Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/x61vNYiZZ5YfZLd2qRFCRhH9ZnU.roa
File: x61vNYiZZ5YfZLd2qRFCRhH9ZnU.roa (raw, json)
Hash identifier: BfX9JEf23wVqydxAx/jj0Fa4dZ5NOkq0ttrVCUTek/Q=
Subject key identifier: C7:AD:6F:35:88:99:67:96:1F:64:B7:76:A9:11:42:46:11:FD:66:75
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E7903718C8FA3A01185E350CB679320
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/x61vNYiZZ5YfZLd2qRFCRhH9ZnU.roa
Signing time: Sun 01 Jan 2023 17:55:02 +0000
ROA not before: Sun 01 Jan 2023 17:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6315
IP address blocks: 185.127.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:03:71:8c:8f:a3:a0:11:85:e3:50:cb:67:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7ad6f35889967961f64b776a911424611fd6675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:6c:14:79:34:a4:4c:26:b1:f8:3d:20:6b:
ef:06:b1:93:d2:03:e8:35:b5:3b:51:ce:94:1c:17:
68:7f:9d:c6:c9:68:40:3c:82:83:97:87:1a:2b:16:
8d:db:4a:21:8c:46:22:b4:4e:53:e6:fa:5b:71:f8:
6a:61:15:b8:9a:53:1a:31:e5:c6:d2:c7:95:a0:e8:
47:71:5f:b7:78:2a:89:07:7d:6d:27:5f:47:c9:e9:
3a:2a:c9:39:71:0c:e4:5a:56:d3:26:3f:e6:c3:27:
13:02:07:88:b4:5a:1e:8e:e8:6c:04:9a:32:aa:9b:
4c:fa:70:6b:e3:22:b3:e1:12:55:cd:b1:13:fd:eb:
18:be:22:f0:42:8c:31:77:de:f1:73:f3:f5:f0:6c:
7d:9a:4f:31:05:30:ae:78:20:c1:0d:53:73:63:61:
26:d3:8c:fa:3c:73:35:de:4c:a7:26:b5:45:28:04:
76:0d:d4:62:f3:80:c5:80:4b:22:92:02:c3:fb:d4:
92:2e:02:a8:cf:58:f6:8d:e7:12:8b:0c:b6:85:6b:
44:4f:64:15:c7:b8:ea:bd:fa:a8:8c:bc:04:ba:51:
ef:81:d3:e5:6b:48:64:b4:5b:a9:09:6f:89:f6:3b:
ec:fe:33:88:29:de:79:59:fe:7f:5e:64:c3:bf:dc:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:6F:35:88:99:67:96:1F:64:B7:76:A9:11:42:46:11:FD:66:75
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/x61vNYiZZ5YfZLd2qRFCRhH9ZnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.92.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a5:e8:63:17:58:4b:5c:f8:8d:a0:2e:51:07:04:3a:f8:4d:
d8:dc:f4:c6:41:c1:f2:f5:51:df:ae:b9:7a:63:52:3c:57:6c:
2b:b4:fb:6a:e1:ad:8a:92:31:4b:7b:7b:de:91:69:03:6e:05:
60:5c:c6:d0:49:5c:97:46:91:19:49:aa:0e:48:43:b9:09:dc:
66:a2:7f:8c:09:55:c4:90:85:51:6b:fe:15:88:98:b0:6e:76:
d5:00:9e:89:19:bd:db:38:21:13:6c:13:44:ff:99:6a:e3:b0:
04:9a:24:bf:fd:b1:9f:96:b9:06:4d:1b:b4:85:eb:c2:e5:b8:
de:b1:0c:1a:7e:d5:2e:be:09:91:6b:42:19:6e:1a:40:22:b2:
7c:70:7b:4a:77:5f:f4:41:b7:08:0c:3e:b4:e9:7b:b4:1e:63:
94:09:d3:1d:74:0f:6d:83:ac:49:33:e3:47:4f:a6:f7:1f:7e:
2c:35:71:2e:38:f6:7b:51:0e:e0:dc:5e:37:e2:41:0d:34:77:
90:9c:92:3f:df:e1:dd:a2:47:27:2d:bd:f9:3f:1f:ca:10:39:
08:7b:95:b9:e8:74:01:75:69:00:32:4c:17:f3:f1:08:c5:f6:
58:55:0e:e8:1f:d0:aa:2e:42:dd:5e:5f:6b:b8:1b:0c:bc:23:
e5:c7:7c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:41 2024 by rpki-client on console-ams.rpki-client.org