Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/y7fBKA3ssnP28kb1BfURmicsHg4.roa
File: y7fBKA3ssnP28kb1BfURmicsHg4.roa (raw, json)
Hash identifier: DrQy0U3xW2HcvTCRQkdjVtGDBldJENck5+cvDUDeEKk=
Subject key identifier: CB:B7:C1:28:0D:EC:B2:73:F6:F2:46:F5:05:F5:11:9A:27:2C:1E:0E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CFC9E961692CFD2E6F29DBF25FFD1FE49
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/y7fBKA3ssnP28kb1BfURmicsHg4.roa
Signing time: Fri 12 Jan 2024 07:41:40 +0000
ROA not before: Fri 12 Jan 2024 07:41:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 92.114.93.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
213.134.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:9e:96:16:92:cf:d2:e6:f2:9d:bf:25:ff:d1:fe:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 12 07:41:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbb7c1280decb273f6f246f505f5119a272c1e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:70:a1:6b:0c:38:db:4c:a4:4c:94:e9:fa:
35:a9:0e:72:94:cb:0f:17:dd:b7:84:d3:20:4f:f4:
62:12:d5:8a:a6:54:46:23:39:7c:b9:a8:ef:fb:53:
58:2c:de:6c:fc:80:9c:f1:2e:ae:fd:ac:01:2f:06:
0d:8d:87:e9:3d:c0:ed:57:0e:15:03:82:bc:c2:fc:
bc:23:99:59:f5:0f:94:2d:d8:4c:6b:14:55:8f:4a:
da:09:df:8a:d5:1b:df:2f:08:a4:5b:bb:a4:5c:33:
6a:fb:ba:37:fd:53:69:a2:47:9b:ee:55:84:cb:de:
a3:f6:a8:02:8b:f5:80:7f:03:63:46:6a:95:ce:15:
a6:60:65:13:2c:b0:92:55:20:6d:bc:a1:ab:f0:6e:
52:24:46:fe:1e:0c:ea:59:c6:42:6a:60:69:8d:d7:
58:42:c0:be:8a:78:ab:49:a1:76:8c:d7:a8:68:6d:
ce:49:f0:46:9a:5d:42:d5:fd:98:36:35:0a:13:94:
2a:ea:51:f9:80:78:c6:41:4f:89:b2:0c:e3:7a:28:
21:5b:67:20:34:be:02:0b:a4:5e:be:69:2c:74:de:
9d:ad:d0:63:ef:2e:65:31:c7:bc:31:a8:a9:59:d8:
d9:8b:64:a4:93:bd:11:58:7c:5b:8b:b3:c3:11:87:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B7:C1:28:0D:EC:B2:73:F6:F2:46:F5:05:F5:11:9A:27:2C:1E:0E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/y7fBKA3ssnP28kb1BfURmicsHg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.93.0/24
93.114.244.0/24
213.134.11.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8e:01:53:d0:1e:c3:06:27:a2:65:cf:e1:62:15:1b:36:37:
9b:cc:e6:05:2d:1b:e4:89:7c:5c:7f:c3:d3:c1:da:69:46:e8:
67:5a:bf:d8:15:c5:1c:14:68:e2:9b:8b:b9:d5:dd:42:05:ef:
e7:6f:4c:6d:3d:a8:4f:da:dd:23:ea:b3:27:1f:09:09:98:9f:
ec:3b:f1:6e:29:cb:8a:46:32:15:de:cf:3c:dc:ba:e9:87:ea:
fc:06:b0:fe:0b:07:d5:0d:a6:b8:cd:85:dc:c9:f3:e4:4e:c0:
f9:52:dc:e5:72:e3:59:23:9a:f4:59:64:b2:95:f0:ad:52:f4:
8b:71:24:8c:de:9e:a3:b4:fa:04:23:b1:03:8f:1b:1c:06:15:
c4:1b:55:05:a6:9c:ec:c3:91:ba:3a:07:00:88:8e:51:30:a3:
39:d2:ba:3e:82:43:0e:f3:e2:d5:44:13:ee:46:95:a7:86:9c:
cd:d3:b9:f8:a8:e1:06:24:a5:99:90:fd:45:a2:8a:84:fc:27:
44:dc:50:89:8f:9b:7e:a6:89:d1:d9:5f:09:84:48:69:05:c0:
42:a5:3f:07:28:2b:47:bb:5b:63:76:69:63:d7:fd:ae:b7:bb:
f5:17:7a:78:9d:66:a3:3f:63:16:a1:f3:e3:db:62:b2:9d:c2:
98:b5:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:15 2024 by rpki-client on console-ams.rpki-client.org