Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/HbD3x5Dy2K1IKKHLPBrOfAG3R0E.roa
File: HbD3x5Dy2K1IKKHLPBrOfAG3R0E.roa (raw, json)
Hash identifier: pUAo7qXI4JPAXEwameooXwJedUTTlx+gHERRGcK99ag=
Subject key identifier: 1D:B0:F7:C7:90:F2:D8:AD:48:28:A1:CB:3C:1A:CE:7C:01:B7:47:41
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 0189654E365051480859999A6596B7164E09
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/HbD3x5Dy2K1IKKHLPBrOfAG3R0E.roa
Signing time: Mon 17 Jul 2023 19:22:51 +0000
ROA not before: Mon 17 Jul 2023 19:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395092
IP address blocks: 92.119.161.0/24 maxlen: 24
92.119.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4e:36:50:51:48:08:59:99:9a:65:96:b7:16:4e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jul 17 19:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1db0f7c790f2d8ad4828a1cb3c1ace7c01b74741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:11:fc:0b:65:11:71:2c:56:d8:49:3b:09:
f3:3b:b1:63:36:c1:7d:bd:80:3d:85:d6:a9:e6:28:
6d:b2:4b:02:ed:4f:3c:1d:e8:bf:f2:30:c7:13:f3:
7e:b2:20:ae:7c:2c:24:15:4e:f5:ea:36:df:1c:e0:
36:e8:cf:bb:ee:02:94:e3:ef:0d:b7:54:c8:0a:11:
6a:01:a0:80:cd:1b:9c:7b:26:f2:17:58:d6:44:8c:
50:67:73:4a:87:40:89:01:d9:bf:f4:c3:a0:7a:71:
cc:66:d3:50:05:50:e6:9c:c5:71:36:fd:9c:a7:b0:
61:b0:71:37:1d:ab:38:40:0f:8b:e0:61:72:4c:73:
05:ac:80:bf:30:60:f1:40:a8:36:9f:50:14:ee:5a:
df:06:a6:4b:5c:e3:ae:db:4d:e0:8b:4e:81:2c:f7:
45:66:85:93:1d:2e:70:76:c2:bd:44:27:25:94:97:
49:a1:76:58:7e:db:08:92:39:ff:ba:0d:9e:0c:79:
8f:b7:f6:1a:2c:af:65:94:3c:87:b8:00:60:d2:a5:
29:9a:3f:22:7c:3a:0b:7c:da:bb:2f:3e:f5:89:6f:
97:8c:cc:a2:18:63:06:a7:36:05:16:2e:26:4c:9b:
4f:02:40:a4:4d:24:ce:99:f2:f5:bb:2c:45:9a:ff:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:F7:C7:90:F2:D8:AD:48:28:A1:CB:3C:1A:CE:7C:01:B7:47:41
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/HbD3x5Dy2K1IKKHLPBrOfAG3R0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.161.0/24
92.119.163.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:80:57:50:aa:16:4d:20:f8:39:c3:a5:4c:35:87:f2:ee:65:
02:30:a7:a8:54:e5:cc:1c:76:8e:bd:4a:1a:c2:a8:b6:2b:e2:
64:34:39:7a:b3:18:6b:63:43:0e:c7:46:2b:fb:25:42:ec:0c:
54:c1:d4:fa:6c:1a:6d:c7:3e:c1:4d:f1:cb:4d:cd:cf:35:64:
b0:d2:4c:4a:43:b1:31:d7:37:b1:61:cb:44:a9:f7:90:ba:6e:
0a:67:61:ee:f8:5d:1d:90:67:a3:51:92:77:50:28:7f:93:a7:
c5:17:b8:8b:58:5c:f3:8a:d8:50:85:87:64:4f:77:e8:e0:ef:
20:aa:d6:3a:71:32:71:05:46:6c:f4:64:ef:a2:e2:7a:e7:07:
e3:4e:ec:85:aa:a9:48:8e:93:d1:1b:a6:40:bc:ce:4a:f8:b7:
eb:ee:35:ce:d9:99:da:37:76:4e:1e:37:e5:a9:e4:81:d4:25:
6a:4f:0e:93:4c:f8:62:35:ec:63:86:ce:33:17:fe:f3:21:18:
a3:e1:c6:91:6a:d9:dc:37:b8:09:c7:64:02:29:d0:c8:ef:e2:
18:87:04:37:d7:53:7b:01:c0:21:4e:1a:7c:f8:cd:01:e2:06:
08:da:91:92:ae:d5:e5:29:35:25:4e:82:f8:c1:8a:8b:f6:2c:
d1:60:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:26 2024 by rpki-client on console-ams.rpki-client.org