Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/k7B_xFLbQIdc27vSsqmB6fTwZ70.roa
File: k7B_xFLbQIdc27vSsqmB6fTwZ70.roa (raw, json)
Hash identifier: /tCPUkFVC0nZAp7Shm+qwazJMcw6P+3xKDdKKk8Y2CM=
Subject key identifier: 93:B0:7F:C4:52:DB:40:87:5C:DB:BB:D2:B2:A9:81:E9:F4:F0:67:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 01856C1C774877E0E646E8761A20F68439AE
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/k7B_xFLbQIdc27vSsqmB6fTwZ70.roa
Signing time: Sun 01 Jan 2023 06:54:42 +0000
ROA not before: Sun 01 Jan 2023 06:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209255
IP address blocks: 92.119.54.0/24 maxlen: 24
92.119.52.0/22 maxlen: 22
2a09:b640::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:77:48:77:e0:e6:46:e8:76:1a:20:f6:84:39:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Jan 1 06:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93b07fc452db40875cdbbbd2b2a981e9f4f067bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:e3:ed:ca:e6:32:b1:45:d8:b4:a7:44:03:
88:33:d8:43:e6:37:d6:46:da:e6:90:cd:fe:91:0c:
66:75:ad:8f:a0:34:d9:c1:a9:34:d3:00:ba:37:04:
15:61:db:f8:5f:86:a3:81:86:88:8e:9c:7f:94:68:
44:b6:51:28:36:58:4c:55:d8:fa:80:83:da:6b:45:
59:0c:29:c7:6c:18:2d:74:d7:d5:47:97:3e:89:72:
b0:4a:b2:9e:a7:6e:8f:31:ab:1b:bc:d8:59:7c:02:
87:bb:0a:2a:fb:2d:1d:38:df:31:11:af:ab:dd:8d:
7d:9e:0b:7a:bf:a2:47:37:87:29:61:ac:85:49:da:
1f:5d:66:da:b9:32:e9:7d:5a:28:27:7a:0d:45:af:
99:cb:31:92:8a:53:2e:ff:f7:31:67:25:7f:37:9f:
05:a8:51:6c:07:fe:e0:66:96:82:1e:7b:ce:6d:98:
dc:27:f1:65:05:94:a6:75:d6:5a:0d:54:43:8a:e7:
ce:29:02:c3:54:f1:41:76:f8:0a:86:40:ec:17:af:
0c:a3:9e:f8:9d:57:38:dd:40:ee:da:1a:67:5b:01:
1a:cc:20:b6:be:20:5f:5b:68:7f:e7:e6:20:87:65:
7d:68:b8:fd:79:20:99:67:9c:b8:a3:b8:05:39:ae:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:7F:C4:52:DB:40:87:5C:DB:BB:D2:B2:A9:81:E9:F4:F0:67:BD
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/k7B_xFLbQIdc27vSsqmB6fTwZ70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.52.0/22
IPv6:
2a09:b640::/29
Signature Algorithm: sha256WithRSAEncryption
a1:5a:86:dd:55:70:4c:ce:cd:f2:a5:1f:60:b9:c0:55:85:29:
47:ef:6c:0a:9c:3b:fc:d8:ca:6d:eb:cc:7b:b9:ab:89:a0:28:
59:9e:f1:91:8d:c8:3a:11:42:cd:e9:eb:b2:39:64:a8:47:99:
d9:2f:76:a5:14:f3:67:a1:74:48:e4:70:8c:b4:e2:a0:1f:fc:
0e:30:a8:11:8b:ea:0d:8d:e6:b3:88:07:2b:55:36:bf:71:39:
7f:01:c2:63:53:f1:9d:55:e3:75:91:65:01:a3:cf:ad:79:a5:
9a:2f:cb:c7:91:35:b6:4f:11:53:7b:27:61:b1:58:df:13:7c:
1e:b7:fa:02:ed:48:3a:fe:37:26:4b:38:63:74:00:c0:cb:73:
0e:a0:16:6a:3c:52:60:55:2a:0c:29:a8:24:8a:bc:c6:64:f0:
a4:d7:a1:66:9e:65:32:b7:f3:6f:94:3c:4c:e6:f2:f8:d9:53:
31:b3:9e:50:32:e8:b3:f6:ba:b2:0f:0a:dc:10:0c:e7:5d:b9:
fd:46:ca:2f:5b:12:d1:fa:e5:6b:bc:a5:5d:86:97:70:3b:2c:
2f:5f:1b:0e:e2:d0:94:ab:30:ca:df:88:ee:6d:95:d4:f9:f7:
19:5e:bb:ce:13:61:0d:ae:a0:9f:10:39:c8:9e:45:95:c0:16:
3d:71:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:29 2024 by rpki-client on console-fra.rpki-client.org