Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/_pzIJuf3N_UQxrjGqF7T6LNHT8o.roa
File: _pzIJuf3N_UQxrjGqF7T6LNHT8o.roa (raw, json)
Hash identifier: PrNFY5USHs7mBnVd6n600tuWrkv87ki1WBQEVuEaj5o=
Subject key identifier: FE:9C:C8:26:E7:F7:37:F5:10:C6:B8:C6:A8:5E:D3:E8:B3:47:4F:CA
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018BB7CEFBF5FA8148D0CD59D172DE6445D9
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/_pzIJuf3N_UQxrjGqF7T6LNHT8o.roa
Signing time: Fri 10 Nov 2023 05:57:57 +0000
ROA not before: Fri 10 Nov 2023 05:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 94.141.100.0/22 maxlen: 32
92.246.132.0/22 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 Nov 2023 15:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:ce:fb:f5:fa:81:48:d0:cd:59:d1:72:de:64:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Nov 10 05:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe9cc826e7f737f510c6b8c6a85ed3e8b3474fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:f8:d5:68:5e:06:09:cd:fe:b0:4b:cb:55:
3f:e9:fe:88:bb:ec:88:41:2b:31:b0:cc:2d:5f:2a:
9b:c7:9d:1a:9d:fd:d1:88:de:31:48:3f:6a:ba:fc:
34:43:cb:44:e5:4f:d7:85:77:19:86:c3:be:e4:48:
d1:35:6c:35:6a:dc:6d:83:30:5e:a9:10:74:7f:4f:
ed:6a:b4:50:f0:01:e3:51:5f:82:03:08:a1:64:37:
ee:fb:52:41:0c:75:d0:11:c4:f6:46:02:1d:de:0f:
1b:1d:10:19:bb:f8:5a:ef:8b:24:b3:d6:79:a4:a6:
93:e2:05:f3:13:a0:f3:43:b3:e3:f1:bc:41:6f:a0:
50:02:a5:f0:7c:4a:ad:9b:eb:14:10:16:2b:44:bf:
45:5f:d4:67:63:7f:d2:7d:b0:e5:e2:29:28:e2:cc:
e8:b6:80:4d:5a:d3:d9:11:cd:7d:76:66:d8:8a:c8:
6c:da:6a:80:9b:60:ff:8a:67:82:91:3b:9c:9f:5b:
4a:5c:41:74:ed:69:19:f8:6c:b2:af:0f:d1:90:e3:
cd:c7:32:57:38:3e:bd:76:83:14:d3:4e:88:ee:42:
a1:e7:64:0c:04:9e:c4:d9:b1:af:1b:01:2b:d4:0e:
74:62:70:52:7e:f6:b0:d1:f4:66:13:1f:81:08:49:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9C:C8:26:E7:F7:37:F5:10:C6:B8:C6:A8:5E:D3:E8:B3:47:4F:CA
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/_pzIJuf3N_UQxrjGqF7T6LNHT8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.132.0/22
94.141.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:63:c4:df:ec:7f:00:b7:69:b0:c3:0e:07:37:d0:c1:dc:cf:
ca:25:44:49:da:c3:23:43:1e:07:04:9f:03:69:8a:e0:a4:87:
50:13:a4:03:d8:a3:9d:cc:ae:e8:f8:37:07:d4:84:8f:c1:af:
8c:ff:7b:f8:db:99:37:2b:d0:64:69:c6:8c:83:e6:7f:4c:97:
d9:84:38:26:b5:a0:3b:d9:c8:c4:9c:4c:67:79:41:21:5b:c3:
4a:0c:ce:d3:aa:a8:0a:a5:a1:7a:4f:de:2f:29:d7:ac:cb:0f:
b7:bd:07:e2:bf:9e:05:48:28:64:b2:33:1f:9d:41:c3:9a:4a:
fb:fe:ca:aa:ec:21:6c:28:5c:be:07:e0:a8:88:11:09:ef:39:
c6:85:0e:b4:d9:34:83:bc:7f:74:cc:95:eb:bc:cb:df:01:df:
8b:c2:c4:8e:eb:b2:68:65:44:d3:d7:19:90:9f:d3:31:49:34:
f0:53:d0:7b:41:c7:3b:70:42:39:40:5d:b4:e4:85:fd:5b:6b:
c6:cc:ab:65:16:91:51:94:70:e5:05:06:06:a0:60:d6:ab:64:
0c:d9:58:b5:fd:be:02:72:72:f9:bb:71:c0:85:c7:e8:a8:8d:
83:9c:79:f1:f4:16:bc:b4:45:09:0f:9b:b8:78:48:a0:81:1c:
c4:d4:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org