Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/34KPv3ZJKqjTK48n4b6sdy2fk-c.roa
File: 34KPv3ZJKqjTK48n4b6sdy2fk-c.roa (raw, json)
Hash identifier: Fl2eGzk8VIyHYZXqm/GEfQ0PWOhV6RF8rPlpnUxqxS4=
Subject key identifier: DF:82:8F:BF:76:49:2A:A8:D3:2B:8F:27:E1:BE:AC:77:2D:9F:93:E7
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01856E6F9FA6064C3123170A32CA1BA0CC8A
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/34KPv3ZJKqjTK48n4b6sdy2fk-c.roa
Signing time: Sun 01 Jan 2023 17:44:47 +0000
ROA not before: Sun 01 Jan 2023 17:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61209
IP address blocks: 92.114.20.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Feb 2023 06:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:9f:a6:06:4c:31:23:17:0a:32:ca:1b:a0:cc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 1 17:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df828fbf76492aa8d32b8f27e1beac772d9f93e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:64:84:eb:ae:f7:6e:b1:bb:07:19:a5:48:
64:a4:8a:4e:ca:fd:4d:dc:b9:35:0e:ce:db:c5:08:
12:b0:98:49:9d:a4:76:36:08:17:fc:40:d6:75:bc:
14:4f:08:fe:76:e7:e7:57:de:e9:ce:01:44:77:e7:
31:d3:66:d1:4b:d3:7e:0b:9a:03:73:32:cc:19:b9:
7d:67:0c:5a:08:54:2c:d9:d8:1c:f4:a7:c6:67:e1:
b7:3e:a0:21:7a:e6:e6:c3:a6:68:59:b7:5c:2b:7a:
6f:66:95:63:ee:c0:c7:18:06:08:86:6b:10:1d:af:
41:e7:58:01:b5:34:56:19:06:ab:64:ec:fb:0b:1e:
56:e5:1a:bb:68:e7:3e:95:2f:6b:e9:c9:85:b2:4d:
e5:a9:8c:78:b2:b3:6b:36:38:7f:86:df:02:e4:f6:
5f:d2:b9:35:2b:68:67:06:9b:12:89:7b:a3:78:8c:
3e:c6:be:a0:c1:1d:4c:73:e1:4f:c1:74:09:47:ca:
64:87:21:11:01:aa:84:9e:19:ed:78:0d:b6:13:32:
b9:4c:fe:d1:10:ef:f2:1c:34:ba:23:69:c1:e6:46:
17:51:a0:56:bf:1b:40:03:bf:2b:2c:35:2b:15:d3:
35:15:04:bc:98:11:fb:4c:a4:e6:8d:67:59:6c:77:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:82:8F:BF:76:49:2A:A8:D3:2B:8F:27:E1:BE:AC:77:2D:9F:93:E7
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/34KPv3ZJKqjTK48n4b6sdy2fk-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.20.0/23
Signature Algorithm: sha256WithRSAEncryption
41:24:be:63:54:33:2f:5c:e2:9a:93:ea:7c:e5:b9:7a:8f:7e:
7f:63:21:cc:af:b4:27:48:e7:54:09:7d:07:29:48:3b:43:ab:
a4:08:1a:8e:21:51:07:6c:f1:20:e6:4b:6a:db:ac:19:58:41:
0b:b2:8f:16:9c:68:d3:bd:b2:56:cb:d7:17:dc:5b:af:91:13:
7a:8d:a6:5c:41:ee:da:ab:2e:f0:f0:3f:cd:57:99:35:79:b3:
fa:95:45:4e:ba:3a:67:04:a0:9e:f5:d9:23:62:dd:7a:5d:f0:
85:ee:df:55:ba:74:fc:f5:f3:30:18:bb:d0:44:94:5e:e4:1a:
80:23:54:91:11:bf:b5:82:d0:e5:f5:47:98:ee:72:a8:2b:a8:
e9:d6:38:ad:25:8a:2f:9b:93:37:7b:00:56:58:3c:47:a0:3e:
a2:25:1d:d8:99:84:75:f0:62:6e:45:5f:75:45:74:6e:71:ba:
bf:f9:b7:fe:8a:c6:85:ce:df:f2:d3:14:de:04:a2:1c:80:37:
50:9a:44:7a:88:4f:23:0c:59:00:de:1a:ea:b3:16:b8:b2:87:
b3:76:b8:f0:83:54:bf:a1:1e:9d:68:da:2b:1b:64:1e:9a:a0:
eb:10:28:cc:e0:18:6f:78:a7:c6:ad:e4:f9:37:ad:ea:e1:70:
63:03:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:12 2024 by rpki-client on console-fra.rpki-client.org