Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/49ox21MkBQmwFvaJltlLzvhmpKM.roa
File: 49ox21MkBQmwFvaJltlLzvhmpKM.roa (raw, json)
Hash identifier: Gve7KskhQT5GIwwIx91MkUvYbZrIQREVA3whGIsR8bE=
Subject key identifier: E3:DA:31:DB:53:24:05:09:B0:16:F6:89:96:D9:4B:CE:F8:66:A4:A3
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 018CC56EE1380EF3320E03E5F32F652F4E37
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/49ox21MkBQmwFvaJltlLzvhmpKM.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 188.92.137.0/24 maxlen: 24
188.92.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 08:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e1:38:0e:f3:32:0e:03:e5:f3:2f:65:2f:4e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3da31db53240509b016f68996d94bcef866a4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:f6:83:9d:5b:b1:0d:d6:e4:85:20:4b:32:
ec:78:09:fd:df:17:13:91:be:7d:61:8f:e0:4d:cf:
4d:08:ee:08:46:76:b0:70:39:01:ef:f2:41:dc:97:
e1:64:78:03:db:15:1c:84:40:b7:c1:a0:3a:e1:e1:
ba:84:f7:e3:61:0a:f9:b7:67:b7:27:a5:8b:d1:79:
5e:44:8f:a8:ca:da:3a:91:a8:7a:d5:81:f1:a4:02:
08:6b:5c:4d:37:fe:67:d3:73:5e:35:08:58:e1:ea:
e3:ef:b7:13:6a:9e:c4:26:1e:ff:a0:60:98:59:c4:
65:89:02:92:4a:b0:3a:cd:34:3a:e1:b4:29:fe:d9:
2a:2a:15:a1:16:fb:bd:9b:f7:8c:ff:d1:e7:44:a6:
c3:60:f9:ae:41:12:04:b2:48:91:42:89:df:f7:7d:
95:00:2b:54:7f:59:de:52:ff:c5:31:f2:a1:bc:b8:
b7:32:f6:7d:86:2f:d1:5c:0a:0b:ea:0e:37:d7:16:
ed:a4:4f:cb:ef:e1:4a:bc:96:5a:bb:8c:a1:d9:db:
ca:d9:ef:3b:f4:55:22:6b:eb:71:b4:9d:83:26:ac:
3d:e8:05:40:14:09:7c:16:eb:28:9c:65:4b:62:d4:
12:cd:02:7d:14:33:84:06:ac:11:cd:04:53:81:04:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:31:DB:53:24:05:09:B0:16:F6:89:96:D9:4B:CE:F8:66:A4:A3
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/49ox21MkBQmwFvaJltlLzvhmpKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.136.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:0f:c2:c2:1a:c1:20:7f:c5:af:49:ec:b3:42:c4:c3:3d:6a:
a4:4a:96:af:00:58:32:d1:84:05:4f:42:88:6d:fc:4b:f8:84:
43:9a:da:9f:26:eb:e5:a4:31:0a:cd:47:35:f1:31:96:b1:0b:
2e:c9:4c:4b:2f:14:36:0b:54:45:48:1e:24:52:57:fe:d0:14:
98:22:5b:29:59:f5:da:f1:86:b2:0f:a9:67:7e:e7:c2:75:d3:
ba:59:e9:31:eb:03:81:04:f4:90:c1:66:8c:0a:56:82:bd:d5:
e7:62:80:4f:bc:f0:da:2f:53:a5:15:32:87:89:fa:e3:32:56:
80:1d:69:6b:a9:0e:15:17:89:56:53:a7:e7:f0:e6:2e:00:8f:
bd:f2:90:54:74:53:b2:ef:00:7c:07:0a:98:1f:c5:70:b0:a0:
59:7a:47:d4:f5:5f:6a:29:a1:b1:a4:2f:32:2f:07:b5:cb:65:
45:01:08:37:94:6e:27:1f:6b:46:40:c6:7b:a6:d8:e7:3e:4d:
56:bf:1b:e0:5f:c0:62:39:a9:64:3d:41:68:5c:14:70:88:93:
2b:fb:ac:aa:30:5d:3f:30:eb:7b:59:7b:0c:c0:25:3b:63:fa:
ad:be:e1:ed:da:32:ef:99:ef:f5:5b:c6:cd:ae:ed:7c:68:b1:
2b:6f:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:10 2024 by rpki-client on console-fra.rpki-client.org