Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/0mwRBf1v9w0DiqkKSo1s-T2AC4o.roa
File: 0mwRBf1v9w0DiqkKSo1s-T2AC4o.roa (raw, json)
Hash identifier: Ad8H+YUqc6Nw2M62Ha8MOeu1m4yGR1Q7/MmyX1eVDxY=
Subject key identifier: D2:6C:11:05:FD:6F:F7:0D:03:8A:A9:0A:4A:8D:6C:F9:3D:80:0B:8A
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 01856EAFB314B84C4AECDEF6D32C9C4866DE
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/0mwRBf1v9w0DiqkKSo1s-T2AC4o.roa
Signing time: Sun 01 Jan 2023 18:54:46 +0000
ROA not before: Sun 01 Jan 2023 18:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197190
IP address blocks: 92.119.213.0/24 maxlen: 24
92.119.212.0/22 maxlen: 24
92.119.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:b3:14:b8:4c:4a:ec:de:f6:d3:2c:9c:48:66:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Jan 1 18:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d26c1105fd6ff70d038aa90a4a8d6cf93d800b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:5b:1d:58:be:20:7c:e2:bc:8f:41:fb:24:
37:25:d5:ba:56:25:7c:57:22:87:5f:ce:85:36:c6:
b5:97:1f:f7:85:4a:ef:a2:fc:ab:5f:2c:01:ee:6c:
d3:85:6b:be:94:c4:74:4d:e5:9d:bc:82:17:a5:b0:
dd:ae:a0:f3:f6:b3:69:09:f9:24:9b:ea:7f:bf:42:
79:2f:a1:75:3e:28:dd:a6:86:96:f8:fe:d1:67:c1:
b0:8e:9d:76:5b:c6:76:79:fc:0e:83:3c:72:b0:b6:
67:ce:e8:a6:e9:e0:18:e0:36:c5:98:84:cc:14:e0:
40:de:b6:ea:4e:13:6a:dc:d6:b8:7c:dc:c7:a1:21:
be:6a:74:57:f6:79:17:0d:0f:9e:3a:94:c2:c7:ba:
2a:bd:7e:e0:ce:ac:af:ce:fd:4f:8f:e0:8f:84:ce:
5c:6a:6d:a0:36:04:e1:d9:7a:47:d0:40:d8:ff:21:
e3:17:5d:87:16:f9:c3:74:27:d8:d1:c3:64:36:f4:
39:03:ab:8a:bb:f2:37:2a:f1:6e:de:32:79:fa:d9:
62:0b:51:0b:24:00:ef:5b:55:83:66:c2:fe:59:e9:
b0:1d:05:78:50:81:82:bb:34:59:b2:a5:66:57:1a:
78:28:77:b2:ef:6f:c8:5b:9d:3f:99:52:46:86:06:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6C:11:05:FD:6F:F7:0D:03:8A:A9:0A:4A:8D:6C:F9:3D:80:0B:8A
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/0mwRBf1v9w0DiqkKSo1s-T2AC4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:f7:0a:46:2e:d5:30:44:3a:36:0f:17:cd:7b:3b:c7:bd:f0:
15:8f:77:f1:0c:34:f8:d7:a7:d3:1b:20:75:17:84:04:c8:3a:
e2:f2:72:70:99:42:90:53:0c:19:3a:17:d3:b5:93:da:3c:c6:
8b:05:5a:6d:4f:4e:54:83:71:67:8b:4d:5a:f4:09:8b:08:57:
33:4f:ef:ff:19:e7:a3:e8:fa:41:8f:80:85:ec:73:de:88:09:
1d:31:b5:e8:92:9b:83:30:26:d8:21:60:cf:ab:26:9c:f0:a5:
7d:60:56:18:b1:15:2e:41:fb:e9:24:cb:9e:92:de:f0:48:0a:
0c:40:47:40:95:5d:6f:ce:45:b7:c4:a6:93:8e:9f:ce:59:60:
e6:cc:b7:99:f2:db:8e:da:e1:93:6b:85:56:eb:cf:d2:d7:06:
0b:9e:b9:15:83:19:56:b9:71:e8:af:96:29:42:f4:ec:1c:a6:
78:db:27:bb:2d:43:f8:4b:92:66:d6:ce:5e:03:25:fd:75:b7:
02:1a:ec:a7:42:b8:e3:3b:92:ad:60:84:24:6a:6f:8b:22:7f:
6a:b0:e6:9c:d9:c9:4f:a8:6e:a6:42:5c:19:d1:6d:b7:2d:32:
09:d5:c1:26:f3:27:9b:c3:ff:e8:38:81:48:f6:3f:7b:8a:d3:
85:7f:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org