Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Oob9WRiuPmreVPv0FDvLWgmeDuQ.roa
File: Oob9WRiuPmreVPv0FDvLWgmeDuQ.roa (raw, json)
Hash identifier: pDJwTa0NhwOJ0SxwHAOZKx85765/ssqRILMoqRmvCew=
Subject key identifier: 3A:86:FD:59:18:AE:3E:6A:DE:54:FB:F4:14:3B:CB:5A:09:9E:0E:E4
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE7E1328CD6C5CDCF8E41B8F56A02C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Oob9WRiuPmreVPv0FDvLWgmeDuQ.roa
Signing time: Mon 02 Jan 2023 09:44:44 +0000
ROA not before: Mon 02 Jan 2023 09:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 85.92.113.0/24 maxlen: 24
193.107.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:7e:13:28:cd:6c:5c:dc:f8:e4:1b:8f:56:a0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a86fd5918ae3e6ade54fbf4143bcb5a099e0ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:d0:00:4c:05:f9:4c:47:a5:92:33:e5:04:
12:55:3d:49:f7:f0:ed:fe:22:f7:f1:86:6e:56:b0:
45:9f:ed:81:28:35:df:41:61:c8:1c:93:62:6e:46:
46:ce:15:88:44:f2:88:f2:ce:f6:86:ae:cc:b9:27:
e7:3d:a1:b9:4f:b1:89:b0:da:47:dc:08:b9:27:00:
b1:d7:53:2c:df:a5:64:9e:c6:22:1b:de:f7:c0:2a:
cc:be:24:a8:e5:f0:0e:a9:28:79:9f:db:2b:26:97:
c9:8a:e6:1f:ba:19:02:64:8e:f6:69:b9:da:06:5b:
69:d6:98:79:bd:42:59:96:d4:59:bf:d8:3f:b6:30:
be:52:1b:bc:c1:69:74:ce:97:d0:50:e6:24:83:f7:
e2:2d:02:b8:fd:69:06:0c:a9:95:ee:07:8c:fe:b6:
3c:73:97:30:0a:ca:bd:bd:a1:d9:7c:fa:73:e8:52:
95:f6:27:15:78:4f:d3:0e:28:c2:1b:7b:5f:a1:97:
d3:af:1b:c5:26:74:bd:a6:9f:0b:83:18:32:c3:8e:
08:6f:40:46:27:f2:57:65:ee:c5:85:eb:25:97:d6:
5c:9e:b9:be:a2:77:12:a5:3e:b1:90:af:73:48:bb:
79:8e:c5:d4:9c:ea:90:42:3d:3f:75:80:df:6d:18:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:FD:59:18:AE:3E:6A:DE:54:FB:F4:14:3B:CB:5A:09:9E:0E:E4
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Oob9WRiuPmreVPv0FDvLWgmeDuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.113.0/24
193.107.217.0/24
Signature Algorithm: sha256WithRSAEncryption
42:09:04:00:ea:d4:73:4c:31:55:10:7a:09:ef:56:25:c4:24:
68:c7:e6:33:70:e4:3d:d5:f1:b4:19:b3:f9:69:98:5a:0c:f8:
9a:e6:d7:f1:4a:ac:70:f9:9f:e4:7a:17:18:a4:f9:a3:c5:20:
cc:6b:4c:37:b2:51:d1:23:0f:a2:3d:7a:ee:7d:e8:88:ab:1d:
5c:04:8c:1d:47:bb:d0:72:37:95:fc:1b:0a:14:e4:36:68:78:
dc:2e:97:f5:16:1f:50:d2:e4:c8:8d:a1:2a:c2:9b:88:a8:89:
d6:a1:84:41:78:e2:cd:61:07:73:39:ab:72:07:e9:5f:15:0d:
77:51:35:b0:ee:fb:cb:67:9a:d2:48:62:0e:97:fa:ce:07:a2:
69:f7:29:2e:46:b4:50:4b:e8:77:f9:65:00:ac:c7:e8:7c:03:
eb:e5:ea:b4:5f:00:20:be:2d:9d:cd:d7:3a:b3:fc:69:0c:e3:
5a:63:31:10:b8:df:53:f7:81:46:85:5d:4b:7a:b0:f5:58:22:
85:d5:1d:ff:4e:41:a2:03:3d:eb:25:26:70:08:b4:71:41:53:
80:21:6a:25:d3:22:34:f3:d7:18:67:69:ee:7e:26:7a:63:cc:
a1:c8:3b:10:f1:54:2e:11:83:06:ad:a4:ea:f4:04:2a:59:e5:
3e:67:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org