Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/2Ieyuc9KZ6hDpa09zKo2Kw8shjA.roa
File: 2Ieyuc9KZ6hDpa09zKo2Kw8shjA.roa (raw, json)
Hash identifier: S50ecQPX5KyLq3o7VHAqTHCXOD4qFcLKL+8/eLnKd40=
Subject key identifier: D8:87:B2:B9:CF:4A:67:A8:43:A5:AD:3D:CC:AA:36:2B:0F:2C:86:30
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01880FDE564AEB641E7425AD97E03B7C2A95
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/2Ieyuc9KZ6hDpa09zKo2Kw8shjA.roa
Signing time: Fri 12 May 2023 12:10:09 +0000
ROA not before: Fri 12 May 2023 12:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 92.51.3.0/24 maxlen: 24
92.51.20.0/24 maxlen: 24
92.51.22.0/24 maxlen: 24
92.51.23.0/24 maxlen: 24
92.51.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:de:56:4a:eb:64:1e:74:25:ad:97:e0:3b:7c:2a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: May 12 12:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d887b2b9cf4a67a843a5ad3dccaa362b0f2c8630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:3b:b4:ca:02:19:89:c7:d8:19:b9:3a:47:
32:34:4d:99:32:88:c1:54:fa:0d:e4:1d:dd:25:7c:
f4:0e:37:16:22:13:e0:4d:8c:a4:7e:2a:69:7b:11:
15:07:02:79:83:32:67:5f:ad:28:91:5b:cb:61:0c:
7a:9e:2d:96:1a:f9:de:63:80:42:22:b6:79:00:20:
5d:b0:c0:d8:a9:90:06:c7:81:af:6c:71:e2:9c:db:
54:ae:26:88:21:1b:3e:b9:e2:21:93:55:0d:04:42:
0c:5a:e0:e1:f7:e0:32:04:95:5b:b0:b0:f1:ad:4d:
2d:a2:df:3a:57:28:2c:d2:2b:bf:3d:ad:2d:36:4d:
af:b9:f4:0b:5e:7a:60:ef:c4:d3:b8:1e:73:17:66:
ae:68:cc:3a:40:b4:1c:f2:f4:82:12:4e:a1:e3:d3:
57:3a:b5:32:c9:75:a1:cc:6a:17:f3:bb:13:42:7f:
92:57:d4:f1:e2:3c:8a:bf:14:69:df:17:94:10:81:
e7:cd:cc:98:7e:f9:63:5b:e8:c0:12:cc:22:d0:b4:
ca:d9:f0:b3:ad:c9:08:71:99:ef:91:ec:8e:f4:65:
43:7d:54:fe:96:ba:ea:ba:47:e7:c3:1d:8d:ad:1f:
00:c5:17:82:0a:cb:a7:ce:a6:51:84:61:83:72:d5:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:87:B2:B9:CF:4A:67:A8:43:A5:AD:3D:CC:AA:36:2B:0F:2C:86:30
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/2Ieyuc9KZ6hDpa09zKo2Kw8shjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.3.0/24
92.51.20.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:74:ec:d9:86:b3:3d:cf:97:b1:ea:40:5e:cf:6d:11:5f:db:
92:90:9d:b3:f8:96:41:c1:a0:0a:ab:16:50:49:d9:1d:2c:62:
cd:19:fa:c7:4b:10:d7:8e:3a:1e:7e:e7:5f:64:39:6c:52:d4:
6d:9d:3b:e8:d2:27:24:66:4d:1a:b4:49:06:02:6f:45:c2:1a:
11:66:e9:d5:6c:91:6d:ea:db:a2:e5:e8:7d:c3:ef:41:66:96:
5d:93:d7:f6:b0:7f:6d:db:18:75:a3:25:51:84:32:0b:af:45:
5d:ed:50:74:75:50:83:ab:33:c4:e7:5b:51:30:73:bf:0e:85:
b2:68:0e:5a:11:2d:a3:57:7d:cd:96:f3:6e:56:4c:0f:25:03:
11:9c:13:9a:d0:92:54:f8:75:92:87:d4:ea:57:36:a9:31:d9:
de:48:7a:18:17:22:10:9b:aa:3a:18:63:92:79:36:b5:65:55:
00:4d:b5:81:cf:7c:7a:24:b9:ef:91:48:9f:dd:29:5d:9c:42:
45:fc:41:36:58:bf:d9:b2:04:b4:b7:aa:82:f8:45:a7:50:7e:
74:6e:b2:d6:b4:08:3d:04:0e:60:04:9a:72:f6:53:f3:cb:73:
a2:93:2e:4c:46:03:a5:f1:a0:b8:0b:4b:e8:9c:fb:fc:c7:02:
78:87:4b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org