Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/u6jCEcbRV7_Eg1rLqxQzE9AO9DY.roa
File: u6jCEcbRV7_Eg1rLqxQzE9AO9DY.roa (raw, json)
Hash identifier: ItNrihVtKWKRHHH62i7RGYYudci4kDwOV8ohA+Ys/RI=
Subject key identifier: BB:A8:C2:11:C6:D1:57:BF:C4:83:5A:CB:AB:14:33:13:D0:0E:F4:36
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 018AD9AD4A09E3D589F608070688881744A3
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/u6jCEcbRV7_Eg1rLqxQzE9AO9DY.roa
Signing time: Thu 28 Sep 2023 02:45:27 +0000
ROA not before: Thu 28 Sep 2023 02:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 147.136.64.0/19 maxlen: 24
92.50.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 12:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:ad:4a:09:e3:d5:89:f6:08:07:06:88:88:17:44:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Sep 28 02:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bba8c211c6d157bfc4835acbab143313d00ef436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:33:d7:b4:63:2f:58:d0:a9:3e:e8:b9:6c:
b4:38:9b:5d:48:41:83:8c:4d:60:02:c8:24:d6:b7:
20:7c:f2:6b:42:91:14:1f:db:3d:b0:cb:73:8d:8d:
f1:07:fb:10:bd:f3:66:56:18:67:6b:bd:81:13:aa:
9b:40:4f:7a:30:6e:9e:5e:3b:18:fc:cf:58:9f:fe:
80:f3:71:5f:d4:7d:bd:80:f1:5a:46:b8:dc:55:85:
3b:ee:28:a6:a3:b7:e3:0c:b7:e4:ef:98:fd:ec:13:
16:de:ef:62:4d:20:1f:ee:cf:8f:2a:c6:27:4b:92:
d3:ec:bb:74:3d:e8:0f:e6:90:94:47:af:72:e1:6f:
fe:5c:05:e1:44:f9:79:b5:db:d7:19:2c:9c:f3:e7:
ad:e9:a1:95:9f:97:b5:4c:4a:2a:95:65:f7:7a:ce:
f0:02:95:99:89:56:ee:af:00:d4:54:fe:4b:5a:e6:
7d:59:1d:4c:63:35:4e:83:cc:0d:75:d0:be:c3:37:
6a:46:cc:50:8e:7b:8e:9d:ae:e2:af:ad:d0:8e:9e:
a0:98:5f:1d:e1:ec:e0:e2:c1:dd:0b:e2:dc:cb:68:
7c:43:61:72:66:19:e8:f4:40:87:ad:b8:46:f2:02:
a9:81:82:17:e9:9e:7b:c0:2d:19:ff:e7:7a:38:85:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A8:C2:11:C6:D1:57:BF:C4:83:5A:CB:AB:14:33:13:D0:0E:F4:36
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/u6jCEcbRV7_Eg1rLqxQzE9AO9DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/18
147.136.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:63:24:d5:d9:cb:68:2b:5c:11:3f:92:f3:71:f2:05:fe:d3:
55:e2:17:7e:3e:53:35:93:67:91:04:06:6b:dd:5a:b6:65:8a:
71:c4:d6:22:20:46:e1:2f:35:5e:0e:48:a4:0a:b7:75:2b:54:
4a:1b:33:dd:bf:d6:23:0a:80:da:c3:4f:f0:73:d7:7c:a1:a1:
13:a4:9e:7b:90:a3:56:a7:30:f8:0d:87:ec:3d:25:39:e1:ce:
e9:37:2e:9d:4a:e2:cb:88:45:d1:ca:4e:69:03:0f:58:2c:83:
08:81:f5:a8:6d:b7:b8:40:b4:65:c4:07:28:39:17:6a:04:28:
e6:d9:d4:cd:86:86:79:98:bc:e0:08:3f:e4:2c:89:64:a6:1d:
d8:3d:f9:7a:3f:6d:2f:eb:2e:c1:5e:ee:8b:fe:41:52:6c:85:
97:58:57:52:da:ff:8b:88:78:1c:ba:0c:23:5e:5c:94:a8:d6:
ed:b7:84:b8:fd:14:9a:19:fe:9d:6d:79:b9:a4:97:ea:3f:74:
4c:0a:20:c8:6b:86:25:bf:18:a3:a0:63:d9:79:c8:7f:6e:92:
40:9c:45:4c:d3:a6:e8:53:9f:e4:4f:f8:2c:70:c7:34:62:ec:
3f:f3:4d:8d:72:df:1f:58:f9:c4:ef:f9:e3:06:9c:80:68:5b:
df:a1:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:50 2024 by rpki-client on console-fra.rpki-client.org