Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/xRzIMS36P1VyMmtJ_btXbdfcJTg.roa
File: xRzIMS36P1VyMmtJ_btXbdfcJTg.roa (raw, json)
Hash identifier: bIzQX8t1J2OJ3eT5DTaDdMNcIeAyKzu0iaJSJRDUoE8=
Subject key identifier: C5:1C:C8:31:2D:FA:3F:55:72:32:6B:49:FD:BB:57:6D:D7:DC:25:38
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 0188E232235C3E37DDE87180672C7C3D35E7
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/xRzIMS36P1VyMmtJ_btXbdfcJTg.roa
Signing time: Thu 22 Jun 2023 08:21:56 +0000
ROA not before: Thu 22 Jun 2023 08:21:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 92.119.36.0/24 maxlen: 24
2a0e:d785::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 30 Aug 2023 11:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:32:23:5c:3e:37:dd:e8:71:80:67:2c:7c:3d:35:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jun 22 08:21:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c51cc8312dfa3f5572326b49fdbb576dd7dc2538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:25:08:44:7c:dc:3e:9d:c0:63:22:6e:7b:
48:44:7d:e2:f3:d1:1e:6c:fb:78:75:c3:4b:64:96:
38:d6:80:92:47:45:a0:3b:18:4f:26:5a:23:5a:6a:
25:8e:be:4e:69:27:18:8e:ad:93:6b:e8:0d:bb:54:
03:5a:3a:7e:a6:c2:a7:da:86:d5:4a:4f:76:bd:d5:
9f:7c:52:c5:af:48:2f:5c:34:84:5b:31:05:5a:06:
ab:13:1f:9a:b1:31:3f:d4:f0:c7:31:06:33:9c:fc:
4b:89:d1:24:50:e9:c4:e2:14:af:fc:4e:22:e5:ad:
ca:98:f0:dc:83:ef:77:8e:a8:e5:3f:56:c6:33:5a:
6a:c1:8d:0f:50:37:39:62:b3:dd:dd:ec:e8:7d:4f:
50:27:a5:ef:fd:41:1f:4f:e3:5e:dd:34:59:20:10:
e4:86:0e:57:7c:99:bc:de:2b:a6:81:70:e0:57:75:
a7:51:8e:43:25:97:5a:94:c4:3d:de:03:85:e1:68:
9d:b4:76:a1:5b:0b:b9:85:9d:80:22:9f:a5:83:53:
47:99:bb:06:2c:15:f1:15:0c:5c:d2:27:db:3d:f7:
16:0d:55:07:ad:dc:93:8f:58:5e:e5:fb:77:40:de:
27:e4:1a:67:14:5e:4f:a1:7a:df:41:75:c3:c1:3a:
86:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:C8:31:2D:FA:3F:55:72:32:6B:49:FD:BB:57:6D:D7:DC:25:38
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/xRzIMS36P1VyMmtJ_btXbdfcJTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.36.0/24
IPv6:
2a0e:d785::/32
Signature Algorithm: sha256WithRSAEncryption
83:b4:84:30:ce:34:c0:1e:8d:73:b1:cb:b1:3a:01:5f:3f:79:
80:d5:6f:99:f3:75:dd:82:ad:b7:ed:39:aa:63:8e:84:de:a5:
da:5b:2f:a9:8e:63:4a:7f:24:04:d0:e7:7c:ba:2e:4f:08:4d:
89:64:31:f1:07:fb:ee:6f:5f:c7:97:1a:cd:33:09:ba:64:af:
07:9c:71:f3:f9:81:cc:96:0c:aa:27:96:d2:63:62:da:8f:5a:
26:90:96:81:8b:aa:f8:68:07:30:13:a9:e4:f0:d3:5a:7f:13:
b8:f2:9a:ed:cb:c2:06:0a:99:29:ec:48:a5:47:e8:f4:d3:0d:
d7:6b:4d:f8:a8:d4:a2:1c:b6:46:ce:77:b1:37:4f:16:ef:2a:
dc:6a:cf:eb:e6:4d:9c:1b:98:fc:a5:83:b9:14:ed:7e:df:41:
3d:67:bb:7d:1b:73:2b:a8:e0:5c:cf:ed:56:f5:bc:5e:ec:55:
64:9e:a6:f2:a7:5b:bd:0b:7f:30:06:17:e5:d7:d7:e7:ff:e8:
a8:4f:54:75:1f:e1:a1:9d:f0:16:ad:8c:8b:ba:43:be:af:41:
5c:6f:6d:ec:03:d5:45:4a:eb:96:55:f3:a7:00:46:9f:fb:cb:
ed:e4:84:02:be:66:0d:e7:02:e4:3d:1e:70:70:f2:2d:90:6a:
7f:a9:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:24 2024 by rpki-client on console-ams.rpki-client.org