Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/06hd3iFmbynVzMxSQx4uhrqpFmk.roa
File: 06hd3iFmbynVzMxSQx4uhrqpFmk.roa (raw, json)
Hash identifier: T7L1Qzc3NynntclS6vNc6I3I8r2aUPkf7xx8hqw+q9A=
Subject key identifier: D3:A8:5D:DE:21:66:6F:29:D5:CC:CC:52:43:1E:2E:86:BA:A9:16:69
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018A463D6A6D0727EFC62C206A0E245E6CB5
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/06hd3iFmbynVzMxSQx4uhrqpFmk.roa
Signing time: Wed 30 Aug 2023 11:39:04 +0000
ROA not before: Wed 30 Aug 2023 11:39:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 92.119.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:3d:6a:6d:07:27:ef:c6:2c:20:6a:0e:24:5e:6c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Aug 30 11:39:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3a85dde21666f29d5cccc52431e2e86baa91669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:67:ff:7e:fd:c0:42:9e:b1:bd:52:39:45:
bc:6e:0c:f7:ab:57:47:13:89:4b:57:10:99:15:a7:
65:9c:aa:ed:5d:06:6f:ce:f0:20:4f:b2:c5:60:2c:
31:8d:17:0a:60:60:88:b5:49:7c:7f:9d:d6:f9:65:
a8:ff:31:a5:40:79:4f:6b:88:51:81:8c:3d:ce:b0:
35:04:9b:72:ab:8d:5c:f1:90:b2:29:ed:7b:92:75:
ce:16:fa:03:9c:98:8d:fa:aa:af:f8:6d:27:52:64:
5a:51:06:23:7d:96:10:ca:17:4a:bf:71:9d:3b:db:
fc:48:da:5b:2b:6a:9a:cd:03:05:8d:69:9c:eb:80:
fb:16:1c:bf:eb:2e:ea:ca:c4:71:ca:20:4e:a3:ba:
47:56:d1:f5:49:20:1a:3a:9b:73:e2:5e:4b:67:4f:
fa:1f:1e:69:de:e6:4c:71:78:bf:1d:82:3c:41:1f:
13:b4:e5:b5:ee:3b:6b:54:82:c8:65:c0:8b:46:19:
99:2c:1f:fd:2c:c4:f2:52:19:31:a1:3f:24:60:f8:
56:88:26:d1:4d:16:2d:fa:00:4f:56:03:55:1c:67:
54:ae:fb:8f:90:09:ba:02:3e:0a:f1:13:80:e4:14:
54:2c:c9:b7:98:ee:09:3a:fc:af:8a:af:07:1f:fa:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:5D:DE:21:66:6F:29:D5:CC:CC:52:43:1E:2E:86:BA:A9:16:69
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/06hd3iFmbynVzMxSQx4uhrqpFmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.36.0/24
Signature Algorithm: sha256WithRSAEncryption
45:76:85:5f:8f:d5:c7:8e:4d:20:99:4c:93:4f:e7:72:6f:71:
0a:77:f5:87:ec:1e:56:35:72:e9:77:db:61:72:e7:cb:33:9c:
c5:35:92:bd:af:d4:38:a6:1d:c7:96:b0:b1:29:0c:a2:b7:04:
81:f8:00:34:31:5d:d2:6e:c4:a6:36:0a:f3:0e:a5:f7:32:35:
6c:c6:ea:89:0c:8e:e6:43:75:ab:32:bf:ff:43:b1:1f:4b:d7:
ff:10:2a:09:80:13:1a:c5:44:3c:95:e5:56:81:e9:6e:23:5c:
af:d2:40:5b:d9:f6:fc:9b:75:73:b4:0a:17:f7:9a:10:88:d9:
08:a9:e4:2b:7f:14:27:a8:e8:21:70:85:09:e8:58:89:e8:4b:
40:15:75:f1:32:32:85:e6:54:3d:cb:60:c6:6c:b4:0b:7a:31:
4c:b7:c9:88:cf:ef:86:f8:43:6f:bf:af:33:1c:ca:3f:97:47:
54:a7:94:fe:f3:38:b6:18:7c:37:50:5c:be:86:c6:fa:45:2d:
c2:87:55:20:10:8a:b9:9f:c3:5c:f5:ef:2d:e2:28:a2:52:0f:
a8:70:85:09:6e:65:40:dd:c4:4c:9b:9c:29:b8:e2:e7:b7:13:
d4:56:2c:b9:ab:f3:a2:d6:9a:da:68:1d:5e:43:cc:a5:81:fa:
b9:ad:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:00 2024 by rpki-client on console-fra.rpki-client.org