Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/98zDt3GSODBHjYfr5XrI9JSS7iA.roa
File: 98zDt3GSODBHjYfr5XrI9JSS7iA.roa (raw, json)
Hash identifier: kQvz+rr9s5KCzpZ1N0iPCMocNraJdt83BCktQrFGpOs=
Subject key identifier: F7:CC:C3:B7:71:92:38:30:47:8D:87:EB:E5:7A:C8:F4:94:92:EE:20
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 01856F42C325F893A42CC750C9C85BF5A1A9
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/98zDt3GSODBHjYfr5XrI9JSS7iA.roa
Signing time: Sun 01 Jan 2023 21:35:24 +0000
ROA not before: Sun 01 Jan 2023 21:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 192.104.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c3:25:f8:93:a4:2c:c7:50:c9:c8:5b:f5:a1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Jan 1 21:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7ccc3b771923830478d87ebe57ac8f49492ee20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:12:dd:97:45:76:ab:4e:cf:c6:a2:02:29:
a9:46:f8:e9:5b:f7:88:e0:f2:4b:d4:4d:12:6a:71:
1a:3d:ff:1b:74:3c:21:1a:76:92:ee:37:e9:dc:80:
01:27:56:74:86:1f:cd:0d:83:cd:62:79:c5:9d:22:
c0:f1:14:ae:76:e7:4d:8d:61:10:8a:d8:c0:54:04:
d6:ff:13:56:cc:73:31:eb:f7:70:72:74:a8:c9:e6:
6f:85:df:fd:c0:8d:8f:8a:8d:6e:9d:92:40:f8:b0:
8e:3c:1e:35:9d:1a:a1:ca:a2:f9:fc:b9:32:03:bd:
da:53:25:65:23:19:db:42:5e:a9:98:d3:f4:49:f2:
e4:76:e3:ad:f9:f5:de:ce:b0:e0:35:7c:3b:81:79:
d7:01:2f:77:57:07:35:82:9b:13:fe:20:38:39:4f:
ff:77:91:52:cb:ed:af:9d:4e:56:00:af:e1:29:4b:
40:60:49:6e:74:e5:9a:c1:ce:d7:44:03:5c:ec:a4:
dd:88:fe:31:bc:5f:5a:b3:40:49:9b:56:2d:3a:ff:
0a:16:e5:43:38:24:8d:ef:6c:c5:1b:6f:43:13:6a:
b0:9a:41:e4:ac:30:c7:cc:d8:3d:d3:8f:15:81:1b:
f7:dd:45:ba:a4:18:04:7d:2d:b0:60:f7:de:71:91:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:C3:B7:71:92:38:30:47:8D:87:EB:E5:7A:C8:F4:94:92:EE:20
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/98zDt3GSODBHjYfr5XrI9JSS7iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.104.140.0/24
Signature Algorithm: sha256WithRSAEncryption
54:69:63:38:4d:e1:c4:67:2b:27:3a:04:12:06:72:6e:21:af:
29:51:15:b8:c4:e9:37:e7:65:00:0e:63:c8:c4:00:82:4e:91:
3e:a7:f8:ab:81:b7:6c:0f:0e:d4:cc:b7:b8:6c:bb:61:18:6a:
53:1b:39:94:31:1b:23:d6:c5:38:d0:2d:f8:91:35:a7:1f:a1:
79:f8:1d:1d:03:d0:17:0c:ff:7e:2e:4f:23:da:e5:2f:89:09:
de:69:02:99:49:25:16:4b:53:06:81:2f:7e:bf:90:6c:f1:0f:
4f:bf:ee:49:22:03:70:6a:09:80:85:81:0f:73:c3:b9:b2:7a:
f7:44:58:f7:2c:2e:d2:19:95:26:c9:ce:97:9a:a2:82:22:e8:
d3:b8:67:8a:d0:3b:45:26:ee:ad:da:07:9d:15:96:97:86:61:
6b:52:89:23:fa:62:f5:16:4e:e6:42:81:a3:55:09:86:30:b8:
98:27:36:6c:59:b9:b0:72:63:d1:c5:52:56:ef:de:09:2d:03:
c0:68:ae:96:6b:73:a8:6f:91:5c:ad:0b:38:35:b8:d4:28:cc:
1d:08:bf:b6:7e:d9:e8:59:28:9a:3c:74:ca:1d:81:c2:45:1c:
1f:e4:12:cd:9f:75:66:4e:f1:e9:94:95:31:39:66:b2:79:89:
bd:7a:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:40 2024 by rpki-client on console-fra.rpki-client.org