Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/LLOBlUPkpm8FS955rK62dlL0awc.roa
File: LLOBlUPkpm8FS955rK62dlL0awc.roa (raw, json)
Hash identifier: fmYqzIZsmiZwhzkmVN0kLm22ITchbNMo0nx47sVF76U=
Subject key identifier: 2C:B3:81:95:43:E4:A6:6F:05:4B:DE:79:AC:AE:B6:76:52:F4:6B:07
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 0185723A31377A551A2280A2668AA15BE3BF
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/LLOBlUPkpm8FS955rK62dlL0awc.roa
Signing time: Mon 02 Jan 2023 11:24:54 +0000
ROA not before: Mon 02 Jan 2023 11:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210819
IP address blocks: 92.246.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:31:37:7a:55:1a:22:80:a2:66:8a:a1:5b:e3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Jan 2 11:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cb3819543e4a66f054bde79acaeb67652f46b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:03:96:54:c4:cf:f1:b0:7d:fd:e4:3c:db:
7e:e3:74:3e:6d:c3:79:dc:de:84:65:41:d3:d0:11:
df:0c:89:54:21:1f:e4:c8:09:82:b0:cf:0b:fb:d9:
2e:27:93:7a:fb:09:73:ca:cb:0c:68:5b:65:57:78:
8f:61:be:37:13:24:ab:d4:76:a0:69:4e:4e:c5:9c:
af:ee:3e:b6:3c:87:fc:6f:17:80:a3:2c:cd:33:e2:
52:d5:6b:8b:79:e6:3e:6a:67:78:ba:92:d0:30:0f:
57:34:31:f5:d9:1c:e2:5c:3e:1c:07:0c:bc:2d:80:
3d:80:61:31:42:72:8f:a9:1d:be:14:8c:62:75:4c:
0c:01:15:d7:9e:94:bd:17:ce:2f:7b:4b:d7:54:27:
cf:09:4e:4e:81:5c:81:8a:1b:a7:86:26:8e:c7:0f:
d3:53:a5:b5:80:9d:ce:ff:02:9c:fa:55:3b:6b:93:
13:2e:89:a9:07:55:91:b0:f1:b2:5e:78:d5:4a:10:
e7:87:fa:28:71:08:d5:5c:e7:2d:7a:b6:16:ca:84:
a2:d8:4d:c1:98:cf:81:78:1f:f5:ab:e3:77:1b:f8:
bf:e3:b8:5c:e9:67:d3:e2:55:b5:df:5d:b7:16:53:
d3:36:89:ce:8a:74:28:67:53:af:6b:3d:65:d0:8f:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:81:95:43:E4:A6:6F:05:4B:DE:79:AC:AE:B6:76:52:F4:6B:07
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/LLOBlUPkpm8FS955rK62dlL0awc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
74:72:54:4a:07:b4:69:c5:d9:b4:78:60:17:b9:80:69:85:dc:
22:fd:c8:2c:d6:a1:1d:b6:0f:98:58:0d:d6:02:89:85:5e:1f:
2e:0a:a4:c8:49:65:f2:8b:a3:52:72:1e:c6:e0:c1:43:ba:09:
d3:db:b2:4f:b2:83:f9:4e:8d:9a:1d:50:1a:34:15:33:5f:08:
a3:60:44:c5:ee:61:d0:df:16:a9:ac:65:aa:9a:57:50:80:6b:
7c:f7:53:e3:f2:f7:e0:c3:26:ee:66:ed:e7:85:98:56:2b:bc:
ed:ec:56:49:bc:4c:cd:29:7e:cc:1f:48:0f:db:60:a1:c5:4a:
d4:98:13:6f:84:0a:dc:c5:11:fb:a6:7a:39:db:87:01:86:12:
9a:70:67:9e:95:44:77:14:4c:6c:32:e0:52:18:06:b1:ff:39:
b6:2e:21:9f:d2:1f:79:51:29:a3:73:03:45:86:7e:b1:cf:bb:
4e:e5:76:50:84:3f:16:7c:80:8d:17:a2:57:59:b6:27:ba:d4:
52:b1:19:cb:54:8e:a8:37:63:15:3d:02:6f:2a:8d:1c:41:37:
a4:06:78:a6:10:fa:46:3d:d0:22:4d:33:e2:16:18:d5:0f:25:
03:a4:9d:39:75:1e:7e:c6:55:2e:e0:ec:50:8a:63:dc:81:bf:
98:e3:04:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:13 2024 by rpki-client on console-fra.rpki-client.org