Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PO_u2gQiQne0WNnVfdUln6UrDWg.roa
File: PO_u2gQiQne0WNnVfdUln6UrDWg.roa (raw, json)
Hash identifier: ifhusCAXaIjG0k09UlShjjYWrA3Ls8X1vn8cBISqn/o=
Subject key identifier: 3C:EF:EE:DA:04:22:42:77:B4:58:D9:D5:7D:D5:25:9F:A5:2B:0D:68
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AA2313CE9E2E465D7015A0814BEC8F204
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PO_u2gQiQne0WNnVfdUln6UrDWg.roa
Signing time: Sun 17 Sep 2023 08:10:50 +0000
ROA not before: Sun 17 Sep 2023 08:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 92.114.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 11:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a2:31:3c:e9:e2:e4:65:d7:01:5a:08:14:be:c8:f2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 17 08:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cefeeda04224277b458d9d57dd5259fa52b0d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:35:d5:c4:27:cb:db:49:ac:12:c0:e7:7c:
44:88:0f:c5:c3:77:b0:55:a7:02:85:04:e9:11:56:
fd:8e:9f:4c:db:fa:9d:fd:e2:3f:6d:e8:ad:b8:18:
67:d3:8d:ac:17:c2:6f:f4:0a:b9:c8:f3:7d:27:a6:
c8:7b:51:3f:d4:3a:24:f7:4a:5e:3a:dd:62:64:a7:
34:5c:9e:8a:4f:f7:b0:0e:cf:da:37:84:39:c7:e8:
07:94:b2:15:82:f7:d5:94:df:57:64:64:7f:93:f9:
6d:35:52:f5:64:e3:62:45:7c:a6:49:34:c3:c4:38:
fb:10:e0:64:3f:c8:0a:ac:bc:93:1a:ab:ff:ab:73:
57:dc:14:1a:a9:80:82:a5:8a:40:1b:9e:5b:2e:4e:
55:66:3f:13:a2:21:98:b1:06:67:e4:69:ea:1a:ad:
39:ad:4d:4b:9c:8f:46:d4:c7:76:6c:69:48:7a:54:
f5:b4:8f:fd:3c:38:de:b5:db:34:7a:51:65:c8:a4:
36:01:a4:d1:e5:f2:fc:6f:02:71:52:78:40:87:49:
3f:aa:e8:57:7d:e8:ff:23:2c:07:0d:fa:e7:96:9a:
6d:4c:74:3a:df:a7:11:bb:89:3c:4c:69:37:1e:c2:
41:45:cf:e6:08:01:54:31:9e:1d:5d:2a:f2:44:36:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EF:EE:DA:04:22:42:77:B4:58:D9:D5:7D:D5:25:9F:A5:2B:0D:68
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PO_u2gQiQne0WNnVfdUln6UrDWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1a:de:24:9b:d6:7d:1c:f0:a2:6c:e8:54:3e:d0:c2:46:9a:
f0:8f:4a:99:d3:d2:b9:e4:2d:b1:b7:68:a6:ba:81:95:d2:a6:
5f:63:e7:ab:3c:81:b1:ca:ba:4d:32:c0:d2:cd:72:3e:6d:0e:
52:f5:ab:b8:e2:f5:0f:fe:18:48:1e:29:ad:af:0e:69:88:27:
3c:10:8b:76:9b:10:0d:41:d9:ce:81:d3:63:c5:af:92:88:12:
b0:f7:fa:1f:2e:a8:ad:ad:ee:6c:73:77:fd:f9:68:de:e2:42:
db:bd:a7:b4:00:69:95:ac:59:66:fc:40:5f:29:16:f2:3d:d6:
66:d0:34:25:58:5d:5e:e6:37:e2:2d:37:e6:84:4f:44:9d:47:
5b:d6:87:1f:89:71:f4:25:66:6d:2d:35:72:63:bb:74:88:e8:
b3:76:18:9f:2d:c2:c5:8f:11:f9:e6:2d:57:0d:42:c9:14:c3:
5a:0c:00:c8:55:2a:c9:5a:34:10:ca:3d:ac:27:2f:98:65:52:
4a:c4:3e:05:da:14:6a:16:8f:ae:b3:d7:d1:c4:e5:3f:b9:1f:
ed:66:45:ca:31:3e:3b:db:f9:56:90:ee:84:04:45:e3:d5:d6:
cc:f5:f4:a4:cf:60:cb:7e:86:7a:7d:a2:69:dc:5d:9c:08:c6:
f1:9a:7d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org