Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RWVOGDrB6bFWni2VNb_4k6BKq-U.roa
File: RWVOGDrB6bFWni2VNb_4k6BKq-U.roa (raw, json)
Hash identifier: ea7rPOsUCUfa/9BKLhF4sBhNjeCiNYFMIPIPpTD4U6k=
Subject key identifier: 45:65:4E:18:3A:C1:E9:B1:56:9E:2D:95:35:BF:F8:93:A0:4A:AB:E5
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01928F8C56396D16BFEB5EF2C33628521E98
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RWVOGDrB6bFWni2VNb_4k6BKq-U.roa
Signing time: Tue 15 Oct 2024 09:39:51 +0000
ROA not before: Tue 15 Oct 2024 09:39:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 92.51.236.0/24 maxlen: 24
92.51.237.0/24 maxlen: 24
103.125.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 17:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:8c:56:39:6d:16:bf:eb:5e:f2:c3:36:28:52:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 15 09:39:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45654e183ac1e9b1569e2d9535bff893a04aabe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:06:47:0a:38:75:47:ac:59:20:6d:e5:aa:
1f:84:72:90:41:de:e2:17:5b:a7:39:ae:92:67:46:
9a:ca:4b:28:52:05:0b:0e:ee:2f:1d:b5:6c:4f:2f:
8d:e9:b4:62:b0:6b:29:4f:23:0f:83:83:9c:61:08:
28:9c:ca:f4:e5:4c:c3:4e:28:b7:eb:3d:4b:c7:fe:
e5:6c:3a:9c:2a:17:9b:5a:1e:70:70:84:dc:42:66:
8d:59:c0:49:e5:4d:2b:23:c4:47:97:12:97:5e:6a:
e3:bf:84:4f:26:73:74:cd:7f:b7:b7:7b:ae:7f:c9:
95:e8:21:38:7e:08:70:ee:8e:0e:ce:41:09:72:d5:
aa:cf:7b:e6:d0:bb:be:63:3d:04:aa:4e:12:87:b8:
64:5f:89:cb:a5:a0:ab:b2:9d:73:cb:a6:91:29:78:
f4:c3:83:52:4e:9d:cf:c6:89:94:c3:03:37:bb:e7:
23:7b:a6:45:64:ab:48:e7:c7:1d:93:cd:57:aa:8d:
95:32:cf:8c:d3:c2:a3:49:d1:da:c1:5c:ff:41:59:
94:8a:15:82:47:2b:da:99:71:37:ed:39:1b:15:93:
5f:b1:cc:11:47:00:be:e7:4e:fa:12:fb:e7:fa:f4:
64:fa:f9:9f:bb:8a:dc:45:62:fb:26:47:e5:e3:f8:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:4E:18:3A:C1:E9:B1:56:9E:2D:95:35:BF:F8:93:A0:4A:AB:E5
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RWVOGDrB6bFWni2VNb_4k6BKq-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.236.0/23
103.125.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e4:f7:72:ad:c8:ca:d3:5e:cb:b9:05:16:e5:0f:48:ac:41:
f1:c6:f7:56:fc:cd:84:5e:6b:58:78:0d:b6:78:3a:25:4f:3a:
fc:49:72:f3:fe:1d:a2:32:f7:ad:d0:ba:bf:b0:61:1b:03:24:
d9:ee:44:ba:d8:fd:a3:ad:18:b7:ca:e3:37:84:c2:09:83:d6:
b5:60:82:c4:dc:6c:62:d2:24:2e:92:7b:bb:0d:6d:c6:41:87:
9e:e7:78:9c:fe:10:4f:ba:af:cb:72:9b:ed:82:03:ef:17:b1:
e9:47:e4:e2:b1:76:95:98:a0:be:d1:e9:a7:d3:0b:84:1a:71:
9d:2e:7d:33:b1:53:af:73:6e:a9:d1:06:f6:4e:99:6f:99:d4:
02:a8:f6:8d:03:74:7c:49:ba:3e:3e:cc:bf:7f:93:df:44:50:
39:86:bb:0f:2c:cc:9d:af:29:69:70:d2:78:67:3d:43:77:22:
b9:e0:5b:c8:97:96:3d:ac:bd:60:5e:dd:19:fc:a5:cd:c4:ee:
80:9e:5f:dd:68:bc:38:7f:e2:a1:c2:0d:f8:3f:4f:c2:3b:ea:
bb:9e:bf:7b:d6:64:39:03:4d:f7:52:90:15:0d:52:c0:cd:f7:
6e:2e:19:93:90:18:73:ce:42:8e:ce:9b:f8:f4:12:2d:53:ec:
b9:ed:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:33:53 2024 by rpki-client on console-ams.rpki-client.org