Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/Cobgh31dSmzB77t5-dEi5g23Trg.roa
File: Cobgh31dSmzB77t5-dEi5g23Trg.roa (raw, json)
Hash identifier: R/vIX5DcQkOFnzpCwz6QTEkw7AWHiE/qDeJ5ph7OBqU=
Subject key identifier: 0A:86:E0:87:7D:5D:4A:6C:C1:EF:BB:79:F9:D1:22:E6:0D:B7:4E:B8
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 018CC348E39E3B86C72FC1092EB0F38F4CA4
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/Cobgh31dSmzB77t5-dEi5g23Trg.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 92.51.44.0/24 maxlen: 24
92.51.45.0/24 maxlen: 24
92.51.46.0/24 maxlen: 24
92.51.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 13:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e3:9e:3b:86:c7:2f:c1:09:2e:b0:f3:8f:4c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a86e0877d5d4a6cc1efbb79f9d122e60db74eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:0b:34:97:6d:b8:6f:3c:59:d2:6e:6e:b6:
4d:91:0f:8e:fe:0e:2b:89:38:d8:3f:d2:70:77:6c:
e0:e4:26:27:15:29:98:32:97:a9:84:6f:48:de:70:
21:6d:95:23:43:7a:e1:e4:77:96:1f:01:0b:f5:43:
cc:af:01:73:cd:cf:89:99:8d:29:dd:16:c1:4a:9c:
95:65:b8:27:25:64:c7:b3:93:5b:db:e1:d1:9b:1c:
ce:53:81:09:3d:47:88:f9:25:b3:c6:2d:a4:e5:5d:
2a:7f:a4:7a:8d:f4:87:86:1f:15:71:19:d5:d6:38:
3e:6f:1f:5a:ed:d9:8d:8d:1a:12:26:1b:42:63:61:
73:59:a8:0b:a4:36:1e:30:eb:0d:04:71:0c:7d:b9:
f2:89:d2:a7:73:53:e3:db:9d:68:02:6f:21:ce:8e:
73:df:9c:a2:c4:94:02:cd:e0:e1:3a:02:6e:93:b2:
54:f9:5f:1e:14:73:f0:8b:cd:57:e2:9a:27:17:b9:
26:34:cd:4c:d5:3f:3b:36:5f:4a:2f:df:56:9b:70:
13:a2:1f:9b:b1:f6:f7:cc:59:b1:4c:b1:0e:ca:48:
f1:55:03:f6:f2:24:57:5f:34:24:6f:96:89:c3:a4:
38:b9:25:98:bc:1e:7c:df:e5:a2:0e:a3:ad:73:0f:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:86:E0:87:7D:5D:4A:6C:C1:EF:BB:79:F9:D1:22:E6:0D:B7:4E:B8
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/Cobgh31dSmzB77t5-dEi5g23Trg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.44.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:4b:be:f1:c2:b6:e1:b0:08:d8:a2:2e:57:ca:c0:fb:7b:4c:
b9:6e:09:48:4a:44:5f:cc:fb:cd:24:7b:c6:91:52:50:c5:4f:
67:21:0b:03:1e:e7:f9:d3:a4:3c:55:36:52:99:76:35:38:f6:
f0:20:7c:30:4d:95:4a:0e:f7:f4:6a:0d:6f:d0:95:89:55:43:
81:a1:07:9b:c2:26:df:ac:26:7c:7e:f2:fd:a7:17:3b:1e:cb:
f5:99:60:fb:23:b9:8e:74:1b:27:e3:0c:82:4f:fb:18:ad:1f:
22:93:b9:ef:20:a1:eb:0b:74:02:fe:9d:a7:15:65:fb:43:c1:
37:3a:63:aa:89:71:01:43:a9:cb:7d:f3:0c:94:e4:a7:a8:68:
d3:19:96:ef:a8:61:a6:65:f9:aa:ac:6c:0f:58:db:3e:be:81:
cf:cb:a7:41:b4:f6:a3:f6:e7:e4:40:87:ef:0b:6e:33:47:45:
1e:c1:78:08:f6:99:a9:0e:b1:4f:93:70:8b:ad:20:1e:15:92:
32:64:5c:f3:f7:d7:62:dc:5a:e7:85:ae:fd:57:4c:72:9b:00:
ee:25:90:e4:19:08:90:b9:72:ca:cc:16:2e:d0:17:19:23:e9:
2b:c1:74:04:d7:e4:d9:20:e0:73:54:0c:be:99:5d:80:2b:c9:
1f:ce:2e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:53:40 2024 by rpki-client on console-fra.rpki-client.org