Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ntQtnq4T-bQ8ZGxtiaLZl4DbU30.roa
File: ntQtnq4T-bQ8ZGxtiaLZl4DbU30.roa (raw, json)
Hash identifier: qHW5L6R7A4ajkHrgaZssql5QShk4jbwFWkZ4tULv1Dg=
Subject key identifier: 9E:D4:2D:9E:AE:13:F9:B4:3C:64:6C:6D:89:A2:D9:97:80:DB:53:7D
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018A025C19EEF274A2CD0490DBD761C53AB1
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ntQtnq4T-bQ8ZGxtiaLZl4DbU30.roa
Signing time: Thu 17 Aug 2023 07:18:24 +0000
ROA not before: Thu 17 Aug 2023 07:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 92.114.44.0/22 maxlen: 24
31.186.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:5c:19:ee:f2:74:a2:cd:04:90:db:d7:61:c5:3a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 17 07:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ed42d9eae13f9b43c646c6d89a2d99780db537d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:9b:78:7e:3f:23:5c:59:d4:76:5c:a9:ed:
39:bc:78:fb:80:21:f2:fc:d6:4a:cd:43:39:07:9c:
5a:4c:d7:4c:c3:12:17:a3:07:be:82:0b:4c:df:91:
43:a9:34:48:9a:66:a4:67:33:19:e4:5d:47:51:96:
bc:f5:e0:c1:0a:dc:71:63:0e:ab:4e:f9:7c:e9:ff:
ad:91:5c:6c:c1:20:7e:5d:11:6f:26:6a:6c:da:7c:
13:86:59:48:70:80:f6:e2:e7:74:34:07:24:5c:52:
e7:0e:7f:5d:6b:f3:2b:db:7a:93:27:7c:68:47:f5:
cf:55:9e:54:bf:45:a2:7e:bd:90:68:ad:36:4f:a2:
f4:36:92:0e:dc:a7:a2:6b:d1:09:be:29:a1:14:fa:
e7:c3:f9:57:db:2c:cf:d6:de:e7:75:4b:76:85:2b:
0c:35:d3:1a:72:23:fe:0e:8c:ca:20:ad:ec:08:3b:
ec:25:fb:ed:cb:fe:36:0b:a3:d7:42:67:42:5e:ac:
7b:6d:13:25:8b:6a:3e:a4:e5:23:61:35:3b:34:2f:
d8:1b:a5:33:f6:7d:f6:a4:a4:38:12:51:4d:ac:ac:
2f:7e:a7:9c:f1:27:1f:3a:b4:31:ce:0a:83:c6:2f:
34:2e:0c:2a:0f:6b:1e:fb:5d:fa:b8:53:ee:97:2b:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:2D:9E:AE:13:F9:B4:3C:64:6C:6D:89:A2:D9:97:80:DB:53:7D
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ntQtnq4T-bQ8ZGxtiaLZl4DbU30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
92.114.44.0/22
Signature Algorithm: sha256WithRSAEncryption
54:0a:8a:60:dd:b4:d2:65:1a:3e:1d:cd:de:1f:58:08:5d:26:
79:fc:be:f7:b4:77:0b:d6:dc:b6:db:3e:d0:5d:61:1d:bc:67:
8c:01:d3:ff:e4:81:aa:40:5b:98:f7:3a:78:18:2c:5f:2d:69:
c0:ad:a6:8b:31:00:73:f9:25:ff:91:8b:dd:58:1c:49:e8:ed:
5e:6d:80:aa:b0:cf:b2:60:df:23:41:13:36:6d:f7:25:45:c9:
a8:ea:b3:00:9c:81:36:53:2e:76:72:42:e1:37:ca:2d:5d:b9:
03:fa:97:a8:95:01:20:e7:8f:77:d4:58:81:05:35:9a:9e:ef:
06:df:37:52:96:cb:2b:d1:af:23:79:60:af:5d:ec:61:4f:22:
6d:c7:f8:cc:e9:e4:5b:f5:59:f9:f5:48:2b:16:ec:46:85:8d:
77:3d:38:51:b0:73:e8:cc:83:e2:19:df:35:5c:1c:17:87:aa:
7a:72:6c:eb:c6:86:de:48:74:93:dd:ab:95:fa:a5:0e:c4:fc:
df:5e:54:16:ee:8f:f2:b6:fc:8d:96:ad:e4:df:22:75:bc:2f:
55:de:12:6d:68:66:e1:4d:39:99:3d:47:ce:3a:87:c7:dd:be:
8c:38:4d:a0:9e:cf:89:18:d4:fe:31:e4:10:21:77:41:29:a0:
fd:ee:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:36 2024 by rpki-client on console-fra.rpki-client.org