Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/7remVRLzZfaV855CCBxsi7uWDdw.roa
File: 7remVRLzZfaV855CCBxsi7uWDdw.roa (raw, json)
Hash identifier: xhDwhfeJ+azzTeHgVia72zcEQszZonj15Rw77dYexg0=
Subject key identifier: EE:B7:A6:55:12:F3:65:F6:95:F3:9E:42:08:1C:6C:8B:BB:96:0D:DC
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01856C138D4FE7BE63D817B81464A7DB4459
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/7remVRLzZfaV855CCBxsi7uWDdw.roa
Signing time: Sun 01 Jan 2023 06:44:58 +0000
ROA not before: Sun 01 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202672
IP address blocks: 92.119.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:8d:4f:e7:be:63:d8:17:b8:14:64:a7:db:44:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 1 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeb7a65512f365f695f39e42081c6c8bbb960ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:b7:86:f9:85:46:af:64:0b:74:9f:de:22:
df:9e:5c:f9:6c:05:9c:95:97:ca:eb:ce:e5:0f:70:
e9:0a:2f:0e:cc:a8:a7:b9:88:53:10:20:d1:58:cb:
3a:be:4d:17:3c:7d:4d:16:d3:b9:53:0a:a7:f1:d6:
26:ff:0a:85:18:e4:f7:d8:92:f6:a3:32:3d:28:a6:
a6:2e:a3:e9:84:0f:e0:a6:55:0f:7f:af:9f:20:b8:
1a:5b:02:7f:55:18:50:97:ec:31:9d:1a:40:a1:0e:
9a:ff:45:ac:3f:55:e0:08:0e:d5:ce:8b:77:73:f4:
f8:f3:cc:1f:70:cd:07:55:91:bf:8f:8a:8d:31:b9:
58:7b:34:66:51:b7:93:19:79:09:d4:c9:9a:a7:5c:
f8:04:43:70:a9:cd:b7:35:70:a0:cf:5c:c8:b4:8c:
7d:7a:4b:30:0e:49:5f:6b:cf:45:a4:85:7c:c0:29:
b2:9f:6a:0b:53:e8:a0:90:98:fa:f5:9f:80:6f:0f:
0b:24:e1:8a:75:6a:d1:21:81:8d:c9:14:e6:c3:d9:
30:22:82:0b:a7:87:32:cc:e6:17:86:cc:b5:ed:b6:
d7:57:81:cd:9e:a1:dd:79:3c:b1:65:3d:9c:a5:4a:
c6:c4:4e:6e:fc:38:47:71:8b:98:f4:df:b0:5f:a9:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B7:A6:55:12:F3:65:F6:95:F3:9E:42:08:1C:6C:8B:BB:96:0D:DC
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/7remVRLzZfaV855CCBxsi7uWDdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.61.0/24
Signature Algorithm: sha256WithRSAEncryption
af:04:c5:8f:f1:a8:65:73:12:1e:82:b8:b1:3a:35:d4:cc:d8:
4b:93:65:8f:23:54:9d:ce:96:dd:1f:15:57:7a:34:20:35:84:
41:ae:c7:4f:88:bc:c1:be:75:0e:8f:67:a9:f0:28:33:f2:b9:
d1:d3:fe:d9:6a:01:f9:1c:cf:89:d7:1a:a9:69:3a:60:d0:55:
02:0d:a0:66:34:18:77:cc:83:93:dc:3f:49:ad:7f:50:a9:4a:
c7:99:d9:58:e9:fa:a5:2e:8b:e3:fd:bc:07:4e:bc:7d:fb:44:
3f:97:2e:5e:5b:65:c2:fd:4e:69:e6:9f:e1:f4:5a:28:a1:31:
d2:ab:d1:5e:5a:14:b4:2d:36:8c:15:57:f9:69:f8:15:03:60:
f7:bf:91:4f:a1:35:04:24:54:33:d8:ca:5d:b5:db:5c:db:a0:
95:ad:41:2e:2e:99:85:62:0a:60:56:5a:59:1f:ad:12:63:db:
4c:86:2b:57:d2:30:d1:08:c7:a5:ca:df:5b:89:c2:c1:fa:80:
28:81:19:87:e9:94:24:2f:28:4e:ff:ac:87:21:b8:10:80:e2:
62:bf:a1:73:5c:66:d8:04:66:95:90:fc:ad:fc:3a:f0:88:1b:
c7:f8:94:7f:92:54:c3:c5:2b:e4:26:9a:b4:34:f5:10:76:ad:
bc:7d:7d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:40 2024 by rpki-client on console-ams.rpki-client.org