Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/0srFf8j32DeNRj988mIroB2HRPM.roa
File: 0srFf8j32DeNRj988mIroB2HRPM.roa (raw, json)
Hash identifier: ECdvPntev7lvjOhZUMmvRkwATPF2FIm42gVGxTtNdxY=
Subject key identifier: D2:CA:C5:7F:C8:F7:D8:37:8D:46:3F:7C:F2:62:2B:A0:1D:87:44:F3
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018C39FF0C4A1C064540368473291C37D54B
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/0srFf8j32DeNRj988mIroB2HRPM.roa
Signing time: Tue 05 Dec 2023 12:41:05 +0000
ROA not before: Tue 05 Dec 2023 12:41:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41745
IP address blocks: 92.118.169.0/24 maxlen: 24
92.118.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:ff:0c:4a:1c:06:45:40:36:84:73:29:1c:37:d5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Dec 5 12:41:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2cac57fc8f7d8378d463f7cf2622ba01d8744f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:07:5c:f6:1d:ad:57:2c:20:70:4c:94:67:
d3:6d:26:bc:ee:a2:1b:64:e4:14:39:7f:f9:c4:46:
bf:84:5d:68:2e:71:33:0a:71:6e:c3:9d:bc:c2:85:
0a:84:85:ff:07:11:b2:6d:7b:41:50:c7:08:38:63:
89:e5:33:e7:a3:cd:2c:6d:59:f3:d5:46:f5:2e:12:
71:99:a2:cc:fb:73:fa:00:9e:d0:14:8f:35:7a:f9:
4a:3e:ad:52:73:96:77:56:80:f4:1f:fb:55:13:11:
a7:d4:ff:f5:8c:e9:6f:6e:4d:73:a9:e3:95:73:86:
b9:48:30:62:2e:fa:d9:c3:1d:31:89:b2:f4:23:eb:
45:f5:fd:8d:19:15:a8:45:0c:41:ef:c6:40:0e:b9:
18:65:57:d3:52:ab:4e:89:1c:7e:4b:4f:ad:21:c1:
f8:36:f7:00:86:ac:08:96:cb:b8:7b:ab:c0:85:10:
ac:c1:0d:95:d6:5e:a0:86:8b:be:33:01:96:a9:b6:
90:77:d1:62:90:bb:75:2c:b8:12:b5:d2:20:06:39:
26:81:ef:b5:68:13:f2:bb:3a:f6:1d:05:b7:1e:eb:
ab:ae:1b:28:4f:17:77:d9:9c:24:01:f5:fb:8b:9a:
9a:b0:60:31:4e:57:20:a2:4c:f7:a1:79:6f:cb:1c:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:C5:7F:C8:F7:D8:37:8D:46:3F:7C:F2:62:2B:A0:1D:87:44:F3
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/0srFf8j32DeNRj988mIroB2HRPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.169.0-92.118.170.255
Signature Algorithm: sha256WithRSAEncryption
12:11:d4:07:88:b1:a3:16:1c:ef:24:2e:97:52:54:f7:d5:f0:
74:c9:be:fd:94:a8:37:3a:6a:ea:1f:a4:0b:cb:80:cc:6c:ef:
55:b3:4d:ff:ee:55:2e:b5:85:62:7e:5b:e9:d5:f6:2f:d5:86:
c7:b0:c9:27:e1:b7:af:ac:15:80:e9:6a:c1:95:5a:0a:25:50:
58:16:e0:86:aa:b9:36:ac:0c:d5:4a:dd:d9:04:6f:e3:b6:45:
07:71:38:31:98:ac:be:60:8a:8f:1c:00:f4:db:21:87:8f:8e:
8e:27:df:57:1f:c6:4a:ab:c0:ed:81:6f:cd:9f:a3:44:f0:07:
0c:54:91:cf:48:f2:e0:dd:07:15:86:09:23:ea:c3:0e:fc:b5:
df:da:34:d9:62:eb:98:82:6e:0b:9c:48:b1:e4:3d:7a:68:67:
ff:86:7b:52:5f:5a:d8:73:0e:20:94:83:99:87:af:92:c3:4f:
2e:4a:3e:bc:4f:31:a6:e9:33:c1:94:d3:af:b9:2e:58:85:20:
c4:bd:bc:5c:e4:80:9e:37:ff:6a:fd:99:3e:79:f2:97:c5:07:
cf:e4:25:23:94:5a:6f:1f:85:26:ce:52:cb:c6:f4:69:a3:15:
5c:00:7f:e9:da:ac:47:6a:e8:31:b1:40:d8:24:d8:6a:d5:05:
0b:7c:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:54 2024 by rpki-client on console-fra.rpki-client.org