Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/Clt_Uk8679Y2TMC-oEKnykq1JO4.roa
File: Clt_Uk8679Y2TMC-oEKnykq1JO4.roa (raw, json)
Hash identifier: TIY4Fg8XdXxaLexihzXlq+/7utW/uqjC2LqFqPFxq9I=
Subject key identifier: 0A:5B:7F:52:4F:3A:EF:D6:36:4C:C0:BE:A0:42:A7:CA:4A:B5:24:EE
Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial: 018572A7FC1333588B4E93DD6561FA414AA1
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/Clt_Uk8679Y2TMC-oEKnykq1JO4.roa
Signing time: Mon 02 Jan 2023 13:24:49 +0000
ROA not before: Mon 02 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44295
IP address blocks: 92.42.176.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:fc:13:33:58:8b:4e:93:dd:65:61:fa:41:4a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Validity
Not Before: Jan 2 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a5b7f524f3aefd6364cc0bea042a7ca4ab524ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:de:02:b1:d8:ad:46:a4:6e:6f:b3:42:5d:
aa:2a:67:ed:cf:c1:f7:0c:a7:82:3d:69:8c:6c:f7:
2c:5e:d2:7c:2b:36:06:9f:a0:be:67:55:d3:2d:46:
c4:7e:6a:fb:fa:96:17:5e:0a:e9:a7:10:ca:98:e8:
20:a0:bc:9a:4b:62:e9:f7:88:1f:f5:c8:cf:8b:ad:
d2:55:95:be:80:ab:d0:a1:82:e3:6a:c9:c1:cf:cd:
94:21:5e:02:af:b5:d4:e8:19:03:ca:01:71:81:4c:
2f:48:ab:4d:4f:1e:9c:a5:7d:2c:49:e7:3f:e7:31:
70:c8:55:95:85:1f:3a:89:17:14:d4:70:c1:9e:88:
00:d3:bd:7b:20:4d:be:f5:3d:3f:0f:a3:ea:e2:0c:
34:58:82:41:18:21:f9:a2:84:6e:d2:d4:ba:4c:11:
f7:3f:ac:c1:44:28:d8:16:3f:27:81:9d:0e:90:44:
d5:e3:e4:29:0d:21:60:86:da:92:35:0d:5b:28:11:
df:cf:97:26:56:fd:71:cd:2f:f0:47:8d:4e:6c:5f:
6d:bf:d9:75:7e:0f:50:1b:7e:bf:9d:62:9a:cd:44:
76:36:87:d2:38:30:90:86:6e:1e:db:b9:e3:94:5a:
55:60:52:35:b5:05:f2:c1:ad:c1:69:5b:1a:7b:1b:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:7F:52:4F:3A:EF:D6:36:4C:C0:BE:A0:42:A7:CA:4A:B5:24:EE
X509v3 Authority Key Identifier:
keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/Clt_Uk8679Y2TMC-oEKnykq1JO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.176.0/21
Signature Algorithm: sha256WithRSAEncryption
76:23:90:a0:51:85:b1:31:9a:a0:0d:0d:d9:92:c1:01:ff:b7:
49:ad:d2:8a:cc:8c:47:d6:34:3d:27:95:26:8f:b1:73:1a:c5:
30:17:48:5f:b6:7f:00:25:70:96:c2:8f:31:48:3a:00:dd:e0:
ac:56:22:42:40:98:5a:be:b5:bb:a5:c9:db:73:57:fa:59:a4:
6a:7a:59:23:be:0d:9b:6c:2a:1e:9b:45:48:ff:8a:54:ce:cc:
04:d8:f4:83:2e:9f:e6:1f:96:49:bd:e3:5e:84:6c:7a:90:90:
4a:6f:68:6f:f4:b0:ac:6e:f3:fd:ff:53:a3:6c:7f:1c:f2:f9:
05:fd:84:a4:e9:9c:28:6a:98:fb:9d:5f:74:61:02:78:b7:eb:
be:b2:4c:13:ca:ac:4a:ad:66:14:a8:9f:81:09:88:4e:7e:4d:
c0:2c:d7:d2:52:51:43:29:1a:b6:cb:2f:ec:1c:2a:5d:3b:f4:
60:55:57:29:49:1a:38:78:2b:03:e0:91:5b:dd:be:df:f2:f0:
86:e6:f9:83:b7:45:0a:08:6f:93:d0:6a:67:4a:69:70:d9:20:
08:ff:ce:e1:a2:9f:7e:42:c5:5b:d0:3f:1c:99:c5:a3:d0:f8:
93:b1:45:76:f5:2a:ac:b7:2c:4c:67:2e:27:c1:c8:5b:6d:a4:
ee:d9:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:53 2024 by rpki-client on console-fra.rpki-client.org