Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/K6bSRNUW2wEQVSZm-yLir3xMOzw.roa
File: K6bSRNUW2wEQVSZm-yLir3xMOzw.roa (raw, json)
Hash identifier: wpymsxvV0qFnXIgdS+T4CQAtFLRq61RDhse7Ri4J7PE=
Subject key identifier: 2B:A6:D2:44:D5:16:DB:01:10:55:26:66:FB:22:E2:AF:7C:4C:3B:3C
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 0189407D3FB33CC1B64D313758A76655CE6C
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/K6bSRNUW2wEQVSZm-yLir3xMOzw.roa
Signing time: Mon 10 Jul 2023 15:48:17 +0000
ROA not before: Mon 10 Jul 2023 15:48:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35357
IP address blocks: 92.119.132.0/24 maxlen: 24
92.119.132.0/23 maxlen: 23
92.119.132.0/22 maxlen: 22
92.119.133.0/24 maxlen: 24
92.119.135.0/24 maxlen: 24
92.119.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:7d:3f:b3:3c:c1:b6:4d:31:37:58:a7:66:55:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Jul 10 15:48:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba6d244d516db0110552666fb22e2af7c4c3b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:15:b7:54:62:7a:02:6c:81:9e:f6:7f:9f:ee:
de:8e:53:21:50:ae:51:83:4a:bc:54:a1:82:46:cb:
10:f1:4d:ac:c6:da:8e:44:51:4c:81:42:06:34:35:
3b:57:b2:c3:1c:06:8c:e4:0f:4a:66:4d:b3:20:26:
d1:f7:7f:23:55:21:d4:1f:d3:fc:41:70:54:a8:fb:
63:50:c9:28:cb:3a:00:96:75:36:34:c9:a8:c1:fe:
93:0a:26:fe:b8:0f:7a:b9:c8:a1:42:bb:75:30:8b:
41:41:31:46:c1:22:a3:4b:4f:7e:78:c4:e8:b4:ab:
a2:92:6c:48:ab:1b:f5:e9:3b:cc:1b:4b:0b:99:81:
83:bc:a1:24:56:fc:0b:f3:c0:4f:09:3e:85:0d:8b:
97:5f:91:0b:d1:33:69:d1:41:3b:e8:e2:a0:85:20:
38:a6:09:84:5c:37:cf:4e:bc:2d:0b:60:8a:b9:63:
c0:13:97:70:5a:b1:a6:4b:58:2a:15:43:f3:7c:f1:
5f:fa:88:f1:8f:67:df:f7:ac:3f:8d:8f:bc:dc:0c:
26:10:91:3c:1e:9c:13:56:61:f5:3b:ec:f6:88:9b:
7e:29:af:17:88:4a:84:50:63:fb:54:af:43:e4:56:
74:26:8f:00:f2:43:38:08:00:14:b7:a5:91:ed:77:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:D2:44:D5:16:DB:01:10:55:26:66:FB:22:E2:AF:7C:4C:3B:3C
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/K6bSRNUW2wEQVSZm-yLir3xMOzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.132.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:e3:07:fc:06:82:ec:96:29:d7:29:c4:eb:49:42:cc:12:bc:
cf:fe:7a:2c:07:97:18:28:91:c6:b0:e4:f6:5d:20:5b:de:b2:
84:3a:1f:42:99:aa:f5:e9:98:f1:0a:36:73:55:de:da:4a:80:
13:8d:16:86:47:d0:0a:c9:e6:ed:1d:85:9d:13:e6:1e:0b:26:
54:a0:31:1d:c1:61:47:ee:18:b4:00:70:c0:ad:08:dc:0c:5c:
93:70:31:7f:ef:b4:15:63:48:44:44:bb:73:0b:d3:0d:e5:79:
27:c7:09:c9:56:bf:69:d7:8c:e2:07:79:6a:58:4a:e9:55:00:
0c:ad:a7:3b:93:58:21:ea:d1:65:92:f4:97:2c:7e:55:91:c9:
67:6b:da:71:b7:0d:dc:10:85:e5:ba:8c:42:ce:39:93:1c:47:
66:85:11:40:33:65:4b:0c:4b:13:a5:89:f3:02:dd:d8:2b:33:
2e:a2:ab:4a:ab:33:a0:2f:d4:80:40:c3:88:d7:a3:6b:08:72:
cd:56:d2:2e:01:64:48:4f:a0:33:b5:25:3f:ab:85:28:bd:7e:
58:e4:29:a8:6c:79:d0:84:d8:0e:b7:db:9e:9a:f0:4a:85:cd:
c1:4e:93:96:7f:73:69:89:cc:ef:27:e4:8a:95:b1:2e:dd:93:
ff:d8:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:26 2024 by rpki-client on console-fra.rpki-client.org