Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/bngJtuDHX8RcNxXEzbxOCFZUxJk.roa
File: bngJtuDHX8RcNxXEzbxOCFZUxJk.roa (raw, json)
Hash identifier: EqlcBrSuStCw77a7HvHooUGjvyM5dV6XvQdAbdpFOhk=
Subject key identifier: 6E:78:09:B6:E0:C7:5F:C4:5C:37:15:C4:CD:BC:4E:08:56:54:C4:99
Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial: 01856E2FA70855BB82179E9E2A66A60F4975
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/bngJtuDHX8RcNxXEzbxOCFZUxJk.roa
Signing time: Sun 01 Jan 2023 16:34:54 +0000
ROA not before: Sun 01 Jan 2023 16:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31127
IP address blocks: 92.245.192.0/19 maxlen: 20
185.22.176.0/22 maxlen: 23
88.80.224.0/19 maxlen: 20
217.144.16.0/20 maxlen: 21
2a01:108::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:a7:08:55:bb:82:17:9e:9e:2a:66:a6:0f:49:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Validity
Not Before: Jan 1 16:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e7809b6e0c75fc45c3715c4cdbc4e085654c499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:30:80:cd:ae:77:ab:81:f8:ae:73:d0:9f:3d:
23:fa:14:4c:10:8b:24:a2:51:bf:82:45:97:21:42:
00:38:6a:d5:60:9f:61:b3:69:b7:79:51:23:59:d4:
4d:6e:0b:6e:52:5f:7a:67:04:bf:56:71:db:a4:6b:
49:19:38:1d:90:98:1a:d3:32:0f:d8:b7:11:c1:44:
a6:94:53:2c:95:d7:b3:21:e0:5f:29:1e:c0:bb:d0:
5e:82:a2:91:a4:38:7f:f1:dd:eb:04:dc:68:aa:cf:
e5:f6:f4:0a:c7:7b:f1:b2:1b:35:ab:21:e7:7c:ad:
f0:db:e4:83:ea:1b:81:f3:16:e3:f3:23:36:dc:97:
13:dc:dd:8b:ff:ee:39:86:43:b8:10:29:fe:2c:b2:
ca:f2:fd:e8:1b:df:76:b3:18:ca:97:dd:14:34:e0:
f7:44:15:6d:da:d0:33:7c:af:22:b1:c0:06:8c:49:
ff:85:f3:f6:0c:eb:95:cb:bf:d7:7b:9e:2c:2d:ba:
d3:2c:96:0b:17:d1:1d:ab:2c:bc:e5:94:d7:47:66:
b4:51:37:0f:b1:9d:3a:34:1f:6d:61:6a:b8:e8:3d:
ea:e3:7e:5e:85:1d:ab:29:32:70:07:8f:e5:d9:18:
1c:e7:de:d3:2c:49:7c:23:42:9b:1e:ed:3b:b3:1f:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:09:B6:E0:C7:5F:C4:5C:37:15:C4:CD:BC:4E:08:56:54:C4:99
X509v3 Authority Key Identifier:
keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/bngJtuDHX8RcNxXEzbxOCFZUxJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.224.0/19
92.245.192.0/19
185.22.176.0/22
217.144.16.0/20
IPv6:
2a01:108::/32
Signature Algorithm: sha256WithRSAEncryption
42:5f:9a:af:36:4e:6c:e9:e8:35:26:cb:b2:5b:aa:87:1c:88:
2f:ca:be:3c:ca:ba:09:55:60:55:6a:2c:95:30:35:44:41:a5:
72:6e:5b:97:66:bd:98:3f:3b:4e:db:c4:e6:16:e5:00:c2:e8:
80:54:2c:ca:09:24:a8:0b:25:5b:e1:77:0b:29:05:e8:a9:a2:
40:4f:4b:34:e2:59:d7:79:9d:88:a9:29:5b:53:e3:ad:1b:57:
d8:06:df:a2:ee:20:9b:a9:ff:1a:bf:61:95:68:64:2f:fc:85:
70:e8:09:3f:b5:93:d7:29:bc:1c:40:a0:4e:58:63:5d:b8:5c:
f7:7f:ac:ea:12:9d:ba:fe:23:14:fc:e8:84:62:1c:2b:36:45:
a7:cb:20:d2:6b:f5:51:d2:7e:28:af:b2:a4:6c:03:61:e4:a3:
7b:3a:79:3c:32:3c:f2:7c:2c:c2:82:68:e7:f5:15:e9:36:93:
33:6e:00:1c:2f:0d:5f:e8:50:c1:16:8c:5c:46:ad:2e:bd:52:
aa:d2:50:7e:4f:7e:a6:d7:06:cb:c0:fa:4c:6f:ab:3e:12:2d:
ac:a8:6b:87:db:ec:bd:8d:32:4e:0c:e5:f1:6b:16:cf:df:b9:
80:3d:03:bd:58:97:65:17:5f:a3:0e:12:ea:27:8c:1c:72:82:
80:15:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-fra.rpki-client.org