Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/unkRxKcdeo4IzUeeJ1VUUJIl2Ls.roa
File: unkRxKcdeo4IzUeeJ1VUUJIl2Ls.roa (raw, json)
Hash identifier: sY0NwtAj/W4mIKDx3OktZamTIFyVqlMCbZsnbSnea/g=
Subject key identifier: BA:79:11:C4:A7:1D:7A:8E:08:CD:47:9E:27:55:54:50:92:25:D8:BB
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 018CFDF4FE465FC3F7A447A19362BABE97CA
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/unkRxKcdeo4IzUeeJ1VUUJIl2Ls.roa
Signing time: Fri 12 Jan 2024 13:55:40 +0000
ROA not before: Fri 12 Jan 2024 13:55:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51345
IP address blocks: 92.42.101.0/24 maxlen: 24
2a13:1c40::/32 maxlen: 32
2a13:1c40::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Mar 2024 10:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fd:f4:fe:46:5f:c3:f7:a4:47:a1:93:62:ba:be:97:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 12 13:55:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba7911c4a71d7a8e08cd479e275554509225d8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:a9:8f:d4:20:08:e7:4b:f9:11:89:00:93:
02:74:88:fa:8c:66:d1:e7:39:61:ff:27:ad:59:e1:
e2:77:f5:38:97:63:b6:4d:cb:81:0d:e2:9b:7b:c1:
8c:cb:82:49:46:46:84:d9:ab:28:90:e2:f9:e0:b0:
e7:9e:90:73:14:d9:ad:81:86:8d:39:d1:b6:19:83:
6b:2a:55:63:63:3b:06:f0:a5:07:57:af:d3:fe:33:
3f:2c:74:29:2c:d5:14:4e:1a:29:53:27:3e:01:d3:
c3:41:2e:aa:be:d5:24:ed:d2:3d:b1:fc:bf:3d:f4:
cd:b8:f1:2e:bb:70:f3:59:1c:ca:df:42:4f:df:d3:
26:b7:fd:69:f9:22:75:d6:1a:c1:b6:4b:4b:36:b8:
a4:1f:95:96:01:80:59:af:d7:11:ff:e7:95:ed:29:
a6:af:ee:da:0d:74:fd:e9:6d:f7:ae:fc:c9:ed:85:
da:67:b9:77:5b:a3:24:05:1e:f7:b0:45:61:5f:bf:
5e:bc:24:fa:4f:2e:89:3e:1b:80:96:82:36:0d:bc:
9d:a9:49:cb:00:65:fa:2a:10:ca:67:f5:f5:57:74:
9b:e8:e0:83:44:ef:62:b8:29:bb:77:0d:9d:ad:dd:
f2:50:b8:1c:ec:13:ff:b9:e5:ae:85:9f:37:b2:b3:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:79:11:C4:A7:1D:7A:8E:08:CD:47:9E:27:55:54:50:92:25:D8:BB
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/unkRxKcdeo4IzUeeJ1VUUJIl2Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.101.0/24
IPv6:
2a13:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
57:62:57:77:5b:9c:4d:1b:6c:b9:a0:2f:78:cf:50:a4:ff:2e:
37:cf:2a:dd:25:31:84:0a:97:7a:24:d1:fa:67:7d:fa:f0:d2:
d6:30:b4:e2:ba:50:c3:23:43:97:f5:f8:e4:d1:3a:7a:8f:c1:
79:3b:ff:0e:a4:79:dd:87:e4:01:70:18:22:94:00:7d:14:58:
9f:65:9c:d1:19:16:11:78:45:c1:87:96:82:36:8b:70:d7:61:
c6:2b:5d:e4:64:8f:c5:07:70:bb:60:da:a0:81:1d:ad:2c:48:
c7:a7:19:e6:49:25:3c:d1:6d:1e:2d:03:73:f4:8c:55:86:32:
da:db:99:a5:42:f4:4b:58:5d:68:05:16:88:7f:ce:e4:5a:29:
9c:9c:96:eb:6e:b6:4b:8a:27:b3:eb:ff:06:a3:71:ec:92:3f:
d2:f5:40:91:69:e5:92:28:91:30:a5:22:c3:3c:d8:a7:8a:dd:
c9:e8:4e:8f:c2:d9:69:70:10:be:22:e9:5e:c0:90:05:3d:07:
e4:66:41:40:5f:85:b4:24:23:75:2f:1e:52:27:ce:dc:ce:d5:
a0:1d:a5:c0:0b:33:78:e3:04:b6:30:2f:a3:56:6e:4f:8b:24:
77:18:ce:6e:00:2b:5d:6b:34:6a:00:d3:90:96:11:5e:33:19:
82:e1:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 14:08:39 2024 by rpki-client on console-fra.rpki-client.org