Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/3V9RLG00armICihoMZE6WWAO-E4.roa
File: 3V9RLG00armICihoMZE6WWAO-E4.roa (raw, json)
Hash identifier: OrVSMrJmKWUC9Ome6TC3TFCs/j9kxIKhfg8meEnijFE=
Subject key identifier: DD:5F:51:2C:6D:34:6A:B9:88:0A:28:68:31:91:3A:59:60:0E:F8:4E
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 018E323D59FC1D475E294EDA3BE2F5BD9340
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/3V9RLG00armICihoMZE6WWAO-E4.roa
Signing time: Tue 12 Mar 2024 10:37:45 +0000
ROA not before: Tue 12 Mar 2024 10:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 92.249.7.0/24 maxlen: 24
2a14:12c0:dc1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Mar 2024 15:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:3d:59:fc:1d:47:5e:29:4e:da:3b:e2:f5:bd:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Mar 12 10:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd5f512c6d346ab9880a286831913a59600ef84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:0d:ed:2e:01:f8:76:8f:6d:d9:d9:c7:d9:
62:1b:87:fd:e8:85:a0:8e:02:7f:88:da:10:07:49:
55:83:42:f2:e9:54:81:c1:21:75:c7:19:8c:82:99:
1d:2a:5c:9d:ef:29:98:75:14:af:5c:24:20:6c:e7:
08:6a:ad:68:8f:e6:0a:2d:d2:80:85:3f:84:ff:e7:
d3:01:81:8d:4a:16:aa:8b:0f:6c:b6:81:39:69:07:
31:14:c4:e4:c6:60:70:75:ea:77:bd:62:60:e4:77:
e1:20:14:75:de:42:49:fe:92:78:74:1a:97:fc:52:
2a:4f:a0:63:f0:34:f0:97:8f:1c:27:14:81:e9:b5:
d1:ea:2e:1c:5b:2a:77:26:16:ea:25:58:d5:43:19:
1e:fd:2f:88:ba:10:0e:a3:41:a9:2b:a0:2a:02:ad:
c7:e0:89:4c:b5:03:c0:2f:3d:09:07:ab:5d:64:94:
34:3d:14:dd:21:52:62:41:f3:aa:59:35:17:69:2c:
b8:41:9d:18:05:06:8b:89:92:91:8d:a4:5b:64:06:
64:53:8d:7a:86:1f:6b:6b:72:0f:ea:28:b7:50:3a:
65:37:ff:43:3a:0e:f3:ba:c7:0e:d7:99:2d:a4:0a:
be:b5:0c:c8:07:7f:06:f7:83:f7:3a:a0:25:b5:72:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5F:51:2C:6D:34:6A:B9:88:0A:28:68:31:91:3A:59:60:0E:F8:4E
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/3V9RLG00armICihoMZE6WWAO-E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.7.0/24
IPv6:
2a14:12c0:dc1::/48
Signature Algorithm: sha256WithRSAEncryption
7a:c8:99:dc:30:c3:23:3e:0e:bd:a1:63:1a:76:3a:3f:ff:6c:
f6:58:8d:38:14:31:f1:8e:39:4f:ce:ab:c7:b2:de:a0:ff:a9:
0b:27:57:a9:1d:2c:69:60:14:c3:65:41:0f:d6:7f:94:09:4a:
b4:22:8d:36:d2:ab:14:e9:94:ff:ee:7c:c3:6c:c4:ca:01:4a:
25:88:6d:cc:10:c9:c7:3a:4d:57:7d:14:7b:7a:f2:cf:14:1f:
76:f3:55:dd:48:72:76:37:4d:e5:84:16:df:e6:4e:c1:8e:d6:
81:c3:8b:f4:26:5b:6a:75:dc:7e:e1:68:db:fa:83:51:8f:c4:
cb:a5:ee:db:92:a5:a3:a1:6b:70:38:9e:0f:09:ae:ee:94:8b:
69:1d:dd:a2:7f:9e:74:0e:30:22:52:e7:86:ae:0d:67:53:df:
ff:c9:57:d8:ae:f8:31:e8:c6:1e:e2:c0:0f:98:95:4f:5d:b1:
6d:ea:62:a1:d5:fa:ba:f2:73:bb:49:d8:bc:2f:53:12:5a:23:
16:98:07:99:e6:b6:9b:90:f4:7e:41:34:42:e0:6b:50:52:d1:
d8:5d:50:aa:90:3f:ef:c5:41:7d:e9:65:fd:da:b6:c4:5d:b0:
47:eb:0a:0a:42:9c:55:a4:cf:87:95:e9:9d:49:f1:97:c4:21:
67:ca:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 18:58:37 2024 by rpki-client on console-fra.rpki-client.org