Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/C2JjS7HGmSbIyodDhyUo86bHUv0.roa
File: C2JjS7HGmSbIyodDhyUo86bHUv0.roa (raw, json)
Hash identifier: wudoRVZqm1IOikhOtzHt+/SlbiaQpLSZDr2qE7cchTo=
Subject key identifier: 0B:62:63:4B:B1:C6:99:26:C8:CA:87:43:87:25:28:F3:A6:C7:52:FD
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 01856BE5866F697D0359B8BB0F1ACC82B432
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/C2JjS7HGmSbIyodDhyUo86bHUv0.roa
Signing time: Sun 01 Jan 2023 05:54:42 +0000
ROA not before: Sun 01 Jan 2023 05:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42005
IP address blocks: 92.240.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:86:6f:69:7d:03:59:b8:bb:0f:1a:cc:82:b4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Jan 1 05:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b62634bb1c69926c8ca8743872528f3a6c752fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:19:82:ea:cb:c4:06:73:bb:bf:d7:ac:43:
dc:29:1d:e1:32:51:6e:cb:07:e4:2c:29:3c:4c:3d:
8e:a6:b0:43:f7:35:53:7f:13:c2:80:ea:b1:7c:86:
5f:19:d5:de:ea:14:14:fd:0d:e6:63:9e:4a:e4:63:
e0:4d:c2:f5:f7:42:19:53:fe:19:ea:f6:b3:27:4c:
e9:a9:6a:c1:00:4e:a4:18:a5:cd:f0:6f:53:30:40:
b1:b0:92:e0:13:6a:25:88:c5:5a:3f:eb:41:48:e7:
0d:65:1d:29:2b:b7:77:66:5a:e9:4f:d0:36:e1:bb:
cb:43:11:29:06:bb:1d:6d:55:de:3b:10:7f:c2:fc:
bd:0e:3f:91:c8:d9:76:9a:1c:1f:53:64:dc:c3:e1:
85:5e:9d:45:92:2b:14:9c:84:8b:38:f1:ad:ae:85:
2b:80:3d:ef:6d:44:ca:49:8e:74:45:42:ce:93:ae:
9f:d0:a2:11:ad:47:ab:25:bb:0f:88:25:df:2c:5f:
c5:c5:1b:72:10:f8:b1:2b:89:d9:2a:f3:91:33:49:
63:ea:c6:97:d3:38:0c:a1:d0:49:9d:78:48:2a:17:
08:50:7f:76:a6:f3:6b:05:2a:e2:3a:9d:ef:0d:d7:
92:8c:46:77:e0:e5:28:c6:3a:e5:f6:13:20:84:0e:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:63:4B:B1:C6:99:26:C8:CA:87:43:87:25:28:F3:A6:C7:52:FD
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/C2JjS7HGmSbIyodDhyUo86bHUv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.228.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fb:ac:02:1e:31:58:bf:59:78:26:bb:16:d2:2b:f9:f1:5e:
0e:f9:ce:3c:7d:6e:be:57:50:2a:06:27:6c:46:f5:0d:46:40:
e1:1e:35:c0:cc:e7:fa:0e:c3:95:9d:5b:34:1a:bc:e3:5b:30:
e0:cc:27:03:c3:35:ed:ff:e7:bc:2c:79:5a:fb:e9:3d:e1:51:
60:a5:08:15:7b:67:c9:20:55:ba:bb:a2:f4:3c:e7:a5:0f:30:
ee:83:57:29:f0:e9:39:65:5d:82:dd:25:a5:f2:92:cc:26:05:
f3:64:ed:70:d9:f4:db:e8:41:bb:70:31:8a:23:75:b5:a0:90:
4f:36:69:bc:63:80:7c:a5:34:47:3b:22:f4:d0:80:5f:2e:00:
bf:d7:db:0f:f9:fd:91:99:05:70:38:f4:e0:3c:49:dd:eb:59:
03:cf:fc:3d:d7:98:f4:35:eb:0e:81:ca:98:3e:9f:6f:59:17:
a9:24:f4:04:18:8e:3d:e0:4e:46:30:e2:f8:60:61:c0:dc:ba:
8e:f1:ca:78:4c:db:b9:50:ae:84:5f:93:55:b8:a6:1e:04:5f:
02:8f:cf:2f:54:0b:89:22:09:27:19:54:b6:aa:f6:67:84:b7:
53:83:7b:4b:21:1b:32:d5:dd:5b:82:25:64:0c:0a:5f:33:b3:
26:7b:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:30 2024 by rpki-client on console-ams.rpki-client.org