Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/vDJMDZQr3J9TrHVBLMUOv_41uRE.roa
File: vDJMDZQr3J9TrHVBLMUOv_41uRE.roa (raw, json)
Hash identifier: sr43Q8t1+TnYNQhtsaOZGiM1MKve0w2bMDw3d/26PhI=
Subject key identifier: BC:32:4C:0D:94:2B:DC:9F:53:AC:75:41:2C:C5:0E:BF:FE:35:B9:11
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0189FD3F11BEDBA4584F68273C0399A21582
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/vDJMDZQr3J9TrHVBLMUOv_41uRE.roa
Signing time: Wed 16 Aug 2023 07:28:36 +0000
ROA not before: Wed 16 Aug 2023 07:28:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 92.114.40.0/22 maxlen: 24
149.126.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 07:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:3f:11:be:db:a4:58:4f:68:27:3c:03:99:a2:15:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 16 07:28:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc324c0d942bdc9f53ac75412cc50ebffe35b911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:de:17:1b:dd:91:59:37:ea:07:09:81:2a:
1d:2a:3e:ea:ba:d5:33:2c:44:55:1c:77:ae:2c:8c:
7f:f1:b2:0e:5b:fa:65:40:08:ba:7c:1e:c0:b8:3a:
c5:d8:53:cd:fc:37:fd:06:e8:5d:f2:d0:1f:e7:e9:
b2:89:ca:b1:62:aa:bf:87:27:cb:f4:c8:69:32:87:
cf:f4:3a:ed:10:57:8c:b3:3a:a0:9f:76:db:4b:8b:
a3:18:e3:0f:f8:82:c1:31:4a:2d:2d:d8:c9:f9:9c:
89:ed:08:b4:dd:8d:be:a1:09:8e:63:5b:18:00:88:
5c:ac:52:ed:5a:8f:3a:38:3d:09:95:74:4b:37:72:
17:f7:8b:a8:02:1d:6c:4e:ed:bc:5f:1f:84:f2:ab:
0e:14:5c:5f:4c:be:1f:ec:33:eb:03:36:28:01:9a:
9e:ab:85:78:65:66:3c:94:c9:9b:ff:a9:a0:7e:43:
47:bb:dd:e1:23:de:a9:43:d4:80:2f:2b:3e:85:1f:
b9:f8:ed:ff:8b:e0:9d:9f:45:e6:cc:9d:2c:7e:f9:
30:0d:e8:81:49:4d:91:ae:dc:23:b4:47:a5:d1:70:
d1:53:87:6e:14:f9:f5:54:52:0a:93:d2:27:b8:44:
ce:10:7a:ef:09:09:bb:85:76:20:82:4b:8a:20:57:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:32:4C:0D:94:2B:DC:9F:53:AC:75:41:2C:C5:0E:BF:FE:35:B9:11
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/vDJMDZQr3J9TrHVBLMUOv_41uRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.40.0/22
149.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
83:00:16:e8:68:01:5f:3c:66:45:e9:00:e9:9e:94:26:fc:af:
ff:c7:ba:85:ca:c0:35:ec:4d:05:ec:e4:dd:38:bc:15:fe:3a:
20:0a:ab:08:0d:a9:ff:4f:8e:4c:71:de:bf:ef:34:bc:b0:10:
09:59:9f:b0:09:4e:fb:9c:f7:5f:74:f9:c6:5d:aa:b8:47:e7:
b3:ac:fd:ae:cf:a5:d8:ba:94:37:09:dc:28:88:fa:5b:62:3a:
75:4f:71:95:6b:7a:c3:af:af:8f:bc:38:e2:21:f9:05:41:98:
5b:ca:95:b8:a3:dd:a6:56:b1:ec:12:c7:41:38:df:f9:42:8c:
d2:62:15:2c:e8:ab:f3:f9:04:92:02:db:52:81:ce:ec:37:dd:
a6:76:f7:85:6f:5d:49:ae:e9:e3:3a:ef:19:bb:89:8d:a4:e8:
f1:2e:fa:29:12:2d:f0:bd:0a:8d:dd:fc:01:bd:06:66:c8:83:
2f:ec:ca:f8:c7:1a:22:6b:03:b9:d6:4a:2b:8e:c6:b5:26:58:
a0:c1:6a:b0:15:24:8b:17:39:c5:16:6a:8d:3d:4d:29:f3:17:
d7:6c:e7:d5:6d:2a:2b:74:6b:18:df:45:be:bd:16:03:09:3f:
89:11:b6:a4:5a:e1:b9:1a:f2:c4:f4:d1:b9:dd:56:12:3a:e2:
36:f2:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org