Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/92vzbX_E_XS8iXtbG6yRS9ShLq8.roa
File: 92vzbX_E_XS8iXtbG6yRS9ShLq8.roa (raw, json)
Hash identifier: mA1KE+uAguVTk+NgBcfJZZ1glqBptg9GYoP+NVYR5eA=
Subject key identifier: F7:6B:F3:6D:7F:C4:FD:74:BC:89:7B:5B:1B:AC:91:4B:D4:A1:2E:AF
Certificate issuer: /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Certificate serial: 018CC5000695984939E979D62810D2FA0495
Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/92vzbX_E_XS8iXtbG6yRS9ShLq8.roa
Signing time: Mon 01 Jan 2024 12:29:22 +0000
ROA not before: Mon 01 Jan 2024 12:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197515
IP address blocks: 185.195.192.0/22 maxlen: 24
2a13:3900::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Feb 2024 13:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:06:95:98:49:39:e9:79:d6:28:10:d2:fa:04:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Validity
Not Before: Jan 1 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f76bf36d7fc4fd74bc897b5b1bac914bd4a12eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:a6:ce:c2:1c:50:9d:4f:d7:98:ca:46:c5:
58:3a:6a:39:4c:4c:1d:cb:7d:f8:7a:02:cf:4d:80:
19:71:f9:25:e6:51:d6:f8:3e:b6:30:7d:30:ab:86:
84:9e:a0:32:5b:b5:f0:6b:8d:5c:dd:75:ce:21:b0:
a3:24:74:5a:af:9a:2b:96:26:48:8a:1a:1b:e0:3d:
be:19:d0:f0:57:07:fb:02:e4:ee:f5:2c:3d:20:78:
d9:3e:88:56:6f:9b:44:73:72:5e:e4:9c:e5:21:ea:
e2:7b:b2:7e:90:75:e2:d0:27:ca:8b:31:08:95:a1:
d4:e6:b9:43:f6:39:75:9d:1a:49:01:eb:92:d9:ef:
6c:05:35:1a:40:36:f0:98:8b:86:4f:3f:45:c8:72:
f2:17:cd:f6:ac:d1:e4:9b:8f:3d:57:16:8e:d7:a5:
79:01:84:ac:c7:bb:59:2d:6a:47:fe:ef:fd:9f:6b:
ac:98:2d:34:c7:f0:04:3e:f1:d8:fd:73:9b:f9:f3:
e3:8e:30:37:c2:7e:b8:2a:43:3f:dd:be:80:ef:de:
ea:82:c9:96:bc:ca:2f:4a:2a:0c:bf:a5:e7:7b:5c:
9f:82:51:4b:6a:b6:46:26:72:a9:7e:e7:97:29:f2:
40:41:05:70:c8:3f:df:77:a0:0e:0d:ad:f5:f6:cc:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:F3:6D:7F:C4:FD:74:BC:89:7B:5B:1B:AC:91:4B:D4:A1:2E:AF
X509v3 Authority Key Identifier:
keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/92vzbX_E_XS8iXtbG6yRS9ShLq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.192.0/22
IPv6:
2a13:3900::/29
Signature Algorithm: sha256WithRSAEncryption
4a:9e:61:0e:b3:d2:2a:58:09:2c:6d:9d:ad:f9:89:79:4f:3f:
29:a0:21:47:3f:42:38:51:a6:b5:b1:83:54:3d:b0:9e:6a:53:
c2:03:8f:df:fb:b9:ec:6c:1d:b2:5d:0a:57:dd:a0:a0:ea:63:
8c:56:42:09:57:02:18:a4:fe:bd:4e:e0:8b:5a:b2:b0:d9:d5:
be:51:88:d9:cc:cd:48:15:ef:2a:f5:f1:b8:33:5c:83:62:1b:
71:f3:80:0a:1d:f0:0e:e5:10:be:b1:a1:62:99:08:66:c7:4d:
db:31:aa:4b:7f:5d:f0:c9:78:d0:7b:f0:dc:f4:83:e5:b3:cb:
7f:fc:0d:33:45:f3:65:01:73:a0:ec:79:6a:65:4a:2c:b5:c2:
92:eb:db:17:71:9a:7e:6e:23:4b:ad:98:8b:6e:9e:47:72:42:
13:73:7f:ee:a7:b3:10:4d:74:da:17:25:7f:90:95:a2:ec:9d:
24:52:b1:0b:aa:70:f8:ba:6f:38:e7:d0:ab:84:73:68:77:08:
99:07:42:f8:04:2e:57:c8:16:a9:27:a3:ee:af:99:fb:d2:47:
99:fa:29:3e:b2:1f:4e:9f:b2:4e:91:34:d4:cf:c6:83:ba:84:
b5:55:99:27:89:69:63:fe:b7:6d:66:63:02:1f:fa:83:f3:c0:
09:c8:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org