Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/98rOBdYvihtrhbf9Fx8vRE0WiyM.roa
File: 98rOBdYvihtrhbf9Fx8vRE0WiyM.roa (raw, json)
Hash identifier: BsRFKJ903PVbFnNwzNRUw3LoMumbueGrg0LGIZfXXjA=
Subject key identifier: F7:CA:CE:05:D6:2F:8A:1B:6B:85:B7:FD:17:1F:2F:44:4D:16:8B:23
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 018ADBD29B13F1C4A8619AF49505282DFF8F
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/98rOBdYvihtrhbf9Fx8vRE0WiyM.roa
Signing time: Thu 28 Sep 2023 12:45:27 +0000
ROA not before: Thu 28 Sep 2023 12:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 147.136.64.0/19 maxlen: 24
185.226.204.0/22 maxlen: 24
92.50.0.0/18 maxlen: 24
168.199.128.0/17 maxlen: 24
192.95.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 14:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:d2:9b:13:f1:c4:a8:61:9a:f4:95:05:28:2d:ff:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Sep 28 12:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7cace05d62f8a1b6b85b7fd171f2f444d168b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:66:05:58:d3:4b:cb:8e:af:b8:50:5f:e1:
a1:bc:67:0b:7b:0f:a1:d6:45:14:b0:8c:fb:75:fa:
e3:61:7a:c5:28:c9:48:32:dc:91:0c:ba:37:5f:86:
45:21:67:6e:f6:29:b2:4a:98:e5:15:b0:7e:7a:f4:
df:07:e6:d9:46:51:7d:12:27:cc:38:f2:88:f5:b5:
fc:cb:68:fa:52:bb:5d:5e:ad:87:a6:80:8f:41:53:
7d:49:75:7a:f6:1d:2e:62:89:44:29:58:35:7c:04:
5d:ae:1b:8c:0b:66:6e:37:b9:d0:58:99:22:43:68:
19:fc:7a:94:0a:20:15:c0:ea:18:22:75:cf:78:6c:
db:09:4d:88:dd:81:08:ed:6d:4f:32:cf:e5:0d:3e:
16:97:5e:e0:7b:95:29:91:ba:95:6f:8a:90:a8:7e:
76:a1:da:58:4c:0d:85:f3:b5:ae:16:4f:06:3e:23:
7a:12:1a:79:84:55:3b:b5:37:68:82:92:2a:8e:3b:
b5:c1:ef:ef:fc:63:d1:1b:9f:bc:93:44:88:85:3b:
5a:95:d8:93:87:86:cf:3b:44:07:d7:4e:b1:5e:de:
4a:9c:28:72:f9:26:85:6f:66:52:4e:50:e2:64:65:
98:5c:ae:21:d8:bb:c1:5a:27:a6:eb:e2:7f:b0:30:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:CE:05:D6:2F:8A:1B:6B:85:B7:FD:17:1F:2F:44:4D:16:8B:23
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/98rOBdYvihtrhbf9Fx8vRE0WiyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/18
147.136.64.0/19
168.199.128.0/17
185.226.204.0/22
192.95.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:07:50:5a:0c:be:f5:e8:9d:c3:9a:6d:f0:1b:4a:78:74:a0:
b2:ed:e4:44:a8:e8:bc:5f:14:de:ee:81:62:be:5d:16:7d:d2:
7e:1a:6d:26:aa:ab:e9:17:35:f0:ed:84:7a:fc:43:c0:86:b3:
3d:9e:f6:49:f0:cf:89:c8:f9:f2:ff:6f:4e:2c:76:d4:c1:91:
cc:bd:56:5d:51:ff:ae:ad:16:61:68:3d:ea:7e:68:d6:5c:6a:
f4:a2:4a:f6:6b:41:a5:fb:cb:20:4c:75:27:8b:e0:f7:22:68:
c6:4e:b1:a7:b0:fe:e5:df:fc:29:f1:44:82:aa:f3:8d:ef:a8:
bf:db:97:54:c0:0c:90:e6:d3:03:55:e0:c5:d8:13:94:d8:cf:
eb:23:53:1d:3f:5a:8d:90:af:62:d9:33:7d:fc:3a:af:d4:af:
ee:8e:e3:fc:c2:9a:7e:b9:94:22:13:8b:a4:36:68:b4:6b:b1:
ed:b0:88:96:9d:43:33:b3:7b:d8:71:4c:e8:1c:b5:00:a1:50:
2a:d6:d4:df:c2:66:87:ca:59:d3:8a:ac:7d:6e:6f:d9:ca:ed:
b6:99:30:4a:ac:59:b5:e9:a0:42:de:da:32:94:88:5e:5d:67:
34:79:c5:5f:3c:11:41:73:38:e1:ca:51:5a:ca:ae:2d:82:b3:
a3:de:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:50 2024 by rpki-client on console-ams.rpki-client.org