Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FV4_yfb176uH_WA8SIga5sKAN24.roa
File: FV4_yfb176uH_WA8SIga5sKAN24.roa (raw, json)
Hash identifier: GzEqJeW9ainaZ1c1GkOzrXO2fmv4Wf0J0t9lEQB9hBA=
Subject key identifier: 15:5E:3F:C9:F6:F5:EF:AB:87:FD:60:3C:48:88:1A:E6:C2:80:37:6E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0185C0B3BC2A63B936923C798CA270C40BDA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FV4_yfb176uH_WA8SIga5sKAN24.roa
Signing time: Tue 17 Jan 2023 17:08:02 +0000
ROA not before: Tue 17 Jan 2023 17:08:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28546
IP address blocks: 85.92.124.0/22 maxlen: 22
85.92.124.0/23 maxlen: 23
85.92.124.0/24 maxlen: 24
85.92.125.0/24 maxlen: 24
85.92.126.0/23 maxlen: 23
85.92.126.0/24 maxlen: 24
85.92.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:b3:bc:2a:63:b9:36:92:3c:79:8c:a2:70:c4:0b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 17 17:08:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155e3fc9f6f5efab87fd603c48881ae6c280376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:7f:37:6c:1f:e6:41:d8:31:1d:ca:b3:90:
03:0b:c2:f3:86:7b:af:5f:e2:4f:d6:3e:91:46:d2:
71:80:b3:84:79:52:34:0a:cd:75:b6:2d:fa:e8:fe:
b7:f3:14:1a:12:3c:f3:e8:d0:90:52:1c:70:b6:98:
7d:46:91:be:b0:90:66:ed:f6:98:bb:44:32:52:99:
47:2c:8f:d2:83:a9:3c:0a:fa:21:e6:93:07:c4:59:
46:81:da:9e:93:06:53:12:8f:96:1c:65:38:3d:d9:
45:df:64:3c:2e:8a:a7:79:24:71:df:cf:1b:cc:39:
7d:96:9c:8d:d4:e5:2b:b0:f5:ae:29:92:00:e9:69:
f0:e4:b6:66:de:39:b0:b4:91:91:e8:22:53:b5:67:
cc:34:f6:95:99:c6:c8:af:b7:75:01:e7:6f:47:97:
9c:3a:f4:c2:d8:0f:b8:72:e6:2d:26:9f:77:16:f4:
be:e6:f1:9e:fc:df:ee:55:01:30:7f:b6:60:9b:e1:
18:2f:dc:3c:e1:08:78:29:3c:c3:fb:dd:72:a6:59:
bd:1f:c5:36:af:ff:9e:68:0a:ca:e7:8e:1f:c2:d1:
fc:81:3f:bd:ce:15:1c:2c:3e:8f:18:f2:55:9b:4d:
d6:d5:39:78:8e:ec:8c:7f:09:15:51:84:d8:68:a8:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:3F:C9:F6:F5:EF:AB:87:FD:60:3C:48:88:1A:E6:C2:80:37:6E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FV4_yfb176uH_WA8SIga5sKAN24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.124.0/22
Signature Algorithm: sha256WithRSAEncryption
76:5f:9e:76:2d:b2:d5:c1:94:0a:a9:ba:be:a6:09:12:eb:1d:
14:49:8b:b1:fe:d7:75:5b:f6:4d:38:5e:93:7f:22:9c:5b:66:
14:48:97:78:d7:96:6e:46:00:65:91:fd:d5:17:32:82:ef:c2:
89:7a:d6:65:dc:b7:75:c5:bb:29:18:6f:a9:1c:0e:dd:ee:51:
f1:6d:3c:38:c0:ce:88:2b:0b:3c:33:27:9e:5d:0f:f8:4c:19:
ee:ab:40:6f:59:09:ff:f2:35:ea:37:38:1b:d0:dc:6e:ba:a6:
f7:ad:ac:84:48:9b:fe:52:9a:9d:9b:ca:c1:74:ea:16:44:27:
8b:f7:ec:f4:60:5d:8c:0a:fd:d3:38:71:36:a5:e9:b3:4f:f3:
af:02:ca:80:2d:2a:a6:c0:97:4a:7e:ed:a2:6d:9a:b2:b6:e6:
07:78:10:52:0d:26:0a:0f:64:d8:1b:cb:38:6f:56:c8:7c:e6:
67:33:c5:bb:d4:a4:db:55:77:44:a9:a0:0b:08:f5:f8:97:24:
f7:c2:19:95:f6:58:f1:24:e9:cf:24:9d:eb:34:15:04:f2:9f:
72:d6:a7:10:2f:b8:43:dc:a1:fe:d2:44:65:61:3c:66:84:6b:
cf:5a:a9:88:73:17:dd:5a:d6:01:4e:44:19:a1:6e:3b:90:f8:
2d:79:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org