Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/X7-vb9Z_OCHT3uWV9GHkdZMt75U.roa
File: X7-vb9Z_OCHT3uWV9GHkdZMt75U.roa (raw, json)
Hash identifier: XAR9VzXZ+7hq8alYaxTyI7BrWcZ3aLhfhdVhvmXaA0w=
Subject key identifier: 5F:BF:AF:6F:D6:7F:38:21:D3:DE:E5:95:F4:61:E4:75:93:2D:EF:95
Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial: 0189B816063CDD4650FD7E5749E5F2DFB86A
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/X7-vb9Z_OCHT3uWV9GHkdZMt75U.roa
Signing time: Wed 02 Aug 2023 21:09:58 +0000
ROA not before: Wed 02 Aug 2023 21:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198236
IP address blocks: 92.243.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 07:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b8:16:06:3c:dd:46:50:fd:7e:57:49:e5:f2:df:b8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Validity
Not Before: Aug 2 21:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fbfaf6fd67f3821d3dee595f461e475932def95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:73:f4:5c:e0:2d:e7:0d:36:3b:82:58:96:
07:8e:9d:f5:70:46:5e:07:6d:cf:3b:52:11:c4:6b:
df:f2:95:32:8c:c7:79:41:5f:c0:d9:2b:1d:a5:42:
cc:4d:85:06:55:55:68:80:91:d6:9f:54:06:d8:69:
82:94:39:c3:94:85:68:17:66:87:3d:e5:f2:34:11:
2d:27:e0:1c:dc:31:a1:22:1d:cc:4e:fb:98:fb:91:
05:e3:4e:d2:71:aa:dc:7d:26:44:46:be:10:4b:9d:
f7:c2:b3:35:68:bb:a3:29:5a:29:9b:58:df:2b:63:
de:1e:af:a0:23:50:66:c4:59:3c:6c:df:59:57:14:
cd:72:10:49:12:b5:1e:b0:56:a2:9b:8b:bd:db:29:
90:4f:16:a4:97:0e:19:d3:e5:1a:bc:a5:f8:04:a2:
8b:9d:d2:ce:2b:fe:f7:e7:2e:db:5a:5f:ad:3e:18:
b9:dc:0b:fa:a2:8e:a6:df:db:c1:6f:92:d0:db:56:
ec:51:7a:a8:84:93:7e:5a:31:b8:7a:b3:9e:46:c1:
c6:24:24:76:a1:4d:92:ff:e6:cf:e6:6a:54:f5:de:
c2:3b:8e:0f:88:12:64:8b:a7:4d:1b:f4:37:ae:49:
53:e2:0f:92:ec:72:12:38:99:38:64:7f:cb:11:d2:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BF:AF:6F:D6:7F:38:21:D3:DE:E5:95:F4:61:E4:75:93:2D:EF:95
X509v3 Authority Key Identifier:
keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/X7-vb9Z_OCHT3uWV9GHkdZMt75U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.69.0/24
Signature Algorithm: sha256WithRSAEncryption
76:47:bd:fd:5d:5b:c9:ed:ce:0f:b0:cd:27:dc:77:b5:cc:2d:
54:b3:03:b5:3c:39:74:74:e3:5d:02:b4:ea:18:b0:36:9d:75:
7b:60:71:b2:f0:18:a1:64:94:bc:22:e0:d6:f2:3a:31:d2:a5:
54:b5:ec:11:cc:b5:d8:5e:c0:c5:d6:2d:a9:a3:56:fc:e6:1e:
ed:fa:0c:2d:31:58:36:7c:66:6b:4e:c7:2e:4b:6a:57:70:6d:
93:e8:11:8f:1d:5f:d7:5d:2f:d8:36:af:0a:40:e4:66:30:28:
7d:e7:b9:6d:5a:fb:bc:f2:87:f5:c2:aa:ab:f0:42:01:b7:cf:
98:62:74:63:bd:90:50:25:45:bf:70:ed:e4:82:db:f1:26:12:
75:9e:71:2e:03:0a:d4:01:03:88:74:f0:a9:94:a7:15:d7:df:
74:dc:07:04:b1:a9:35:97:c4:f0:51:31:77:9e:61:f9:a3:90:
d2:b6:16:17:f1:8f:28:e8:35:9a:34:2e:10:96:b4:54:d7:1e:
6c:62:d5:2e:9c:29:8f:1a:c4:69:ea:a6:b1:14:7b:ea:2e:72:
29:63:84:1b:12:40:88:25:0e:18:1b:5f:4f:bb:a2:0c:4b:f9:
31:6f:c8:d5:be:6e:0e:3d:5b:74:84:80:3e:97:45:f4:eb:53:
0a:64:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:29 2024 by rpki-client on console-ams.rpki-client.org