Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6TD5h92-wdHJhax1FYBTYK4wtDY.roa
File: 6TD5h92-wdHJhax1FYBTYK4wtDY.roa (raw, json)
Hash identifier: aAt6QyEKril6ouW5WlEopFfBeMTNU9iUjtbg4clLLPU=
Subject key identifier: E9:30:F9:87:DD:BE:C1:D1:C9:85:AC:75:15:80:53:60:AE:30:B4:36
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01877F13E084870367FE9A138471F0C8759F
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6TD5h92-wdHJhax1FYBTYK4wtDY.roa
Signing time: Fri 14 Apr 2023 09:23:41 +0000
ROA not before: Fri 14 Apr 2023 09:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 92.114.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 11:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:13:e0:84:87:03:67:fe:9a:13:84:71:f0:c8:75:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Apr 14 09:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e930f987ddbec1d1c985ac7515805360ae30b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:48:85:af:8b:43:98:98:52:cc:65:45:62:
07:76:97:48:d1:f8:74:1a:27:be:f5:8e:5a:b5:49:
86:50:d9:a5:c6:01:c2:50:f0:a6:fb:e3:b9:de:69:
6a:aa:25:c5:db:87:bd:5e:e5:b6:0d:bc:7e:51:a7:
e4:f2:5c:17:02:98:01:9e:8e:4f:5e:1e:29:c2:09:
58:70:13:f4:d9:31:f1:3b:3e:2a:43:07:27:65:ec:
99:84:da:83:53:f6:66:b5:0d:f1:15:86:b1:e2:e9:
71:78:43:c4:a2:25:d2:82:ba:e9:2a:1d:77:86:2d:
cd:8c:7f:2f:9b:5c:2f:ba:e3:dc:bc:6f:dd:62:87:
0b:09:6f:eb:d0:51:eb:0e:99:96:22:97:60:f1:f6:
98:07:31:82:da:11:35:79:0b:67:4e:aa:92:01:bc:
fb:13:3d:7b:34:5c:e3:97:d2:08:44:f0:a3:0f:6e:
77:49:62:b0:da:09:1f:51:4d:8b:c5:d6:79:e5:03:
f0:a8:4f:94:6e:6f:ba:27:03:55:42:26:33:55:e0:
f6:7c:c7:65:ea:49:0a:fb:10:ad:b5:32:82:8b:f1:
16:cf:06:06:70:0b:b9:a2:00:4e:b6:6a:6e:4b:20:
0c:d1:a2:23:5a:0d:8e:dd:8b:33:68:d4:e3:f1:8b:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:F9:87:DD:BE:C1:D1:C9:85:AC:75:15:80:53:60:AE:30:B4:36
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6TD5h92-wdHJhax1FYBTYK4wtDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
42:36:4a:d6:c1:3e:37:de:50:3e:bb:87:84:69:97:4b:8a:85:
02:c0:16:5e:6b:f7:fd:50:14:a6:6f:1e:b5:0e:73:82:9d:e3:
63:7b:a8:1d:ec:c5:bf:3d:7f:0c:bd:cf:50:fa:c2:c9:77:62:
d6:1b:72:6b:8c:e1:4a:52:d6:42:1e:0f:75:12:bd:75:09:5c:
50:b4:b8:81:0f:43:76:f8:a7:01:27:a9:7e:cd:67:c5:dc:1d:
3c:8e:84:31:c1:94:ac:1f:80:16:eb:90:54:a7:ec:8b:3f:03:
f8:1a:09:98:37:37:9c:7a:74:b1:2c:f8:b5:4c:d9:b8:85:77:
85:3d:be:fb:e9:d3:af:6d:d8:15:bf:c9:3a:13:5b:7b:15:c3:
8e:81:03:90:4a:7b:5f:08:a9:4e:0a:88:28:f9:04:ac:b7:a6:
83:ed:79:35:85:24:3b:41:25:d2:2b:80:50:d4:80:25:40:b9:
67:a0:29:d8:e6:2f:fa:df:ca:f2:ac:79:b6:d2:e2:99:22:c6:
72:63:e6:37:c6:5d:77:90:56:be:f3:c4:af:13:5c:3b:21:9e:
36:f0:06:3c:ff:30:03:7e:0d:7a:d6:4a:15:64:3d:4a:36:91:
9d:f4:f5:6e:8f:e1:1f:ea:93:f8:df:a4:c0:b4:8a:0f:74:a6:
a0:c4:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:46 2024 by rpki-client on console-ams.rpki-client.org