Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/sEAbdhLJt7HyCqpr-aRRLyiNwSw.roa
File: sEAbdhLJt7HyCqpr-aRRLyiNwSw.roa (raw, json)
Hash identifier: GEnpgIWA/qRBugL/V5LDU+kh5o+y/BDf+5vB9NhzNqc=
Subject key identifier: B0:40:1B:76:12:C9:B7:B1:F2:0A:AA:6B:F9:A4:51:2F:28:8D:C1:2C
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 0185730CC9510992AC8E63D698486F0011E1
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/sEAbdhLJt7HyCqpr-aRRLyiNwSw.roa
Signing time: Mon 02 Jan 2023 15:14:55 +0000
ROA not before: Mon 02 Jan 2023 15:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 92.246.85.0/24 maxlen: 24
92.246.84.0/24 maxlen: 24
92.246.86.0/24 maxlen: 24
2a10:ca80::/29 maxlen: 29
2a0d:c2c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 14 Feb 2023 10:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:c9:51:09:92:ac:8e:63:d6:98:48:6f:00:11:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 2 15:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0401b7612c9b7b1f20aaa6bf9a4512f288dc12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:64:cc:e4:c9:63:87:0a:58:de:77:df:04:
54:af:89:cd:91:e5:0f:c7:57:a1:4a:72:20:f3:93:
5a:75:28:fa:8f:df:95:88:20:37:e3:29:b6:8d:b2:
c0:34:55:59:f1:70:be:99:ff:7e:ed:cb:cd:b6:6b:
5e:22:ad:82:7a:d8:4d:93:5f:76:25:c3:43:2b:73:
28:d2:b9:1c:db:ee:08:3d:e3:45:de:d5:55:52:90:
39:a1:e6:40:80:7e:df:cb:8b:6c:f9:ca:ea:74:f4:
27:91:03:84:e2:a8:08:35:48:ae:8f:08:6c:8f:95:
33:e2:12:50:91:90:f0:06:b3:3d:31:cb:05:df:12:
58:3b:61:52:f8:10:af:78:0e:e9:11:e9:6f:57:64:
c8:62:36:3c:f7:75:81:71:92:51:fb:8a:c8:3a:e9:
60:34:28:86:f7:49:0f:c8:cc:44:ba:9a:ec:67:54:
9d:18:7a:a6:ff:fe:1c:05:45:54:76:07:d5:c8:26:
ae:7b:73:7d:f6:a1:a6:c8:1a:4c:ee:57:43:54:3e:
44:9f:3e:0d:97:29:f6:20:85:74:aa:28:f9:b4:e5:
f9:b8:09:e1:20:2e:1f:a1:64:5d:04:4a:5c:49:33:
6f:f5:0e:68:62:a6:ea:0a:2e:49:be:5c:f7:6e:26:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:40:1B:76:12:C9:B7:B1:F2:0A:AA:6B:F9:A4:51:2F:28:8D:C1:2C
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/sEAbdhLJt7HyCqpr-aRRLyiNwSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.84.0-92.246.86.255
IPv6:
2a0d:c2c0::/29
2a10:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
24:a4:51:65:7f:c5:ef:70:0a:4f:27:ad:eb:59:75:9a:14:33:
94:77:9f:74:49:aa:db:4f:36:64:e2:22:e3:6f:3d:96:f2:91:
36:3a:56:6d:ca:bf:9c:d1:45:79:b1:ab:ec:43:9a:4c:63:ec:
eb:65:c5:1b:5c:a9:0a:d3:c5:95:26:c1:b4:8f:76:56:f8:26:
3c:c0:db:58:60:47:7e:bf:79:cc:96:db:6d:62:00:d1:db:88:
97:e0:76:d4:14:7b:27:0e:28:1f:a2:05:cc:1f:2b:52:46:5d:
f2:eb:ba:7c:19:ac:26:97:f2:08:4e:d2:7c:08:06:be:1f:1b:
e2:01:5a:1e:23:df:78:69:c2:f7:e6:a6:44:3d:93:9a:60:02:
d7:12:91:de:e9:72:43:25:40:68:21:d6:99:3c:7b:a8:3b:51:
92:d2:d6:63:72:73:f2:f3:40:c9:fc:50:2d:9e:51:94:84:99:
d2:43:4d:a6:53:02:b1:4c:26:81:65:f0:1f:fb:2c:d4:d0:07:
e6:d4:7a:58:a8:d0:9f:6c:9d:2d:9f:9c:54:93:d8:c2:34:ae:
9a:81:40:5d:89:15:c3:0c:c4:9d:b1:5e:26:ce:8c:dc:d4:5a:
fb:b8:ce:ac:e4:f5:ba:5f:09:56:b0:1e:17:2a:e2:cd:28:7d:
ac:eb:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:44 2024 by rpki-client on console-fra.rpki-client.org