Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/_d8yAQmFoepChDVxjQMVMez8LSk.roa
File: _d8yAQmFoepChDVxjQMVMez8LSk.roa (raw, json)
Hash identifier: 85WcTyWjfL1I40VpLzaSSwnoFevMyfuFtO/lSEPPI5s=
Subject key identifier: FD:DF:32:01:09:85:A1:EA:42:84:35:71:8D:03:15:31:EC:FC:2D:29
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01856B934432F9F25C3AC89A401DBEB0C2E2
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/_d8yAQmFoepChDVxjQMVMez8LSk.roa
Signing time: Sun 01 Jan 2023 04:24:51 +0000
ROA not before: Sun 01 Jan 2023 04:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24971
IP address blocks: 92.63.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:44:32:f9:f2:5c:3a:c8:9a:40:1d:be:b0:c2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jan 1 04:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fddf32010985a1ea428435718d031531ecfc2d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:1c:0d:98:1f:b8:e1:a7:72:e7:82:13:5b:
43:40:d6:6f:81:6c:73:76:4c:95:b6:4c:42:90:ed:
50:8d:e7:17:5e:76:6d:9e:56:73:fe:38:5d:07:43:
4c:dd:2e:33:9d:65:25:f1:34:e5:14:84:12:14:5b:
ba:59:bb:81:60:b7:40:3b:9a:a9:04:e4:13:fb:a3:
87:bd:1b:4d:22:90:c2:1f:06:11:72:00:40:e2:80:
f2:54:5a:5c:6a:66:02:c6:5b:53:a3:32:d0:a2:16:
2e:1e:5e:11:b8:88:18:1a:a4:b5:94:21:a3:c4:8d:
62:a5:8c:a1:e9:dd:d7:72:f8:b7:6c:12:e9:f0:a2:
06:0c:97:a0:7b:da:9d:66:13:c6:89:95:7f:0e:9e:
6c:d7:dd:74:c5:c3:ae:18:b2:f2:f3:99:c5:da:06:
b6:a3:be:e8:95:d2:78:f0:78:40:f5:00:e8:46:2c:
fb:22:c1:47:8d:27:9b:10:b6:e2:cf:e6:ad:cf:d3:
ce:94:9d:68:29:1a:10:ff:13:09:5c:d6:ff:b1:91:
07:a2:c5:6b:8c:53:9d:9f:0e:db:63:da:a9:1b:2d:
56:a3:70:12:2f:90:f1:ba:2c:38:71:f0:b6:25:34:
94:d2:4e:73:d2:9a:07:0d:b7:07:52:a7:94:b2:62:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DF:32:01:09:85:A1:EA:42:84:35:71:8D:03:15:31:EC:FC:2D:29
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/_d8yAQmFoepChDVxjQMVMez8LSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:64:73:7b:b5:3f:f0:a0:f4:8f:10:80:18:cd:10:3a:57:83:
b0:f8:3b:11:cd:d9:c7:0f:8b:fd:c7:6c:ae:be:a4:68:fa:5d:
5e:8a:aa:fa:8f:91:df:c9:38:e5:e8:39:b5:32:80:8a:1d:9d:
79:28:7a:54:ed:6f:7e:5a:f2:bc:98:b8:1c:ce:36:9d:23:5c:
79:10:ea:86:52:0f:19:d5:13:c7:dc:a9:18:ea:82:e3:37:ea:
76:39:c8:dc:8f:01:74:6f:d7:46:46:f9:cc:45:03:7c:12:7c:
88:95:4e:8d:6a:80:63:65:27:0c:4c:3e:cb:37:e7:6b:6c:72:
58:8b:e2:c3:f8:b8:5b:20:b6:16:5b:a6:8f:e3:4c:f0:bd:a8:
24:fa:1f:bd:d2:0e:8e:da:f6:e9:1b:3d:59:ed:64:d5:aa:a9:
ce:20:cb:20:47:e1:09:d7:cf:74:51:ae:9a:f7:7e:e2:71:b1:
c9:b2:cd:e4:da:f0:02:16:40:e2:f6:01:1b:6f:dd:b5:aa:af:
f5:7e:ea:0d:61:4c:be:a1:cd:e7:70:d2:ee:fd:a5:45:31:1c:
d4:9b:e6:2e:15:2e:ad:3a:05:31:6f:21:05:0d:36:07:37:7f:
3a:2e:e4:7d:d0:db:50:97:d8:79:c8:be:ec:27:94:a4:58:13:
a4:e2:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:57 2024 by rpki-client on console-ams.rpki-client.org