Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/PuKXxfJ0CIr44mxuzEfQRut0CzM.roa
File: PuKXxfJ0CIr44mxuzEfQRut0CzM.roa (raw, json)
Hash identifier: GeOyzSvyd013e+GEQCykteHBJujkLagqxIsOjG4UT2k=
Subject key identifier: 3E:E2:97:C5:F2:74:08:8A:F8:E2:6C:6E:CC:47:D0:46:EB:74:0B:33
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 01856B8A30C397C0475FB32772D6437E3F17
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/PuKXxfJ0CIr44mxuzEfQRut0CzM.roa
Signing time: Sun 01 Jan 2023 04:14:56 +0000
ROA not before: Sun 01 Jan 2023 04:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205479
IP address blocks: 92.118.29.0/24 maxlen: 24
92.118.28.0/22 maxlen: 24
2a09:a440::/29 maxlen: 48
2a09:a443::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:30:c3:97:c0:47:5f:b3:27:72:d6:43:7e:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Jan 1 04:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ee297c5f274088af8e26c6ecc47d046eb740b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:2d:db:69:48:ab:5e:96:29:85:51:52:d4:
1a:2f:1a:91:4a:ec:99:87:58:d6:b2:a1:80:d9:79:
ec:37:be:31:20:1a:cf:c8:f0:2f:f9:36:68:8d:f6:
57:cc:35:3a:0f:c1:7e:21:85:fc:0c:3e:45:a6:56:
41:33:50:55:c8:91:44:66:57:ac:d2:6d:a0:97:cf:
57:f4:2c:17:16:ea:53:d1:3e:dc:f0:45:6f:6c:c6:
44:72:ff:ca:47:a3:c2:85:59:69:85:fe:d9:cc:91:
dd:62:8e:17:aa:f6:33:ab:8b:41:b1:79:1e:e8:05:
2b:bd:f1:ff:84:c2:ee:cb:29:9e:e4:7c:5a:7e:74:
e2:55:2f:1d:0e:8a:95:2c:7c:4e:20:3e:1c:29:14:
6b:01:1d:10:5b:43:f6:89:4a:0e:10:0f:e2:9a:87:
51:65:d5:fd:e2:3e:b0:15:48:77:39:2d:96:5f:c2:
f9:da:e4:ad:2b:f9:42:34:ab:80:51:98:e5:ad:c5:
90:8d:f2:34:e3:41:c7:97:07:b8:59:99:83:ea:1e:
08:52:91:24:30:2a:38:f7:8f:d3:bb:01:3d:e8:0b:
ff:24:a4:10:d1:27:cc:e0:19:48:69:78:aa:78:df:
1b:c1:65:be:78:80:db:c8:8f:97:99:28:10:00:49:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:97:C5:F2:74:08:8A:F8:E2:6C:6E:CC:47:D0:46:EB:74:0B:33
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/PuKXxfJ0CIr44mxuzEfQRut0CzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.28.0/22
IPv6:
2a09:a440::/29
Signature Algorithm: sha256WithRSAEncryption
9d:af:ad:c1:91:b2:9a:7e:c5:fe:18:6d:61:a8:68:3e:e4:70:
57:dd:d5:a3:01:f8:49:77:d7:b5:04:38:74:8b:5d:bc:46:88:
70:9f:9e:44:66:33:48:f9:3e:d2:79:0f:9c:bb:aa:40:e7:67:
5d:b7:15:e6:7f:60:e8:da:2c:6a:48:c4:bd:9f:b9:b4:c7:40:
0a:49:02:63:c6:a2:21:ae:e4:d8:a1:a1:80:97:c6:38:69:7f:
4e:af:6d:a7:e8:b1:e0:ed:ec:d1:c9:5e:9c:38:f6:91:c1:8e:
76:2e:60:e9:f4:fa:a7:3d:d6:03:c5:a9:e5:88:4c:cf:09:5d:
1e:7d:04:ec:6f:bb:6c:38:92:d2:9d:e2:52:59:98:45:2f:aa:
aa:80:d7:0d:67:57:28:a7:06:c6:d6:4c:bf:87:da:98:d8:b2:
0d:3a:46:77:d7:cc:a1:fb:e5:5b:fc:d9:72:d8:4d:fd:e2:99:
fe:a5:53:36:1a:b9:98:ae:f0:db:b2:a1:f8:88:db:70:f9:27:
af:4a:ac:a4:e5:bc:ba:e0:4e:3b:65:82:4d:a5:74:5e:d7:ee:
77:a5:52:99:79:39:35:53:ab:ec:49:18:a6:23:ae:e7:71:70:
19:51:46:04:b3:91:67:ae:ae:06:2b:e5:1b:1d:9a:da:63:ae:
74:7f:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:17 2024 by rpki-client on console-ams.rpki-client.org