Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/C-JvZ_g8-hzM2hbLIovKKJJa-v4.roa
File: C-JvZ_g8-hzM2hbLIovKKJJa-v4.roa (raw, json)
Hash identifier: a1dWVJwbqY8ySCQSIrEynWT+1JIVWoJDyRxd5oYxhkg=
Subject key identifier: 0B:E2:6F:67:F8:3C:FA:1C:CC:DA:16:CB:22:8B:CA:28:92:5A:FA:FE
Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial: 01856E6FD0BAB89490CE847DFDECF615F3E5
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/C-JvZ_g8-hzM2hbLIovKKJJa-v4.roa
Signing time: Sun 01 Jan 2023 17:44:59 +0000
ROA not before: Sun 01 Jan 2023 17:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42699
IP address blocks: 92.43.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:d0:ba:b8:94:90:ce:84:7d:fd:ec:f6:15:f3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Validity
Not Before: Jan 1 17:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0be26f67f83cfa1cccda16cb228bca28925afafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:73:6f:bb:ef:bf:77:29:1c:e6:43:05:e7:
ab:6c:ee:5b:f5:6f:7c:38:fa:7c:76:bc:75:a8:69:
35:be:18:d9:db:fd:42:7b:8c:03:50:4b:49:f7:25:
e1:d3:37:72:e4:6c:e7:c3:ca:0a:58:ee:6c:b3:64:
ca:c7:45:0c:11:5c:02:74:8a:c3:98:34:87:1c:8e:
2c:2c:e4:2f:15:cb:ab:23:72:6c:6f:d0:48:0b:ff:
51:93:45:d7:e7:58:f9:95:5a:45:f0:05:b4:ce:86:
24:a8:1b:57:29:24:3c:69:fc:45:54:e3:3d:42:db:
f5:1a:ec:50:38:65:6a:4d:ed:80:a6:69:d0:fb:d8:
55:a4:0a:61:60:d9:5b:ec:a5:96:53:28:6e:5e:a6:
9c:b4:9d:b5:57:09:60:92:44:e8:02:9d:0f:85:7a:
0f:fe:19:05:34:a5:16:1a:91:05:04:81:3c:ed:88:
e3:35:53:f5:fc:63:40:de:f5:cf:8d:ee:66:a5:47:
fb:6c:cc:b7:4f:f9:b0:fd:b8:21:69:d0:f1:fc:67:
ce:e8:36:d9:67:8b:00:96:1c:d3:5e:a7:d5:d6:e7:
b2:57:b0:df:25:7a:2e:31:d3:63:42:7e:3d:d4:c1:
26:4e:c2:6f:9e:bd:16:70:8e:c7:57:fe:d1:9e:11:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:6F:67:F8:3C:FA:1C:CC:DA:16:CB:22:8B:CA:28:92:5A:FA:FE
X509v3 Authority Key Identifier:
keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/C-JvZ_g8-hzM2hbLIovKKJJa-v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.48.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:50:ac:2e:1b:76:c6:9c:cc:15:d0:9d:6b:80:88:ca:7f:cf:
a9:13:59:6c:5d:98:2c:c6:03:21:be:33:e2:34:46:84:f1:89:
da:6e:10:59:cd:b0:1e:41:23:00:dd:7a:0e:db:1b:a8:49:f7:
21:e0:32:b9:cc:75:e3:c9:d2:9e:cb:52:81:3f:4a:6c:21:bf:
be:fd:ba:af:4e:49:37:33:f5:9f:d1:93:52:a9:24:d3:56:94:
fc:59:cf:ec:48:a9:bb:ce:ca:6b:ff:8e:0f:be:c1:cf:b6:c6:
f3:d6:df:5a:ad:40:85:b0:ab:ed:ae:84:a1:e3:67:c6:32:2c:
42:cb:f2:97:0e:21:3b:5b:a5:9d:36:3c:6d:9b:32:b5:b9:84:
27:18:e7:60:34:fe:b0:3a:a6:0b:a6:58:97:c2:cf:91:8f:db:
eb:c9:5e:d0:d1:33:fd:7b:09:4a:d8:05:18:e1:15:90:1e:e3:
f1:31:2f:da:bc:dc:32:ca:08:8a:01:5d:34:d3:b5:56:67:c0:
52:5c:01:b8:fd:a6:bb:aa:6b:92:3b:d8:e9:39:01:3b:94:df:
ef:25:7a:39:ad:20:d4:83:05:f2:78:1d:9d:06:49:90:7e:f4:
01:6e:88:da:0f:59:60:9f:54:38:d2:ae:e5:97:99:4f:ae:50:
64:5e:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:56 2024 by rpki-client on console-ams.rpki-client.org