Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P0NDw3V1-l1kr_C2gzfYQOagUUg.roa
File: P0NDw3V1-l1kr_C2gzfYQOagUUg.roa (raw, json)
Hash identifier: QnFbYOJJuZiXRsXoNB/Ot/RBmgQpttZ99YshXyzZ+n4=
Subject key identifier: 3F:43:43:C3:75:75:FA:5D:64:AF:F0:B6:83:37:D8:40:E6:A0:51:48
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018ABB8FC9AF9EB00B0AC09EC5B6481B244E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P0NDw3V1-l1kr_C2gzfYQOagUUg.roa
Signing time: Fri 22 Sep 2023 06:24:37 +0000
ROA not before: Fri 22 Sep 2023 06:24:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212027
IP address blocks: 92.114.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 04:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:8f:c9:af:9e:b0:0b:0a:c0:9e:c5:b6:48:1b:24:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 22 06:24:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f4343c37575fa5d64aff0b68337d840e6a05148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:15:89:d9:d2:eb:72:4d:e6:ec:a4:bd:12:
87:c9:56:dc:c5:4c:c3:88:0e:13:93:af:94:ee:91:
3b:9f:c3:e1:c8:66:2f:ae:ec:37:5f:65:02:65:aa:
cf:61:7a:5c:2f:85:f5:fb:62:68:9c:14:da:78:6c:
14:95:3e:20:88:cf:74:2e:9e:27:df:95:3a:9e:fd:
5d:3c:2a:d3:7a:1e:46:23:ce:25:f0:57:50:3b:98:
a2:42:02:57:ae:0d:c8:49:58:45:94:15:47:64:48:
f1:c1:c9:28:23:45:86:9b:04:ab:c5:e3:30:2e:ca:
ce:30:e6:08:35:fb:4a:fc:f8:22:c0:b4:2c:f3:24:
f4:89:3a:e0:e2:1f:a5:ef:8e:31:f6:d1:f8:48:4d:
cc:60:af:fc:27:9d:74:66:8a:92:47:b8:51:6f:19:
a9:d6:6b:5b:c3:8c:b8:df:9b:7d:18:b0:21:70:30:
c6:49:39:24:a2:58:a2:d8:f8:e2:48:a6:2d:6e:ee:
73:52:48:1d:ea:b9:87:e2:50:0b:79:f3:b3:39:2f:
a4:c4:96:9d:94:c2:e5:7c:5f:97:2a:a4:e6:6e:60:
fe:d1:60:b6:cc:c0:cd:f5:ab:e6:91:06:56:c8:ed:
bd:28:83:18:dc:e1:d9:e3:5f:35:b7:4a:db:62:25:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:43:43:C3:75:75:FA:5D:64:AF:F0:B6:83:37:D8:40:E6:A0:51:48
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P0NDw3V1-l1kr_C2gzfYQOagUUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d3:2a:48:54:38:d8:f4:7c:59:5a:06:27:48:22:5f:a9:f7:
2e:f2:21:42:20:9c:77:8c:d5:65:6a:6e:bb:85:cd:54:da:f1:
82:5a:d2:22:a3:d0:f2:d8:8c:48:e4:07:f7:b7:8d:f4:72:07:
98:bf:fc:1e:95:e1:df:ce:a5:81:67:bd:9b:dc:d5:42:6b:86:
61:97:5d:59:ac:5a:b8:89:35:89:3b:93:ee:26:e1:de:1f:53:
8a:ae:a4:b3:55:7f:4d:77:cc:ca:9f:b2:70:97:8a:e4:40:8c:
89:70:02:64:28:b3:42:7a:03:39:23:b1:d3:09:15:16:a6:84:
9f:e7:fd:15:aa:81:c1:b7:9f:f7:37:fc:c9:22:de:f5:bf:fa:
02:34:01:a8:1e:2c:68:a9:3c:40:c7:39:16:a0:17:37:ac:08:
b6:74:a0:44:aa:f5:bf:dd:0a:8d:71:f0:68:44:8e:d7:78:f1:
95:37:17:d5:55:cf:f3:6b:9d:aa:b8:d8:0a:ea:ed:c4:c5:22:
6c:f3:f7:70:6e:90:ba:30:a7:79:15:a9:ad:82:ba:56:a1:04:
da:66:24:65:0b:65:c3:06:c2:ab:70:1e:06:ff:74:1b:73:37:
4a:5d:b7:e3:ad:46:dc:86:75:50:29:43:41:3c:c7:a0:83:24:
6c:e8:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org