Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/BYR2NLivsd7fdCNqlkjVfEk776A.roa
File: BYR2NLivsd7fdCNqlkjVfEk776A.roa (raw, json)
Hash identifier: SMBNooDhk0/CJOsPCdd1wRpYzxtXHy9DLJxVkF8xXIs=
Subject key identifier: 05:84:76:34:B8:AF:B1:DE:DF:74:23:6A:96:48:D5:7C:49:3B:EF:A0
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 0188285853DAD8AF8A60ED50531752DB6C8E
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/BYR2NLivsd7fdCNqlkjVfEk776A.roa
Signing time: Wed 17 May 2023 06:14:17 +0000
ROA not before: Wed 17 May 2023 06:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 92.118.22.0/24 maxlen: 24
92.118.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:58:53:da:d8:af:8a:60:ed:50:53:17:52:db:6c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: May 17 06:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05847634b8afb1dedf74236a9648d57c493befa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:2f:e8:90:a8:fe:8f:18:1d:58:2f:8e:91:
52:01:f4:e2:8d:e1:61:7d:ff:2b:f5:c7:aa:18:83:
ff:01:28:f7:46:24:bc:64:e9:4f:41:de:3c:d1:b2:
2f:92:9d:93:72:83:34:c4:f0:34:55:3f:f8:bd:4f:
70:1b:6d:d1:08:00:c6:d4:ae:ac:b1:86:15:c1:31:
8a:95:53:0a:5f:52:b9:04:cc:a9:6c:f7:00:63:ad:
58:18:57:a2:38:7b:e8:0e:eb:21:83:36:aa:f7:c8:
92:67:e0:a7:c1:e6:c5:b6:64:3f:67:8c:76:9a:11:
33:1d:66:fc:8c:3a:9a:3e:39:49:c0:f3:d6:fa:ab:
b3:82:2d:ec:e1:12:b5:22:d0:63:be:c5:00:e0:24:
85:02:0b:19:f4:d3:cb:7d:82:17:09:14:61:c1:cc:
78:a4:d8:e8:76:9b:d9:7e:a3:c9:d6:1a:b3:87:35:
7b:7e:7e:64:0b:ac:21:1e:66:70:4a:8c:24:28:98:
cb:bb:c6:f1:41:b9:9c:69:e2:2c:1c:1f:8b:31:7b:
a2:23:13:03:bc:3b:5d:5e:45:d2:d9:96:c6:2d:d3:
ea:4b:33:e3:84:c3:68:d2:11:13:38:5a:e9:f2:52:
68:aa:fc:85:cf:d6:ee:b2:be:5a:2c:50:06:37:ca:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:76:34:B8:AF:B1:DE:DF:74:23:6A:96:48:D5:7C:49:3B:EF:A0
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/BYR2NLivsd7fdCNqlkjVfEk776A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.22.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:a6:10:95:8d:25:3b:cf:0d:13:03:f7:de:64:0d:38:88:84:
5c:13:a5:cd:5c:ac:51:23:13:47:cc:13:86:41:c4:3b:1b:da:
83:83:cf:da:33:58:cf:cd:01:49:76:3f:ba:91:96:d1:f4:58:
ab:65:1c:81:52:71:6a:7f:09:3b:54:17:00:17:a8:4b:0c:04:
97:04:65:e5:34:f3:da:c5:71:a5:73:f4:03:4a:df:46:d9:e8:
91:b2:14:e4:10:ad:10:bd:1d:e4:4b:bc:32:87:85:7f:05:0a:
72:56:46:3c:69:a8:e0:16:24:10:22:e2:ed:ab:cb:1a:92:27:
3e:a0:d6:3a:91:cc:df:38:ca:c4:58:71:a2:c8:73:6a:7d:1c:
bb:19:b9:fb:c8:7f:1f:6a:d0:79:61:8e:29:24:14:0f:f6:d7:
de:fc:df:53:28:70:68:ef:4a:64:71:99:63:d1:ef:c8:08:9e:
7c:9c:4a:79:66:7f:1e:e6:13:5d:40:9b:d7:61:d5:a5:e8:06:
3a:66:cb:e6:97:0d:90:bd:a3:ef:3a:cf:78:07:45:f4:76:30:
c9:74:b3:2b:a8:6a:3f:cf:5f:ce:88:cc:82:d3:14:80:5d:b8:
ac:cc:af:13:55:f0:66:d1:8a:75:b3:b0:6f:98:36:a4:7c:90:
45:cb:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:15 2024 by rpki-client on console-ams.rpki-client.org