Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6BE9MfrLBVGkTU6SoiowVbeI0K8.roa
File: 6BE9MfrLBVGkTU6SoiowVbeI0K8.roa (raw, json)
Hash identifier: +AVsZyf//XvilIUeb5gX+cKnjkIJIx89Dc+xZ+buy30=
Subject key identifier: E8:11:3D:31:FA:CB:05:51:A4:4D:4E:92:A2:2A:30:55:B7:88:D0:AF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5178781CC6A5B6FFD3DD441BFA36D
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6BE9MfrLBVGkTU6SoiowVbeI0K8.roa
Signing time: Mon 02 Jan 2023 00:15:14 +0000
ROA not before: Mon 02 Jan 2023 00:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34601
IP address blocks: 92.114.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:17:87:81:cc:6a:5b:6f:fd:3d:d4:41:bf:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8113d31facb0551a44d4e92a22a3055b788d0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:d9:0f:79:bc:5e:d9:1f:65:73:36:ba:bf:
6b:d5:96:6b:5e:8e:b5:d9:7e:3d:ac:52:de:cf:ab:
8b:bc:09:35:60:44:70:7d:51:a4:81:14:f4:2f:61:
f3:54:fd:8c:af:9d:fb:af:68:62:0c:e2:40:a3:d1:
36:8d:4a:59:5b:c7:18:a2:be:c0:77:0e:e8:6f:bd:
c9:53:88:18:51:48:66:9d:b5:5b:7d:c5:e7:92:9f:
73:e5:c0:bf:62:94:5d:a8:70:f3:12:0e:5d:5c:31:
4e:de:34:c3:bb:2b:48:68:87:33:b8:34:4a:f2:11:
90:c6:b4:69:d2:47:ee:f7:79:f8:de:2d:56:36:11:
3e:aa:01:29:2e:de:91:5d:47:be:46:5a:0e:48:41:
cc:e0:61:3c:40:ab:63:ea:08:7d:d4:ef:9b:ca:96:
e9:5b:07:8e:6b:db:91:b4:76:b9:86:ed:cd:1b:10:
44:06:f2:bc:a8:65:3b:e9:b1:59:8e:44:f2:8d:26:
ce:9d:32:83:83:d1:9d:2c:56:93:83:d3:11:41:f4:
c7:03:e0:f5:6f:c4:5e:72:ce:c7:13:6d:13:63:87:
11:cb:86:38:1a:49:5a:6c:c0:e0:c2:90:6d:c4:75:
b7:b3:2e:6d:0c:04:64:c1:48:c9:9c:9f:db:74:33:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:11:3D:31:FA:CB:05:51:A4:4D:4E:92:A2:2A:30:55:B7:88:D0:AF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6BE9MfrLBVGkTU6SoiowVbeI0K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.37.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:ee:7d:73:a4:e1:cb:33:ea:8a:5a:c0:91:0d:f1:39:fc:52:
5b:5a:2a:2e:88:e5:b6:ca:8a:36:7b:01:59:2a:81:c7:78:83:
8f:78:09:6a:4f:25:1d:96:2e:f3:82:5f:a8:0c:c5:aa:cd:50:
97:ab:24:1f:17:a6:af:aa:7a:70:15:d8:55:f9:bb:d9:ff:8e:
61:aa:cd:d2:27:37:39:39:ac:42:15:a2:fc:47:4f:d9:7e:9e:
96:be:e1:26:e6:a3:48:0c:3a:0f:f3:50:f9:83:45:24:dc:eb:
28:35:74:a3:c7:29:f1:71:d9:e1:a4:18:db:95:a9:3c:51:a5:
30:f7:08:e0:d4:55:15:db:16:57:9f:27:52:08:50:36:18:71:
b7:f6:01:2c:0c:d7:c6:46:c6:33:83:30:16:18:7c:8f:c2:96:
64:06:2f:cc:3d:13:f7:24:9f:29:a1:ca:43:03:fe:4a:35:67:
e9:c3:3a:82:ec:b1:b3:be:46:23:ef:27:37:5e:96:16:9c:57:
2e:38:87:2f:19:f4:28:16:f4:e6:0f:a2:99:60:f5:fc:1d:c0:
48:64:1d:b7:37:39:83:a3:c4:fd:66:19:ec:44:6a:71:4d:ca:
72:31:a4:f4:6a:d0:db:56:ed:f0:0b:08:57:0e:80:21:31:62:
ab:72:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org