Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/cxEZkYyNXV6Q3CdgbLhYLRshW14.roa
File: cxEZkYyNXV6Q3CdgbLhYLRshW14.roa (raw, json)
Hash identifier: 19qtZzCiqBNXEDmJ9Db/qoSTNJ5DwgXL0N8mdT4n7BA=
Subject key identifier: 73:11:19:91:8C:8D:5D:5E:90:DC:27:60:6C:B8:58:2D:1B:21:5B:5E
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01856C138F1332DCE25E4FDA5EB52F0F4562
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/cxEZkYyNXV6Q3CdgbLhYLRshW14.roa
Signing time: Sun 01 Jan 2023 06:44:59 +0000
ROA not before: Sun 01 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206706
IP address blocks: 92.119.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:8f:13:32:dc:e2:5e:4f:da:5e:b5:2f:0f:45:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 1 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=731119918c8d5d5e90dc27606cb8582d1b215b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:f5:9f:16:65:5d:ed:4d:29:02:46:08:3b:
5f:34:50:41:97:79:af:14:f8:83:80:1a:92:11:eb:
9b:b0:01:52:11:46:72:62:4e:60:ae:e0:13:8d:50:
98:46:90:4e:67:e1:14:78:5c:b3:88:0c:58:11:20:
f0:c2:51:61:28:21:00:b3:12:f1:d0:95:5c:2a:5d:
9b:06:40:92:1b:aa:d3:cf:3b:dc:4a:c0:fc:f5:9e:
56:c9:2d:9d:cc:5d:11:e6:69:8f:bb:3c:45:99:5e:
d0:bc:09:d1:42:e0:e1:7e:14:2b:08:c4:a6:8a:cd:
ba:bb:db:38:09:6f:9a:db:bf:74:48:a7:51:cc:19:
d1:c9:0c:47:7b:75:f8:8d:60:4d:86:9d:28:69:e2:
c8:df:2f:33:09:e8:87:22:bd:f9:eb:94:8c:99:e0:
9b:cc:07:c0:f4:cf:18:ee:e8:de:fb:aa:98:be:e8:
f6:18:5a:e9:56:11:07:18:93:b0:8b:e4:b8:ee:b7:
9d:3c:29:8c:2b:c2:e1:be:b6:3b:d2:1d:08:77:15:
f0:2b:af:24:c1:af:60:e6:d9:a4:e7:47:bb:40:c1:
ae:74:3b:5c:78:52:ec:7a:9c:d4:08:cf:11:4a:0c:
7a:8e:15:6f:a3:70:ce:1b:3f:a2:b1:c4:ba:8c:d3:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:19:91:8C:8D:5D:5E:90:DC:27:60:6C:B8:58:2D:1B:21:5B:5E
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/cxEZkYyNXV6Q3CdgbLhYLRshW14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:91:88:65:5c:a8:81:6f:41:b5:14:88:72:54:07:a9:7c:ba:
c0:dd:3d:77:7f:e9:58:01:ec:0a:d7:0f:d1:04:02:87:b0:26:
5c:d5:79:3d:fc:bb:38:44:c4:63:d1:a2:06:29:ab:7f:fd:d0:
9f:f8:1e:7b:c6:af:91:80:dd:18:c3:36:ee:74:fb:74:5e:ec:
8f:02:f0:68:95:bf:56:4b:3a:10:48:d7:8b:9e:a6:c0:e7:76:
e8:53:08:27:71:b0:f9:1b:bf:5e:75:18:98:b0:27:0e:be:75:
cc:65:ab:a5:6f:ee:eb:aa:c7:c6:5d:19:cb:78:49:69:cb:bc:
b4:91:08:f3:29:26:3a:aa:e9:72:76:e5:63:f0:4e:56:f8:ee:
73:95:2e:5b:f2:b0:f2:69:f9:b0:36:2c:36:b3:5b:6b:63:1d:
93:cf:40:ee:fc:cd:34:96:c7:cd:40:09:b8:ef:1e:fa:0d:43:
4f:39:1c:95:13:21:a6:e2:c7:72:7a:8a:13:d4:19:37:c4:31:
78:2b:e8:92:7d:bd:c9:36:69:87:9d:d8:a5:6d:da:86:6c:fb:
f5:80:f6:ba:21:35:16:60:90:a7:f6:54:15:48:a1:1d:91:15:
66:41:e0:a7:64:cf:41:23:da:15:c2:06:a9:5b:75:0b:5c:65:
a8:d2:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:40 2024 by rpki-client on console-ams.rpki-client.org