Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pzaPky7S9uix6lZEd4GCioz9Po0.roa
File: pzaPky7S9uix6lZEd4GCioz9Po0.roa (raw, json)
Hash identifier: w3B1vbk1Bkop6KafYFmTl3pS/5PgvQEqZENhXiD8IU0=
Subject key identifier: A7:36:8F:93:2E:D2:F6:E8:B1:EA:56:44:77:81:82:8A:8C:FD:3E:8D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B19FDA7C47F7E08D61F9BBC4B4A403F04
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pzaPky7S9uix6lZEd4GCioz9Po0.roa
Signing time: Tue 10 Oct 2023 14:28:55 +0000
ROA not before: Tue 10 Oct 2023 14:28:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 92.114.93.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 17:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:fd:a7:c4:7f:7e:08:d6:1f:9b:bc:4b:4a:40:3f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 10 14:28:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7368f932ed2f6e8b1ea56447781828a8cfd3e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:87:37:5e:96:a7:7d:36:42:aa:37:a2:e3:
d3:d6:09:df:24:5d:a8:48:a8:74:fd:9c:59:fd:25:
56:3f:64:87:f8:49:db:ca:22:25:81:fc:59:7a:08:
5b:82:2a:16:c0:ad:2a:a3:c3:b6:15:63:7e:51:e0:
2b:fd:bf:b5:02:30:db:26:91:a2:90:15:a8:c5:59:
c9:2e:17:a8:88:30:d0:cd:58:b6:b8:fb:10:20:9b:
12:55:7e:3c:28:d4:06:b7:1d:2d:1e:54:e4:6b:15:
fa:c3:12:20:f4:80:92:57:01:e0:64:15:7b:26:17:
fc:57:a8:d0:00:72:6a:41:73:8f:5b:9b:29:ba:e1:
88:de:17:c6:ad:42:a2:f7:28:ee:df:b6:f7:9f:13:
93:45:73:14:5c:34:87:07:30:a4:4f:7d:e4:ed:6f:
13:ae:87:53:31:bd:7d:75:3b:64:14:ab:9b:0a:f4:
75:27:85:93:1a:b8:01:46:5e:09:3f:1c:82:d7:96:
f9:90:39:df:f4:3b:dd:72:1e:5a:c7:13:e1:36:a0:
26:33:80:4d:59:d4:6b:a6:8c:9a:0a:33:52:92:93:
5f:e8:af:c6:b7:76:3a:35:4f:e2:84:11:71:1b:55:
8c:f7:33:1d:c1:e8:ff:2a:20:cb:b5:17:02:67:b3:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:36:8F:93:2E:D2:F6:E8:B1:EA:56:44:77:81:82:8A:8C:FD:3E:8D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pzaPky7S9uix6lZEd4GCioz9Po0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.93.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6d:61:3b:c0:4d:75:d9:40:36:e0:63:28:c5:c4:8f:c8:80:
95:b6:58:53:e0:c9:f4:4f:7f:08:7b:c0:15:cb:38:83:a2:17:
ab:43:3a:a8:06:5e:b0:6a:b8:98:23:e8:39:ea:e0:84:bd:a6:
55:d1:a9:29:24:81:71:43:ab:f2:2f:ff:c6:e6:a8:a2:89:e3:
a9:cc:a3:ab:3a:91:7f:6b:44:4e:ea:62:fc:7e:25:2e:a5:10:
d9:5c:72:3e:5e:a2:fc:7e:c7:ea:f4:2f:8c:03:2d:d9:19:7c:
c9:42:b4:96:ac:cd:e3:0f:91:0e:94:63:be:60:0e:57:a2:64:
75:10:08:de:b3:0c:b5:e0:c1:11:82:39:b0:f6:47:8a:4a:79:
3d:ce:93:69:ff:05:f8:6e:5a:c1:8f:93:04:d9:e2:5e:3b:d1:
a6:c9:c3:80:c4:3c:bd:3b:d5:7e:6f:ce:4b:0a:4d:37:f1:6d:
9d:3d:8a:88:60:aa:df:15:47:76:20:45:39:cd:be:20:1c:b5:
00:be:2f:c3:9a:19:49:70:55:e9:5a:9f:6a:7a:74:0b:89:f2:
dc:f1:d0:08:18:0b:7f:49:80:29:79:1c:eb:16:42:20:b0:e4:
1a:5c:49:49:6c:9e:b0:e7:a2:51:43:6c:d4:16:75:ac:67:11:
3b:00:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org