Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/65LT06N0wN3eNynX3q-Hge9zs74.roa
File: 65LT06N0wN3eNynX3q-Hge9zs74.roa (raw, json)
Hash identifier: ySBHGw6lt8/Q6nla8mevedCW2Caz0ACFxB4PYr7UDz4=
Subject key identifier: EB:92:D3:D3:A3:74:C0:DD:DE:37:29:D7:DE:AF:87:81:EF:73:B3:BE
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0185E9A6FDA1DC3B1BC729011CC38A62EDDB
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/65LT06N0wN3eNynX3q-Hge9zs74.roa
Signing time: Wed 25 Jan 2023 15:58:33 +0000
ROA not before: Wed 25 Jan 2023 15:58:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1828
IP address blocks: 185.92.120.0/24 maxlen: 24
185.92.123.0/24 maxlen: 24
185.92.121.0/24 maxlen: 24
185.92.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 17:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:a6:fd:a1:dc:3b:1b:c7:29:01:1c:c3:8a:62:ed:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 25 15:58:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb92d3d3a374c0ddde3729d7deaf8781ef73b3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:8e:19:c5:51:5d:1b:27:93:e5:a0:f8:90:
a2:36:d9:76:76:6b:cd:2d:25:39:07:5d:6a:e4:fb:
14:44:f5:96:41:2a:74:74:ae:44:96:45:a7:61:e2:
24:d3:69:bb:80:56:cd:5c:79:40:05:8d:d6:dd:6c:
d7:b2:cf:05:43:a7:ad:61:d7:2b:df:68:32:ac:45:
29:cc:04:47:bf:ac:f7:95:dd:10:30:f2:e1:10:55:
7e:0f:7b:71:53:e0:55:10:a2:59:8d:91:ac:7f:83:
91:d3:17:ab:3e:09:af:99:5d:63:4a:08:7b:a2:48:
0b:dd:d9:d5:c3:f2:74:1f:a9:b8:f1:b3:bf:86:49:
6a:b5:92:5d:65:78:49:e3:98:30:bd:c6:e5:a5:2b:
36:8d:a4:4f:53:74:30:84:c6:50:54:8c:5c:9a:cb:
a3:07:50:b5:dc:a2:02:f8:9b:6c:9c:63:bc:fc:ca:
a6:24:4a:67:8d:1f:1d:4f:49:2d:31:ea:f9:e9:bf:
08:c4:f7:1e:c2:0b:2a:88:e3:39:db:71:19:ec:15:
69:8a:4f:bf:8f:01:4f:35:33:9a:4b:e4:aa:9a:04:
54:5f:16:53:0e:a2:0b:3d:60:24:d0:c8:7e:04:08:
79:db:e5:30:51:5b:20:26:70:37:81:72:58:01:46:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:D3:D3:A3:74:C0:DD:DE:37:29:D7:DE:AF:87:81:EF:73:B3:BE
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/65LT06N0wN3eNynX3q-Hge9zs74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:13:74:d5:f5:1c:e5:4e:20:85:1f:8f:84:cf:11:15:ea:a3:
63:72:77:ae:1f:22:27:d3:64:b3:c6:7a:05:72:2c:e0:5d:b5:
15:2f:6a:d4:c2:bb:22:c6:ea:c1:2f:de:98:be:9e:6b:47:65:
b3:49:3b:d7:e4:ff:82:ae:31:89:89:b4:5a:b5:a1:e6:9c:1a:
52:60:9d:b4:6a:40:4e:55:15:b2:9b:e8:14:0d:b5:5a:5e:47:
9a:84:13:4a:dc:4d:49:fa:ae:92:4d:02:48:60:71:83:ed:a8:
c3:3c:67:51:f5:25:0c:a9:ee:d6:fe:5d:56:0e:99:e1:0f:a9:
a0:51:b9:bf:0f:3c:a4:45:98:52:11:91:92:41:52:f7:bc:53:
ab:cb:32:86:4f:98:a1:bc:e1:7d:22:f4:28:8a:a6:d0:75:89:
49:fa:cd:87:00:5c:48:69:73:6d:1f:96:8f:f2:40:e2:0d:99:
53:4f:6b:a0:b2:dd:7b:1e:c0:dd:13:64:9b:03:52:44:95:26:
31:df:d2:c3:0b:82:65:f4:35:8a:3e:29:26:96:bb:86:54:b7:
bb:aa:33:77:ba:b5:c5:a1:ca:b5:10:c5:3f:bd:ef:3e:e6:3c:
b3:93:8c:b6:3b:70:19:9f:97:ed:d5:a6:db:1a:33:3d:e9:6e:
76:7f:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:02 2024 by rpki-client on console-ams.rpki-client.org