Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/zIK-8PAVS13ATneIah7LSs6rRLc.roa
File: zIK-8PAVS13ATneIah7LSs6rRLc.roa (raw, json)
Hash identifier: 9o8eK1aBK+YS5vJijZ4xNdykgF3nizNb+RljQn9Kt4Q=
Subject key identifier: CC:82:BE:F0:F0:15:4B:5D:C0:4E:77:88:6A:1E:CB:4A:CE:AB:44:B7
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01856C138E99D0A19A9591E141A820A9E774
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/zIK-8PAVS13ATneIah7LSs6rRLc.roa
Signing time: Sun 01 Jan 2023 06:44:58 +0000
ROA not before: Sun 01 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203735
IP address blocks: 92.119.61.0/24 maxlen: 24
92.119.60.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
92.119.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:8e:99:d0:a1:9a:95:91:e1:41:a8:20:a9:e7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 1 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc82bef0f0154b5dc04e77886a1ecb4aceab44b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:97:b6:76:85:a9:1d:17:14:bd:35:4d:fb:
2a:48:62:f1:c1:ae:19:ef:66:ff:e6:f2:08:a2:10:
cf:64:b1:55:a8:7c:a8:13:0f:b1:a1:e7:85:52:3b:
90:31:ea:b4:07:0c:0a:df:1b:f5:f9:d0:18:42:3c:
32:3e:83:55:4a:a0:04:f1:61:36:a6:77:1b:86:c4:
ae:48:17:fe:5c:97:81:62:02:91:8b:de:c3:8a:8f:
9b:8c:e5:62:f7:cc:32:51:9c:02:e2:ec:10:3d:5e:
cd:71:aa:0c:17:fb:0b:1e:1c:93:0f:a3:cf:da:6d:
7e:3e:4f:fa:c5:43:19:5e:a4:5b:b9:5c:aa:28:04:
d0:3d:15:8a:ef:84:18:52:f5:35:51:97:eb:06:c6:
ac:1d:3a:71:12:aa:61:e3:d0:a8:80:7a:c0:1d:fe:
46:a1:d5:a8:e8:63:bc:3f:c6:22:33:c0:a0:6b:11:
bb:34:fe:70:ed:e5:8a:ed:ba:72:56:63:37:ab:82:
7b:8f:9d:6d:f2:55:9c:1b:c4:4d:3b:68:ce:b4:3d:
1f:68:eb:d7:e9:64:12:76:30:53:06:07:4e:6c:bb:
d6:fe:24:8b:f4:c2:44:d6:55:f5:aa:cf:f7:c9:29:
f0:44:e1:13:0c:52:1e:a3:9b:10:eb:f9:d4:55:79:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:82:BE:F0:F0:15:4B:5D:C0:4E:77:88:6A:1E:CB:4A:CE:AB:44:B7
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/zIK-8PAVS13ATneIah7LSs6rRLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.60.0/22
Signature Algorithm: sha256WithRSAEncryption
95:29:2e:61:fe:bf:48:0f:5b:69:a2:a5:9e:3a:16:dc:43:8f:
13:dc:dc:d6:80:5d:0d:72:6e:25:57:15:03:3b:43:5b:c9:0a:
49:ed:78:82:2c:c0:3b:43:7f:06:5b:c0:2f:80:0e:70:2e:c7:
27:7b:09:c3:2f:af:54:ad:a4:f5:c1:6a:9c:b4:33:ee:44:d5:
d7:06:7e:f8:a4:d1:1b:61:8b:e8:ac:17:3b:78:48:b0:72:d5:
dc:93:fd:0d:8d:0a:60:33:d7:ea:3e:cd:8b:7b:eb:b3:0d:fa:
91:9a:b9:a4:23:4e:b5:64:7f:ed:81:91:01:5c:6d:cf:75:77:
4c:00:fe:5a:47:62:9f:31:32:b9:09:64:a4:45:10:2e:dd:3c:
d2:e3:7a:d2:56:3b:8e:a9:05:bc:4d:d2:ec:13:83:81:ec:8b:
3c:03:3d:ec:65:19:12:6f:22:46:97:9e:bb:bd:ec:86:8f:11:
a4:30:f9:3c:dc:2b:fb:5d:dc:f8:09:9a:13:32:cb:f1:37:00:
6f:f9:47:3e:3e:d5:ea:5e:ce:64:1e:dd:f6:1a:bb:27:ce:62:
6b:ef:a6:fa:85:2e:28:28:29:f9:9c:f6:07:89:b8:ce:d4:e2:
75:d0:16:b1:81:c8:25:05:4a:4c:39:36:b2:c2:2c:05:e0:4a:
9f:29:42:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org