Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/CzaT89vAcKdS4Q7iw8EtzbVQlSc.roa
File: CzaT89vAcKdS4Q7iw8EtzbVQlSc.roa (raw, json)
Hash identifier: EXDhkUhEhiyxi0D203TLx0kE7CxnSSouyzbkjs1ysl4=
Subject key identifier: 0B:36:93:F3:DB:C0:70:A7:52:E1:0E:E2:C3:C1:2D:CD:B5:50:95:27
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01856C138F7F578DC589E79510A61AD29CB5
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/CzaT89vAcKdS4Q7iw8EtzbVQlSc.roa
Signing time: Sun 01 Jan 2023 06:44:59 +0000
ROA not before: Sun 01 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207442
IP address blocks: 92.119.62.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
92.119.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:8f:7f:57:8d:c5:89:e7:95:10:a6:1a:d2:9c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 1 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b3693f3dbc070a752e10ee2c3c12dcdb5509527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:57:d7:f8:2e:d1:81:f9:2c:dc:e9:fd:ef:
d1:ab:0f:d1:0a:7b:d9:0c:0e:c6:41:56:93:59:fd:
2a:bc:12:d7:d6:04:e0:00:c3:e4:f9:37:f7:79:5e:
4e:e3:8c:3a:b4:03:91:27:2f:25:49:3d:88:44:fc:
77:a6:b2:a0:b2:10:d4:d6:4c:70:1f:d4:11:fa:c7:
07:1b:3f:82:f4:cb:ff:a9:f6:dc:6a:f2:ce:74:5f:
59:72:3b:f0:5d:53:0a:7f:77:4d:b3:2a:2d:14:1a:
7c:9e:3f:e4:2d:16:54:76:1a:25:65:6a:f0:77:ca:
dc:40:b8:65:ed:39:c7:dc:d8:ed:7e:12:fa:17:26:
6c:f6:25:d3:ef:a7:25:c1:49:30:d3:18:92:fb:f2:
37:5d:35:42:e6:9e:0b:1c:25:ce:76:d5:47:5e:52:
5e:6f:b5:dc:b4:a7:94:8d:c9:00:e6:da:18:ea:ba:
63:c9:d8:ef:cb:16:ad:5f:94:8a:18:4b:5f:4a:c9:
41:b1:09:1f:a8:3c:84:2a:50:dd:02:9a:21:41:dd:
35:95:7c:98:da:15:47:aa:59:2b:fc:56:4f:b3:1c:
f2:e4:12:9c:9f:cb:fb:3e:36:88:9c:66:2f:9b:55:
c7:d7:75:00:b2:a4:17:8c:a9:06:94:cc:22:ad:c8:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:93:F3:DB:C0:70:A7:52:E1:0E:E2:C3:C1:2D:CD:B5:50:95:27
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/CzaT89vAcKdS4Q7iw8EtzbVQlSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.61.0-92.119.63.255
Signature Algorithm: sha256WithRSAEncryption
2d:4b:88:08:80:11:93:8e:e1:85:bc:4f:78:61:49:fa:b2:02:
bd:9e:c9:a9:6a:c8:49:f1:7d:c3:b8:82:b3:ea:2d:70:6f:b6:
bd:9b:69:82:9f:f5:14:33:80:6d:17:7c:53:62:b4:de:87:49:
bd:92:b5:16:99:ab:c3:14:55:34:08:68:16:2e:ab:0f:ce:ac:
91:94:22:7c:48:a4:98:bc:b3:b5:07:ea:8d:08:8a:d3:ce:15:
c7:d5:e2:a4:6c:7c:de:d1:62:44:af:8e:44:2a:89:56:27:2a:
15:e5:43:e1:b0:28:c5:58:c7:0d:15:87:2f:ca:58:db:58:2f:
74:08:74:fa:53:db:39:4f:cf:4f:56:fd:90:ca:e1:ef:48:0c:
17:fc:6a:ef:86:41:a4:3c:91:ef:6b:09:67:eb:0e:7e:ec:64:
35:11:38:29:80:9e:ee:ef:cd:65:6c:08:a0:22:a7:43:fb:07:
19:c9:9e:c7:19:fc:80:91:bb:28:7a:5c:61:18:48:c9:8f:2f:
2c:8d:91:6c:dd:15:74:c7:fb:52:9a:93:7b:dc:5c:10:5c:13:
00:c2:e9:5e:98:15:05:5e:fa:9f:50:fd:00:e6:ad:a3:d6:1c:
92:94:8d:b1:0c:fc:67:50:aa:a1:2d:2a:fa:c5:28:0a:b2:e8:
53:31:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org