Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/T6OEVcuJzGuXwe7skS-N1585p_U.roa
File: T6OEVcuJzGuXwe7skS-N1585p_U.roa (raw, json)
Hash identifier: P+aWL+WfVwuoHgrgE/ThMUZmgsuqSsDZsYxpSvhqRjU=
Subject key identifier: 4F:A3:84:55:CB:89:CC:6B:97:C1:EE:EC:91:2F:8D:D7:9F:39:A7:F5
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01857139B0FA141B638B84CFE87825497CDC
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/T6OEVcuJzGuXwe7skS-N1585p_U.roa
Signing time: Mon 02 Jan 2023 06:44:44 +0000
ROA not before: Mon 02 Jan 2023 06:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205715
IP address blocks: 92.119.184.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b0:fa:14:1b:63:8b:84:cf:e8:78:25:49:7c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 06:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fa38455cb89cc6b97c1eeec912f8dd79f39a7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:30:55:29:db:25:ae:06:a5:3e:4f:da:17:
e4:5d:9e:cf:a8:e3:84:82:aa:cc:14:21:7f:aa:bb:
ec:d0:e9:0d:9b:cd:7f:b1:35:36:ec:46:81:55:5a:
3a:19:02:a6:ea:2d:68:dd:ed:78:0a:4d:8b:38:d3:
51:31:ad:7d:70:43:f9:08:0f:50:9f:92:85:67:ea:
14:a3:83:91:cc:53:58:44:66:40:62:bb:c6:2e:a3:
f0:ef:63:40:4f:cc:5d:93:c4:2d:ef:e0:58:8d:13:
c3:34:40:bf:1a:03:98:8c:64:d3:7f:f5:2f:66:1e:
a3:09:26:5e:15:49:82:0b:a7:ae:31:0c:f7:68:bb:
c1:01:76:a2:2e:e8:02:55:c7:53:b8:68:a7:1f:2a:
e9:d9:b8:75:d3:72:ba:a9:da:4d:4b:e9:fc:55:70:
a2:23:4c:2d:d2:1a:f7:16:f8:c8:5e:fe:b8:cc:42:
15:f0:59:c2:0b:9e:74:80:31:b2:5a:06:59:e4:e5:
65:d1:a4:5f:93:bc:1a:de:d4:cc:5c:95:77:ed:84:
83:a3:7c:72:d1:9f:d8:86:df:c0:e8:81:db:f7:9f:
53:24:c1:d9:76:e6:39:bb:8c:12:09:08:d9:35:ee:
45:22:b7:70:3b:f8:52:ee:6d:6d:37:2f:f3:4f:44:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:84:55:CB:89:CC:6B:97:C1:EE:EC:91:2F:8D:D7:9F:39:A7:F5
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/T6OEVcuJzGuXwe7skS-N1585p_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.184.0/23
Signature Algorithm: sha256WithRSAEncryption
31:dc:32:15:6e:98:4c:d0:2c:8a:15:3c:6b:dc:ba:cc:61:17:
a2:40:1c:c2:76:a6:e4:ba:4d:87:0b:a2:a4:79:74:42:e9:56:
a0:a5:fe:e2:44:ed:74:8f:ac:2f:2a:c7:78:34:7f:3d:0c:d8:
00:48:9b:84:4c:9e:5e:8e:f3:05:57:a1:5a:85:b5:5a:4e:25:
ec:7a:59:41:0e:7a:8e:30:36:63:18:cf:f9:ea:04:5a:fa:45:
a6:b5:25:7d:4f:4d:13:8c:e0:c1:cb:6c:f6:9a:f3:fa:70:98:
fb:95:ca:e3:86:46:1a:fb:be:34:6d:ef:fd:80:da:13:37:6d:
1f:7d:10:5b:6c:d7:18:c3:5e:09:24:08:44:e4:a1:e4:5d:3c:
4c:cf:83:4a:06:31:0f:a2:41:6f:6e:a8:26:72:ac:8f:ed:39:
2b:34:3e:a6:55:c4:39:dd:ba:d2:11:6b:ee:39:d5:81:f6:be:
79:6a:f9:c8:1e:62:3c:fb:be:4c:64:97:ca:1d:73:de:c9:d0:
a4:78:3c:13:a7:14:44:bf:ec:73:15:9c:5c:c7:d2:24:4d:51:
74:1f:a3:8a:c2:8f:42:49:8d:a7:23:cf:cc:28:94:4e:8c:dd:
03:fa:94:17:0c:41:56:67:7d:21:b3:57:10:52:c0:86:1a:06:
77:7b:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:46 2024 by rpki-client on console-ams.rpki-client.org