Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/M8AEr3avuBnsKO4wdKOU8asJC_g.roa
File: M8AEr3avuBnsKO4wdKOU8asJC_g.roa (raw, json)
Hash identifier: KslCkhlOzqGa2ab3pVQDSQWqZ+nZB6ZD2N5GeGZ0mYk=
Subject key identifier: 33:C0:04:AF:76:AF:B8:19:EC:28:EE:30:74:A3:94:F1:AB:09:0B:F8
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019122F62EB25925C6939314D796C6C537FB
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/M8AEr3avuBnsKO4wdKOU8asJC_g.roa
Signing time: Mon 05 Aug 2024 14:34:04 +0000
ROA not before: Mon 05 Aug 2024 14:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214417
IP address blocks: 92.42.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 07:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:f6:2e:b2:59:25:c6:93:93:14:d7:96:c6:c5:37:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 5 14:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33c004af76afb819ec28ee3074a394f1ab090bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:0e:ea:c8:5a:84:91:dc:98:db:da:a5:79:
95:11:5a:59:c7:10:7a:47:e5:d4:ba:67:11:75:2f:
72:28:82:b9:c1:c5:86:5a:99:56:60:ca:36:64:72:
ac:d5:7c:ef:d0:36:6e:68:d2:1b:2b:5e:ce:da:fa:
d8:04:4f:14:a5:e7:af:96:30:97:4c:12:b0:44:20:
40:51:7e:a5:0a:ce:01:19:74:a4:28:bd:56:d9:29:
1a:91:52:f7:e2:bc:37:b7:df:74:78:81:5e:5e:44:
66:41:71:bf:61:07:d2:43:04:66:59:3a:de:da:63:
72:b0:36:00:f3:fa:ac:99:35:09:45:c3:23:11:75:
f2:88:51:65:f2:39:fe:8f:d8:51:2b:24:cb:04:4d:
0c:93:2e:60:ae:36:e8:4e:82:46:b2:7b:3b:b1:25:
4c:62:49:45:56:3e:4d:39:56:df:1c:e1:9d:68:53:
5a:67:c5:0f:e2:00:85:3d:4e:f6:24:18:3e:cf:75:
00:80:0e:da:f4:0c:2b:9d:a1:2c:06:f8:f7:a2:1e:
47:98:27:82:b4:cd:64:b6:06:66:a6:31:81:5c:22:
9d:5c:6a:7b:c2:b4:db:57:aa:bb:93:e1:ec:18:ae:
9f:f8:7a:f3:5f:fa:5f:7f:af:73:7f:36:36:95:8c:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:04:AF:76:AF:B8:19:EC:28:EE:30:74:A3:94:F1:AB:09:0B:F8
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/M8AEr3avuBnsKO4wdKOU8asJC_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
99:17:94:e2:f9:37:13:05:35:c1:b2:45:5d:fc:d3:6c:09:93:
cc:53:5a:f8:43:cc:32:a0:b8:fc:79:9b:e1:4d:ce:b8:c9:42:
cd:4f:61:c9:73:24:36:93:6e:96:54:73:22:b5:78:74:5e:47:
e7:bc:cf:fd:3d:b5:0a:d6:1f:94:77:40:c2:e2:83:dc:74:ee:
86:d1:33:4f:e4:16:9a:a8:47:14:72:6d:6d:e7:16:0e:4e:7b:
2f:69:04:43:a4:b7:20:0b:f0:93:22:13:2d:5e:6e:f5:54:54:
36:75:31:63:b6:dd:94:48:40:f3:60:62:2e:b1:ed:02:c1:d9:
84:5a:8d:d7:42:1c:35:2c:a1:79:26:2d:13:7b:cc:c2:dd:d2:
43:90:04:ec:08:07:8c:62:0f:a6:48:56:d8:84:d7:e1:90:ae:
05:b7:10:13:41:b6:07:e7:96:da:00:39:ec:c1:d6:6c:e4:b8:
76:0a:cb:1e:1d:43:8a:a4:c4:2a:eb:2b:3e:af:e5:ca:ca:5e:
43:9f:48:f6:17:81:11:63:2d:27:c4:7d:c7:fe:c8:66:8d:33:
1a:a0:27:bc:4f:fd:e0:b3:71:24:b5:92:b9:c9:d5:3c:22:0f:
b3:20:c2:1f:10:fd:5c:68:69:da:f4:33:84:ee:c8:6c:d2:e9:
6b:af:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 10:08:30 2024 by rpki-client on console-fra.rpki-client.org