Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/AcPWT86TyICEWiprFGWnmFchwO0.roa
File: AcPWT86TyICEWiprFGWnmFchwO0.roa (raw, json)
Hash identifier: o4/k96dGQXYEfOTV3IDi4aj0xO2HG8xP4KoaHtkOrRY=
Subject key identifier: 01:C3:D6:4F:CE:93:C8:80:84:5A:2A:6B:14:65:A7:98:57:21:C0:ED
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018E4E0AA8F2B9B05271D6EC1A17CC26BA45
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/AcPWT86TyICEWiprFGWnmFchwO0.roa
Signing time: Sun 17 Mar 2024 20:11:45 +0000
ROA not before: Sun 17 Mar 2024 20:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202973
IP address blocks: 185.106.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 07:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4e:0a:a8:f2:b9:b0:52:71:d6:ec:1a:17:cc:26:ba:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 17 20:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01c3d64fce93c880845a2a6b1465a7985721c0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:10:c6:d2:8a:3f:dc:b0:0b:ef:cb:8d:bb:2b:
a8:39:31:44:5c:df:7b:f6:d6:26:11:70:3d:c2:da:
9b:52:3c:00:16:53:f7:93:b2:0b:16:a9:d4:51:dc:
4c:f0:51:65:84:5d:26:c8:90:99:ec:54:ef:c2:f3:
34:9b:42:6c:76:12:b7:05:5e:85:a8:f3:24:79:17:
7f:d9:0b:dc:89:8f:19:50:37:f5:87:ed:0e:91:8b:
cb:20:ab:dc:64:bb:35:7a:a2:b4:fe:43:7c:60:74:
08:03:50:30:99:5d:1b:37:9d:87:9e:ea:3b:57:04:
29:72:12:61:61:c4:f2:53:93:03:22:ba:bb:76:7e:
1d:c1:7b:e2:e2:d2:aa:13:2c:4f:70:60:64:81:7d:
3b:30:40:37:41:fb:fd:39:1a:c9:5c:f1:79:3c:d0:
37:17:f5:c4:29:8b:c0:65:15:2e:bd:03:ff:5d:fb:
f7:55:1a:5b:e6:08:13:c1:ad:f6:54:e8:cc:d1:64:
a1:f4:13:b9:66:f1:77:c0:38:81:1b:49:b3:46:e8:
6d:ed:10:b1:fe:db:e7:4c:dc:48:f6:49:f4:3e:76:
f9:8a:ad:db:e0:23:ed:61:bb:5e:8f:3d:dc:08:27:
77:a1:b9:62:7e:2f:89:8a:d7:3b:27:54:e8:d0:d4:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:D6:4F:CE:93:C8:80:84:5A:2A:6B:14:65:A7:98:57:21:C0:ED
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/AcPWT86TyICEWiprFGWnmFchwO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.92.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f6:39:65:75:b6:da:dc:f6:60:13:78:25:ed:44:4a:f9:e0:
72:60:52:6b:58:13:04:b6:47:b5:04:06:01:81:ae:99:0a:4d:
76:93:26:62:85:47:26:a7:7c:a1:28:33:b3:ef:9d:1b:0d:05:
03:c5:59:6b:c3:20:92:d4:24:31:af:3b:dc:a1:cc:4f:07:5a:
f9:08:be:ba:7e:90:5d:99:1d:b8:32:41:10:63:3e:52:ab:39:
10:f5:4b:a7:fe:af:fc:0a:f8:66:e4:94:15:be:35:01:f3:00:
c6:2a:c8:1e:72:c4:60:44:73:cf:a0:82:e6:d3:d6:4b:c7:18:
67:5c:71:e1:7e:b9:2a:e3:a3:d3:6b:94:73:21:64:ca:44:84:
86:94:47:37:03:cf:63:86:1c:7e:8e:8d:26:33:66:8e:3f:09:
a1:75:cf:ae:ff:45:dc:ab:f0:1f:22:d5:e7:49:79:aa:01:da:
b6:35:5d:a8:79:63:3a:38:2e:24:d7:f0:f0:ca:ec:03:64:e7:
b3:41:d4:a5:e6:07:57:25:de:30:17:f9:4c:cf:20:49:88:ac:
ea:97:0e:4a:f6:a9:c3:e2:3d:6c:82:a9:5d:62:f2:b8:25:af:
96:6a:14:61:ca:9d:ee:0e:4e:d4:a0:19:61:dc:59:0e:4a:e6:
12:36:fb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 09:21:43 2024 by rpki-client on console-fra.rpki-client.org