Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/jAl63QVQb6KeRRukByxhf1GyXA4.roa
File: jAl63QVQb6KeRRukByxhf1GyXA4.roa (raw, json)
Hash identifier: v5lwxfWB1UKX64BN8Ciae2esHg+aeGzn4mVBshKvnB0=
Subject key identifier: 8C:09:7A:DD:05:50:6F:A2:9E:45:1B:A4:07:2C:61:7F:51:B2:5C:0E
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0187DC36E9FA87FBC0BC8A22C2911A3AB0F8
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/jAl63QVQb6KeRRukByxhf1GyXA4.roa
Signing time: Tue 02 May 2023 11:26:39 +0000
ROA not before: Tue 02 May 2023 11:26:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 92.114.40.0/22 maxlen: 24
31.186.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 May 2023 14:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:36:e9:fa:87:fb:c0:bc:8a:22:c2:91:1a:3a:b0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 2 11:26:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c097add05506fa29e451ba4072c617f51b25c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:e9:91:8e:08:6e:c0:1e:d1:80:50:32:36:
3e:70:9d:07:f5:c2:a8:a7:b3:8f:a6:b2:45:03:2a:
10:71:26:ac:b9:72:5b:c5:13:d4:a0:4e:34:7b:af:
0b:1b:ba:b9:4b:f7:9b:76:f9:91:eb:f9:bd:cc:54:
fe:4b:30:30:07:19:13:94:bf:ad:4b:8e:a8:f0:36:
61:54:25:fc:f7:af:85:e2:97:89:81:a5:f4:71:e9:
64:6c:0a:47:10:fb:6f:53:ee:5f:e9:3f:8a:c2:7d:
c6:7e:0c:c6:d4:95:c3:c8:ed:08:20:0f:e2:e9:fa:
26:f5:6f:e0:5d:da:64:d5:27:53:c9:72:e1:fc:86:
37:e9:70:e9:22:c2:b0:cb:c8:27:d3:a0:b7:18:27:
5f:84:1d:75:33:09:40:b4:db:f7:0d:ef:19:f5:11:
76:7d:15:f6:58:68:17:23:0a:f3:6a:2b:bd:5b:bd:
7d:9d:6b:88:f9:19:c6:a1:cb:b6:9c:85:5f:7b:1b:
9a:05:b8:71:2b:02:48:37:6f:a9:9c:6f:b1:1e:b6:
6d:3f:e0:b6:91:4f:34:61:b0:56:29:c7:0d:fc:7a:
70:f3:fe:7e:1f:f3:c7:a9:6a:5b:e1:d0:0c:f1:46:
ab:8d:b6:61:17:d9:6d:0f:ce:83:96:fd:b8:aa:bd:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:7A:DD:05:50:6F:A2:9E:45:1B:A4:07:2C:61:7F:51:B2:5C:0E
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/jAl63QVQb6KeRRukByxhf1GyXA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:bf:90:e2:33:86:f6:3a:33:f9:44:19:91:00:9d:b3:16:d1:
83:9c:69:a6:cb:7b:da:01:1a:6b:fb:1d:a8:cb:b4:a1:ea:97:
72:d1:ca:b8:18:4b:85:cc:fc:61:80:31:7e:b3:b2:13:b8:05:
dd:0a:3c:6b:e7:cd:da:46:26:bf:35:66:ac:5f:b4:18:4f:44:
ed:bd:fc:5a:14:e4:f8:ad:0a:d1:b2:f8:91:ea:92:51:6e:72:
c1:ae:63:12:61:f2:64:53:dc:a1:8f:76:fd:51:78:bc:a9:61:
e9:29:ec:f7:78:7e:29:1d:70:d0:2f:87:77:c3:eb:65:e7:3c:
6c:a1:b7:12:8f:43:b2:4f:07:3a:9b:8a:65:bb:63:d0:e1:2a:
8f:c4:3d:22:d1:51:81:bd:9c:28:0e:c3:c5:08:6e:7e:2f:a7:
4a:5f:f5:03:fb:97:41:b7:af:84:7e:ca:fb:2a:a8:0d:57:09:
0a:36:ca:4b:00:7c:97:ef:7b:09:ce:29:e4:70:93:fc:65:dd:
f3:b9:1e:67:6e:d5:cf:37:8a:6f:73:0b:7b:20:4f:86:53:38:
01:82:6f:a2:a3:e7:8e:fe:7e:e6:7a:9c:df:1d:57:68:06:7b:
33:94:ce:b4:82:9a:e6:12:31:01:04:69:61:5c:d8:dc:6e:25:
13:87:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org