Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rSjgAq-wILT9SsJHk8ixoLSWPy4.roa
File: rSjgAq-wILT9SsJHk8ixoLSWPy4.roa (raw, json)
Hash identifier: guNLQHG9S/vXmkbqnYUrAX4x2DQIriCPD+Wd+/VmIGk=
Subject key identifier: AD:28:E0:02:AF:B0:20:B4:FD:4A:C2:47:93:C8:B1:A0:B4:96:3F:2E
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01856ED4CB9EA48AE6ECC8E1EF1A588E5477
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rSjgAq-wILT9SsJHk8ixoLSWPy4.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 92.50.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cb:9e:a4:8a:e6:ec:c8:e1:ef:1a:58:8e:54:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad28e002afb020b4fd4ac24793c8b1a0b4963f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:3f:8c:4a:7f:8f:35:62:7f:fb:e1:56:1c:
8a:cc:c1:ef:59:29:82:d2:9d:38:82:09:61:51:21:
2b:69:a9:f0:01:17:a1:ca:96:bd:62:de:78:9e:c7:
72:e8:dd:78:60:8c:07:0a:a6:e0:1d:96:7e:5a:dd:
49:1e:23:6e:f2:f0:c7:56:d4:ab:5c:10:27:92:83:
73:09:ec:d6:48:72:bf:b7:e9:8e:27:79:98:f1:46:
2d:89:e6:8f:20:29:e1:a9:b1:ee:1d:51:22:5b:d4:
16:ba:4c:3f:30:a4:00:60:9a:b5:17:fa:f5:83:d9:
62:39:d9:c5:89:a6:35:48:60:47:75:e3:cc:56:47:
0f:db:dc:70:ca:f5:0a:83:af:96:36:9f:7a:0a:71:
07:6c:f7:b7:85:e6:82:25:3e:9c:eb:17:35:69:bb:
0e:ff:93:42:c9:cb:74:d1:df:da:cc:98:1c:9c:61:
d7:17:00:62:3e:46:d7:97:0d:ea:e4:2a:e7:d7:05:
14:13:b3:80:d7:06:c9:73:e7:e0:86:df:9f:0e:da:
67:a0:84:3d:62:07:c3:d8:c5:22:b6:da:d0:de:db:
62:36:72:40:1a:61:12:f6:86:e2:19:f6:a6:a0:5e:
e5:3a:18:bd:0b:a8:d7:30:a8:c3:ea:06:89:98:d4:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:E0:02:AF:B0:20:B4:FD:4A:C2:47:93:C8:B1:A0:B4:96:3F:2E
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rSjgAq-wILT9SsJHk8ixoLSWPy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:f5:8d:86:5c:20:08:cf:5b:5e:34:31:ee:b8:31:0b:b5:f0:
24:a1:a4:ef:0c:de:bd:dd:04:20:79:10:fe:69:8d:c7:28:bf:
fd:90:64:98:f6:04:dd:02:e2:5c:f3:a7:6b:bb:38:d9:a7:72:
6a:4d:65:db:4b:24:9b:b0:58:a6:5e:29:ba:fd:37:f3:24:91:
da:33:29:51:db:ff:be:00:69:14:d6:58:43:bf:3b:7a:bd:3a:
6b:67:24:87:42:1b:94:97:65:ef:de:48:c1:74:df:55:70:72:
0c:c9:94:b6:67:d3:ac:51:8f:d7:0a:65:da:4c:12:de:ca:5c:
6f:f9:01:ed:9e:78:53:da:17:f6:1b:1d:5b:34:02:2c:5a:2c:
98:9c:c0:85:d2:41:4c:d0:6c:9b:88:ca:19:d8:67:39:7b:04:
4c:68:bc:94:49:96:5d:0d:ba:45:5a:00:36:85:39:d8:0f:60:
2b:51:5b:4c:db:3d:6b:bf:2e:ce:bc:4e:c8:24:9f:ea:38:77:
2b:b8:98:7b:6a:4e:14:fc:b8:27:65:6c:5a:ae:56:ba:d9:81:
d3:9c:b3:47:ed:9f:1c:f4:d9:00:aa:cb:a1:79:f1:11:2d:76:
a2:bf:47:ad:aa:52:63:06:65:e7:13:94:dc:cd:f9:00:b8:c6:
85:dc:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org