Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/ilyQMCaF390dBOg4KU96m8c2gzo.roa
File: ilyQMCaF390dBOg4KU96m8c2gzo.roa (raw, json)
Hash identifier: gvRsOYZfyiefHquSa/BTEtH1A6AMaE/agn1mv2JRPnQ=
Subject key identifier: 8A:5C:90:30:26:85:DF:DD:1D:04:E8:38:29:4F:7A:9B:C7:36:83:3A
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01856C138FD273A1356674DE03AEAFD4B777
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/ilyQMCaF390dBOg4KU96m8c2gzo.roa
Signing time: Sun 01 Jan 2023 06:44:59 +0000
ROA not before: Sun 01 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209253
IP address blocks: 92.119.61.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
92.119.62.0/24 maxlen: 24
2a09:d1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 07 Feb 2023 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:8f:d2:73:a1:35:66:74:de:03:ae:af:d4:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 1 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a5c90302685dfdd1d04e838294f7a9bc736833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fc:08:5b:24:77:a9:d5:3f:2f:49:4f:2c:62:
44:91:8a:4a:4d:48:b9:17:c7:bb:26:86:c5:3a:84:
87:a8:21:ca:d9:a1:29:77:4f:5d:33:6d:53:9b:77:
1a:e9:69:9b:66:fa:f0:a8:21:d6:1e:74:f3:07:8d:
9a:c6:35:e4:9a:6e:f2:13:96:de:ea:d5:97:a4:91:
22:c2:86:e1:81:91:7e:fb:8f:f7:0e:59:bf:4d:10:
a4:bb:1b:a1:99:a1:3b:70:e7:b1:36:f6:b4:36:c0:
ea:ab:f1:ea:86:cb:35:49:13:1c:c0:20:94:cc:c3:
d8:65:63:00:66:ee:be:2e:23:c8:e5:9b:36:d1:52:
bf:6a:2d:de:2d:9e:c3:ef:cd:96:7b:b8:8c:ac:68:
b0:03:e4:ce:b5:d5:55:77:8c:f4:49:f2:c0:1f:ac:
25:eb:90:f2:78:72:a5:ce:85:f4:67:50:e1:d8:5a:
98:6b:9d:37:29:4a:af:9e:6c:c9:04:d8:f7:90:7f:
81:10:ae:74:b3:18:f5:ae:04:2d:21:d1:8e:f1:60:
9c:30:36:b5:06:13:2d:33:36:0e:70:2d:2b:32:77:
d4:3f:1e:d0:f3:66:63:b0:9f:05:3d:bc:63:d6:52:
68:1d:4d:04:3e:e2:01:c6:8e:5d:58:8e:83:4c:2f:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:90:30:26:85:DF:DD:1D:04:E8:38:29:4F:7A:9B:C7:36:83:3A
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/ilyQMCaF390dBOg4KU96m8c2gzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.61.0-92.119.63.255
IPv6:
2a09:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
21:2f:e9:e6:ee:d4:57:ca:d7:df:b6:fa:3d:f1:30:3b:87:01:
66:b9:60:a3:22:54:d5:d6:de:76:af:f4:3a:07:36:02:5a:ad:
02:8a:4f:16:2a:da:75:a7:40:e9:4f:f3:3f:34:a6:86:4f:04:
74:36:0c:f8:86:1d:e2:06:1a:6e:e5:1e:d5:43:5d:bb:c1:d2:
65:07:1d:64:b8:57:bd:df:00:33:d1:d4:2a:da:ef:53:1c:36:
81:88:09:78:d1:65:b0:26:df:bb:b8:84:58:df:c3:46:86:48:
d0:9f:ac:78:a3:f9:0b:2c:83:45:a0:01:db:46:67:b8:6d:0a:
b0:b8:fc:9b:59:62:0a:8c:a1:1e:47:87:c6:8c:2d:f7:80:d2:
3f:59:0b:63:78:b1:e8:5a:88:b0:44:fd:e0:3c:6b:0a:1f:25:
f5:74:14:41:55:87:88:aa:2d:13:0f:82:38:bc:df:a0:1a:d7:
b0:b0:05:68:2d:af:04:96:cd:6f:a0:ca:dd:17:0d:bb:6a:e1:
d5:39:77:b0:44:e7:e1:c2:08:42:63:82:49:62:7f:3f:58:bf:
45:d3:4c:57:f3:cd:a7:67:4d:e5:cf:60:4a:19:c3:ea:30:9c:
6c:ce:88:4c:14:b6:0a:a5:37:00:9d:96:20:51:27:c3:28:c4:
ad:46:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org