Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/T-P8mpzcFAlmkIHST_N6Ft_ZRUk.roa
File: T-P8mpzcFAlmkIHST_N6Ft_ZRUk.roa (raw, json)
Hash identifier: NAkeMmrl6R82W6xvd5XSfmctH+pUG9IZ/tz5yS8VoXY=
Subject key identifier: 4F:E3:FC:9A:9C:DC:14:09:66:90:81:D2:4F:F3:7A:16:DF:D9:45:49
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018B612D89C9745567ACE409A135E7456284
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/T-P8mpzcFAlmkIHST_N6Ft_ZRUk.roa
Signing time: Tue 24 Oct 2023 10:14:16 +0000
ROA not before: Tue 24 Oct 2023 10:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 149.126.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:2d:89:c9:74:55:67:ac:e4:09:a1:35:e7:45:62:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 24 10:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fe3fc9a9cdc1409669081d24ff37a16dfd94549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:d8:36:25:85:7d:37:5d:91:32:99:aa:76:
26:22:88:51:91:ef:e5:de:5f:62:e8:d5:34:cc:0b:
16:4f:39:3d:81:da:94:bc:97:ea:72:68:ab:df:a3:
69:07:1f:27:f3:4a:c2:f2:1c:0c:fe:e0:ea:9c:38:
1c:bc:3f:a3:c3:ec:c9:20:b2:b7:79:21:43:49:0d:
66:b0:88:cb:ae:1b:c6:9b:2b:76:dc:70:c2:62:e2:
a2:21:8e:ff:31:f9:f8:0f:dc:db:9c:aa:da:6e:b0:
29:4d:27:2c:24:d3:a9:de:e1:07:d3:3a:f0:5f:96:
7b:08:36:89:02:5f:09:49:5d:47:ab:2d:49:9d:88:
65:9d:1a:49:c5:f9:59:46:92:e8:38:ff:77:16:31:
9d:bf:f1:12:6c:3a:a5:12:d8:bc:99:85:e1:b2:e3:
ce:0b:a9:ac:77:cd:3b:3a:98:15:68:ad:3e:c9:f1:
f8:ad:2b:4a:6d:40:d2:5c:3b:51:eb:2d:f6:d5:5a:
e5:5a:14:a6:96:86:e8:6c:fa:77:39:8e:76:f5:01:
40:8d:58:00:ac:0d:40:59:9d:00:7c:c3:7b:4b:b4:
4b:ec:fb:40:f9:44:8b:b7:0d:4b:69:29:60:07:7f:
aa:8e:39:54:05:af:23:ed:1d:82:22:ba:32:10:26:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E3:FC:9A:9C:DC:14:09:66:90:81:D2:4F:F3:7A:16:DF:D9:45:49
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/T-P8mpzcFAlmkIHST_N6Ft_ZRUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
89:be:fe:1d:2c:56:49:05:35:ea:dd:59:86:c3:f0:6b:b5:68:
90:61:41:55:37:7b:09:b5:50:6f:29:75:27:c9:36:f1:b3:98:
88:58:08:87:6d:15:0e:5c:6e:38:8b:c5:a2:69:ab:de:cc:2b:
8e:55:cb:f0:94:76:9c:1f:7a:7a:31:5f:e5:de:b3:a3:b6:29:
e1:c4:37:79:0f:f1:5c:89:15:d4:d8:95:9c:33:20:5a:ae:37:
2d:32:97:ba:e7:94:4a:0d:ae:17:36:8f:3d:7b:14:a2:26:14:
2b:02:cb:42:4f:6a:c2:61:b5:2d:5b:93:f5:6f:38:0b:56:f8:
ef:49:4c:6d:85:19:15:8f:29:82:2d:43:f8:01:15:9a:11:81:
32:a8:11:6a:df:74:7e:4a:5e:49:f7:e8:ea:49:d9:1e:5e:2e:
d6:ba:34:a4:10:64:5d:ca:6a:24:85:43:bb:4f:dc:bc:74:5e:
56:27:f9:f8:80:74:63:2a:e5:76:2f:b7:df:4d:3c:4a:99:dd:
73:0c:39:32:a1:41:90:c3:6e:97:64:87:03:a2:07:5e:17:d9:
02:4c:89:56:dd:ff:94:51:72:9a:e0:68:9e:ee:82:3a:78:54:
84:71:74:b0:a8:a5:a2:dd:2c:af:85:b9:e2:0e:9d:67:3c:8a:
9c:67:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org