f:66:
a6:72:30:55:b8:64:12:b7:f4:5f:52:81:ec:9b:39:df:b5:32:
24:fa:e4:7c:4f:6f:a2:9f:80:95:83:72:96:52:22:3a:eb:1a:
a5:1a:8f:89:6d:07:97:fa:24:5d:69:8f:60:81:ed:b5:3f:c6:
7e:2a:09:c6:da:e6:d6:47:5c:9c:65:90:0d:03:6d:e2:7f:2e:
2d:65:99:bc:02:60:53:37:96:4e:10:83:ed:39:5f:1b:5c:f7:
44:2c:0a:e5:74:85:21:52:33:96:b4:ce:f9:45:ff:df:85:b8:
0e:2e:ed:72:a1:27:96:49:1a:04:91:b1:3d:ae:84:0a:12:04:
c8:37:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 12:50:42 2023 by rpki-client on console-fra.rpki-client.org