Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7ThibltJmAg94EmT4CIxeBqXH88.roa
File: 7ThibltJmAg94EmT4CIxeBqXH88.roa (raw, json)
Hash identifier: IyDkpE3bUQRjUEg+hYwGBL5tosltbAI1vNuhB2CyXUQ=
Subject key identifier: ED:38:62:6E:5B:49:98:08:3D:E0:49:93:E0:22:31:78:1A:97:1F:CF
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB29A4D511402AE47F4D8EC6E443C8
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7ThibltJmAg94EmT4CIxeBqXH88.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42881
IP address blocks: 185.115.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:29:a4:d5:11:40:2a:e4:7f:4d:8e:c6:e4:43:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed38626e5b4998083de04993e02231781a971fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2b:36:87:b6:ca:71:d3:f1:27:91:9b:03:7f:
20:2c:f7:1e:9f:d4:e8:92:e1:f3:35:ae:da:7a:50:
3a:f3:9d:cb:00:e4:07:04:e9:e1:38:f2:77:f2:50:
5d:f0:10:2d:42:45:16:26:09:f4:a2:d3:ba:40:84:
79:6c:88:78:f3:7f:c8:41:0c:64:87:a2:4c:99:89:
c9:b1:ca:5b:26:49:f7:57:c8:ed:22:be:8e:b3:2d:
70:3e:a0:28:74:ea:b2:91:ae:cb:6a:14:85:2c:c6:
81:5d:d5:c7:5d:4e:12:40:72:4c:e4:2d:b3:dc:5d:
1a:87:42:7a:48:e1:97:8d:59:e5:a3:61:dc:7d:a9:
22:06:30:2c:04:95:84:48:27:03:b8:d4:55:a3:ac:
a7:b7:74:37:06:22:68:fd:bb:49:50:2b:7d:80:c2:
0a:7b:8d:2f:06:3c:81:c5:e7:15:0d:32:55:5f:9a:
13:81:84:d4:66:e7:84:71:e7:c3:32:a5:47:57:15:
f9:c2:3b:5f:92:dd:d8:7b:3e:e7:96:4c:9b:16:64:
c5:1b:9b:72:6c:0d:59:f0:48:5f:66:da:2c:78:c1:
27:f7:2c:67:a5:ab:5d:15:46:54:83:be:2d:49:4b:
30:26:20:ae:93:27:72:cd:ba:2b:7e:12:be:69:b3:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:38:62:6E:5B:49:98:08:3D:E0:49:93:E0:22:31:78:1A:97:1F:CF
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7ThibltJmAg94EmT4CIxeBqXH88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.92.0/22
Signature Algorithm: sha256WithRSAEncryption
76:41:55:44:ed:ba:c5:31:7a:25:01:5e:22:a4:b7:cd:d0:cc:
9c:0b:04:97:54:29:d0:b7:ee:34:bf:c9:93:50:22:df:53:29:
f9:58:3a:32:4b:6c:06:ee:70:72:b8:1d:bf:f0:45:4a:8a:da:
e3:ad:a3:2b:48:60:e4:35:da:ef:4c:71:5a:23:b6:83:21:1a:
e2:b1:d4:3c:05:a4:17:18:fb:aa:7b:d1:99:33:4c:fe:70:41:
f2:f1:77:27:24:a8:4d:4f:06:61:33:16:d0:1e:81:be:55:6c:
3f:1b:6b:dd:b8:4a:14:8e:a0:61:26:21:db:1c:64:b6:53:f3:
7e:cf:cf:b4:93:22:dc:b4:cf:95:fc:9a:a1:b8:5a:c9:c3:92:
1e:02:a2:05:d9:6a:67:1a:d8:99:d1:cc:21:22:2a:d0:a7:f4:
41:f4:3a:73:15:41:33:55:32:1c:7b:13:dc:0e:cb:a6:98:fd:
cd:dd:af:b4:60:03:8a:e1:37:1c:ff:28:d3:7c:e0:5e:94:51:
47:80:53:c3:60:f6:82:49:9e:b9:89:48:d2:8e:a5:8a:64:e4:
6b:74:ed:55:8c:37:ac:c8:56:35:13:15:3b:e1:c3:48:bd:ca:
00:80:b1:50:4d:48:c2:2e:a5:a8:12:83:f0:3a:a2:37:52:29:
c2:5e:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 21:27:49 2024 by rpki-client on console-fra.rpki-client.org