Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/_IlLVmaBFN9seJJdiAWickVNaQI.roa
File: _IlLVmaBFN9seJJdiAWickVNaQI.roa (raw, json)
Hash identifier: z6i9dr3+kTYGETvEp4krp0rGP3ipOKO0tot7Gaiu9NM=
Subject key identifier: FC:89:4B:56:66:81:14:DF:6C:78:92:5D:88:05:A2:72:45:4D:69:02
Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial: 018A4A6716E10B11C926974C07589B77EB8D
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/_IlLVmaBFN9seJJdiAWickVNaQI.roa
Signing time: Thu 31 Aug 2023 07:03:04 +0000
ROA not before: Thu 31 Aug 2023 07:03:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198236
IP address blocks: 92.243.69.0/24 maxlen: 24
2a10:f6c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:67:16:e1:0b:11:c9:26:97:4c:07:58:9b:77:eb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Validity
Not Before: Aug 31 07:03:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc894b56668114df6c78925d8805a272454d6902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:ec:97:17:b7:12:8a:17:4d:72:20:c8:77:
0c:6e:ec:6b:4c:8c:af:63:d9:b2:24:60:d4:d9:67:
a5:58:81:32:0a:b9:65:73:7a:08:03:9b:f2:96:e4:
5a:9b:27:e9:7b:b5:76:53:cd:02:8c:02:85:25:29:
3b:a0:69:9b:c9:a3:c5:e6:0c:1c:b9:ad:f7:32:60:
df:9e:07:bf:18:70:2e:37:1f:ef:3a:03:39:c2:bf:
92:57:f2:dc:69:8b:ca:57:9d:02:1e:07:82:18:d7:
fd:d9:66:34:4f:b5:ba:03:ef:1a:68:a7:2a:eb:d1:
a0:62:b6:10:d0:65:11:d5:32:12:fc:0b:cc:d7:37:
91:c4:10:da:84:40:7c:3a:44:42:a0:f9:50:78:a2:
6a:a1:71:1b:af:f0:8e:59:9b:f7:53:b0:35:a9:92:
e6:c1:d4:7e:85:65:8d:67:03:3a:64:8e:84:db:e2:
8d:77:66:c3:ab:34:46:8e:72:54:12:64:c5:c8:bb:
f0:31:2b:d3:a2:21:58:f2:ab:48:1e:7f:c3:5b:60:
bb:55:02:5a:88:63:64:15:44:28:0f:44:7a:85:6d:
ed:74:9d:e5:28:b8:63:5d:ff:a3:9f:90:a5:21:e6:
93:68:5f:51:ec:b2:23:8d:9a:32:b6:2b:08:7e:16:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:4B:56:66:81:14:DF:6C:78:92:5D:88:05:A2:72:45:4D:69:02
X509v3 Authority Key Identifier:
keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/_IlLVmaBFN9seJJdiAWickVNaQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.69.0/24
IPv6:
2a10:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
58:2c:86:81:47:bb:fe:ba:05:b6:bf:ec:20:23:d3:2a:83:12:
e2:07:40:d1:33:58:6d:51:d6:47:97:64:d8:33:7e:95:53:b0:
45:90:00:00:9c:b5:5a:00:fc:df:e1:8c:0a:85:7c:c4:be:a2:
50:18:41:66:05:c2:b5:c2:ef:da:c5:70:6b:4e:3b:2b:5f:96:
8f:75:5a:52:96:7b:d9:b9:f6:0f:7d:9e:fb:e6:39:4e:52:a8:
3b:a8:1d:c7:dd:67:1f:65:3c:e6:45:59:24:7f:8a:07:ac:d2:
00:25:51:1e:9b:8b:27:a4:6b:ee:56:23:06:e0:e8:ac:91:fa:
a8:f2:56:91:90:6a:f7:a9:f3:b4:da:73:a6:6f:c1:31:b2:dd:
bb:74:66:e1:84:c9:8a:cb:cf:32:42:d6:67:be:d2:48:34:a1:
25:4e:90:02:31:2c:07:4d:ba:dc:18:91:67:d4:40:af:84:35:
0d:03:25:7a:7f:48:3d:c3:a5:90:b4:42:ad:65:72:a3:74:a1:
a9:4b:47:d0:ff:40:45:69:11:41:62:32:9e:ed:b4:2a:65:6e:
64:17:ae:88:28:b4:d4:c8:d4:29:52:c4:52:d1:92:7e:f2:77:
3f:26:f6:59:da:1b:f1:d0:bb:af:29:87:f9:41:5e:36:9f:bc:
a5:45:da:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:37 2024 by rpki-client on console-ams.rpki-client.org