Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/yrqyx6sSKSZRe8anL91qoODYo0E.roa
File: yrqyx6sSKSZRe8anL91qoODYo0E.roa (raw, json)
Hash identifier: 7l0qnb2QKop5ZildAR7rkjlOa2/yppx/c+W5BTInk+4=
Subject key identifier: CA:BA:B2:C7:AB:12:29:26:51:7B:C6:A7:2F:DD:6A:A0:E0:D8:A3:41
Certificate issuer: /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial: 01856D4AD04F5157469ED481903C45AED936
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/yrqyx6sSKSZRe8anL91qoODYo0E.roa
Signing time: Sun 01 Jan 2023 12:24:57 +0000
ROA not before: Sun 01 Jan 2023 12:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42176
IP address blocks: 92.42.81.0/24 maxlen: 24
92.42.84.0/23 maxlen: 23
92.42.84.0/24 maxlen: 24
92.42.80.0/24 maxlen: 24
92.42.80.0/22 maxlen: 22
92.42.83.0/24 maxlen: 24
92.42.82.0/24 maxlen: 24
92.42.85.0/24 maxlen: 24
92.42.87.0/24 maxlen: 24
92.42.86.0/24 maxlen: 24
2a10:8e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:d0:4f:51:57:46:9e:d4:81:90:3c:45:ae:d9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Validity
Not Before: Jan 1 12:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cabab2c7ab122926517bc6a72fdd6aa0e0d8a341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:30:25:a3:5b:77:ac:76:b3:bb:25:ac:bf:
5b:31:14:37:e7:cb:38:aa:ca:cc:98:0f:b0:e8:94:
65:4b:26:95:46:19:9d:52:7c:32:9d:7b:c0:9b:24:
c7:17:7b:5b:60:dc:3d:b1:51:4e:0b:c0:ec:cc:a5:
41:eb:f7:cc:79:35:26:4a:30:82:c3:6f:ce:d5:67:
18:4c:e9:dc:ff:b2:5c:51:1e:db:a2:c0:51:1d:b6:
53:7d:0f:4e:b6:88:1e:5e:76:77:40:09:da:1a:57:
92:35:3f:2c:e3:e9:7b:e0:55:af:62:ad:de:65:bc:
4c:00:52:7d:88:9d:34:b2:fe:9c:6d:55:91:88:f4:
82:e5:03:27:c6:20:dd:63:45:82:5a:83:a1:ea:6a:
ac:c0:bb:8d:b5:53:9b:42:80:f8:5d:03:34:55:3a:
e8:b1:00:55:fe:09:ee:69:18:7d:71:29:a2:81:6a:
3a:fd:4f:23:e9:c3:01:28:0b:1f:40:29:d2:fb:90:
32:19:8a:18:26:e1:3f:95:1a:06:0f:39:ed:cf:4a:
ad:73:b7:52:85:24:00:ef:12:73:97:9d:53:e3:ab:
fc:4a:c7:b0:cb:58:85:92:00:74:31:07:bc:bc:3e:
90:8f:90:bb:2e:0b:72:ea:27:fb:43:6f:1c:ca:00:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:B2:C7:AB:12:29:26:51:7B:C6:A7:2F:DD:6A:A0:E0:D8:A3:41
X509v3 Authority Key Identifier:
keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/yrqyx6sSKSZRe8anL91qoODYo0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.80.0/21
IPv6:
2a10:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
60:74:e8:19:65:bb:aa:37:a1:a1:35:00:6a:2b:74:b5:02:a9:
2d:0e:71:9d:d0:82:de:46:c3:b1:c9:6f:d1:3a:d8:9c:8f:10:
b4:d6:60:2f:ee:83:a6:18:74:88:d1:1f:ac:bd:3e:28:cd:28:
75:12:4d:73:03:a5:e0:51:db:7d:4e:18:39:3e:8a:04:1e:6e:
5b:a5:f8:f5:e8:32:18:5c:0c:0b:86:ab:b2:ec:93:fe:1f:d9:
12:53:17:5c:8f:4e:59:bd:ca:c4:3b:ca:8c:60:b6:54:83:43:
0b:09:85:35:97:d5:dc:41:9b:9c:92:73:be:c1:7e:05:e9:b4:
b1:f8:a1:80:48:4c:45:21:53:c7:2c:d2:ff:04:3f:96:5b:87:
c9:b6:48:97:5a:a9:10:74:21:f4:76:d3:0c:58:84:a6:3a:76:
6e:92:68:2d:16:8e:13:cd:a3:a1:53:d6:82:e0:66:33:ee:08:
6b:dd:ce:24:36:5b:c5:36:28:a5:d2:13:a3:51:ab:06:89:6a:
b3:83:0c:c1:26:d7:8b:74:57:12:32:d9:68:86:ef:42:c1:f2:
d8:00:66:35:2c:7a:b6:a8:c3:38:a6:66:3e:31:b1:ce:ba:03:
1d:75:76:d8:a2:20:49:cf:5d:11:76:b2:0a:45:17:f4:86:3f:
12:2d:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org