Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/35uJqT2AImRSGvwEtj_fA2l2g-c.roa
File: 35uJqT2AImRSGvwEtj_fA2l2g-c.roa (raw, json)
Hash identifier: 417w3WJLOKXwXzFDwKaGhjyl8SAgtqp5UnCRfpuACvY=
Subject key identifier: DF:9B:89:A9:3D:80:22:64:52:1A:FC:04:B6:3F:DF:03:69:76:83:E7
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 018CC94CC85E6F294381870E55FFB413E9E6
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/35uJqT2AImRSGvwEtj_fA2l2g-c.roa
Signing time: Tue 02 Jan 2024 08:31:41 +0000
ROA not before: Tue 02 Jan 2024 08:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206766
IP address blocks: 92.63.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 12:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:c8:5e:6f:29:43:81:87:0e:55:ff:b4:13:e9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 2 08:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df9b89a93d802264521afc04b63fdf03697683e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:65:0b:0f:ac:4d:8f:7a:99:ab:41:25:ab:
26:5b:f4:ac:21:00:60:cc:57:78:ab:21:64:77:fe:
26:2c:88:12:57:43:1a:0b:71:5f:bb:09:93:b4:fa:
ac:11:38:40:e0:25:da:04:d0:91:af:f7:74:05:86:
57:84:41:06:58:67:c6:3c:8c:dc:a8:19:b0:aa:18:
6b:22:3d:8b:c8:e5:eb:b1:d9:d7:5f:39:99:6e:03:
62:86:90:d9:10:8f:68:49:e6:ee:23:12:e1:e6:c1:
be:da:38:e6:c4:01:ff:7e:93:e7:b9:2b:6d:5c:8d:
51:60:8e:62:a7:df:b2:9d:10:66:8a:e7:44:2f:b0:
2d:9d:d4:c5:e4:1c:96:88:06:d9:e5:54:d4:7e:af:
41:4e:6b:94:a7:0d:d1:4f:7f:7c:2c:c5:dd:f2:a8:
a5:12:7f:84:03:b8:c8:36:46:aa:7f:9b:ca:fa:b0:
1a:f9:ab:dc:5b:0c:0d:87:16:a5:e3:9d:46:c8:a4:
a5:38:76:33:c5:c2:bd:de:a6:b4:66:f4:de:2b:7d:
06:2b:81:5d:b0:56:3f:3f:3a:77:28:34:5c:71:bc:
0b:f0:12:0b:42:8e:17:9c:ee:e5:20:cc:d6:fe:06:
36:c8:fd:77:7f:2f:90:0a:3e:43:c0:53:c5:44:bf:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9B:89:A9:3D:80:22:64:52:1A:FC:04:B6:3F:DF:03:69:76:83:E7
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/35uJqT2AImRSGvwEtj_fA2l2g-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:fc:3d:23:2a:18:66:d5:e6:fa:1d:9c:ed:7f:d5:0e:00:f8:
ce:ee:57:eb:7e:43:28:c0:41:d6:db:63:ef:cf:5a:c6:18:97:
92:fe:bc:6c:a1:3d:97:07:05:42:50:d0:d5:78:f8:74:b2:76:
a6:c5:49:46:a6:ac:fd:4e:0c:f0:e4:73:0c:69:ae:3d:5f:ac:
e9:0a:ec:1d:1f:59:7a:63:1d:35:78:bf:1f:df:88:ea:fe:97:
15:c4:26:ff:b5:f7:a3:c5:1e:65:18:d4:fe:16:3a:6f:6d:4e:
08:b5:8a:97:a7:95:c4:95:4c:41:dc:90:d4:05:97:70:ac:26:
75:23:d8:59:c8:d2:06:fc:13:31:d5:5c:f4:b0:c0:47:8a:18:
1f:72:0f:db:b6:de:7c:3e:4d:dd:d7:d7:64:16:d1:7e:e5:67:
67:87:62:a4:2c:e6:16:92:13:0f:cd:b1:b0:3a:61:8d:8b:fd:
39:63:79:2c:18:83:7a:d3:6f:83:a5:6e:87:ad:a5:e6:d4:19:
db:b8:1c:f3:d0:dc:3b:d7:d6:ea:b3:5e:82:fa:4f:b5:bb:f0:
1d:7e:13:c7:a5:72:f7:36:c2:34:32:8e:b3:0b:bc:89:dd:e7:
d3:eb:ee:4d:6e:e0:74:b8:a0:5d:77:e0:22:2d:c3:90:35:c1:
d2:24:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:58 2024 by rpki-client on console-fra.rpki-client.org