Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/PI9qm7GSgFEV6EYqj6djJ2H4WmY.roa
File: PI9qm7GSgFEV6EYqj6djJ2H4WmY.roa (raw, json)
Hash identifier: xNS6HtuzLaEZ+lvelwJ9zGWp0V2Yz7YaN7lmzzKWL6Y=
Subject key identifier: 3C:8F:6A:9B:B1:92:80:51:15:E8:46:2A:8F:A7:63:27:61:F8:5A:66
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01882402C83B9C2AFD3CD30A831043606D37
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/PI9qm7GSgFEV6EYqj6djJ2H4WmY.roa
Signing time: Tue 16 May 2023 10:02:22 +0000
ROA not before: Tue 16 May 2023 10:02:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 92.51.20.0/24 maxlen: 24
92.51.22.0/24 maxlen: 24
92.51.23.0/24 maxlen: 24
92.51.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:02:c8:3b:9c:2a:fd:3c:d3:0a:83:10:43:60:6d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: May 16 10:02:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c8f6a9bb192805115e8462a8fa7632761f85a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:83:c4:41:1d:1b:e7:67:23:76:2d:18:f1:
89:c1:c5:30:10:29:41:90:50:a7:90:5b:24:dc:21:
31:4d:34:00:0e:35:b5:ae:67:bb:ac:be:fd:aa:50:
51:bd:b5:3e:ab:8d:32:99:11:05:74:62:ca:45:da:
50:d8:72:57:35:5a:a0:80:5f:3b:9e:39:f6:9e:58:
a3:16:2d:dd:6a:27:26:ad:00:4e:02:48:45:b1:81:
e7:f3:01:05:33:55:f6:fe:3b:d7:59:72:c0:1d:a9:
7e:bc:e9:c2:ee:a6:75:a6:2f:a2:d4:b9:aa:e4:94:
e4:54:c2:66:30:6e:65:07:da:1d:8d:87:68:2c:ac:
45:aa:19:2b:87:d8:12:c7:ad:12:89:7a:ff:1f:d5:
2a:ee:c8:b5:4d:4c:3f:58:b5:c4:6b:b3:b3:44:03:
42:f1:aa:19:8b:61:b2:17:76:bc:7e:14:31:af:b3:
6d:8c:71:b5:e8:13:47:a5:77:16:34:51:2f:28:83:
97:4d:99:29:98:1d:dd:21:85:7f:ae:40:b8:63:12:
0e:b7:c7:ed:79:75:1a:6a:cb:14:24:7e:e6:62:3c:
f0:3c:54:51:6a:29:83:ba:f0:54:30:19:db:70:67:
dc:18:d8:7e:16:51:6e:00:4d:19:bd:c9:d6:b9:e9:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:6A:9B:B1:92:80:51:15:E8:46:2A:8F:A7:63:27:61:F8:5A:66
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/PI9qm7GSgFEV6EYqj6djJ2H4WmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.20.0/22
Signature Algorithm: sha256WithRSAEncryption
41:51:3a:4b:90:ae:ea:58:4e:91:55:f1:04:6d:3a:b8:7e:84:
6c:d3:53:79:50:0e:f4:cc:9f:6d:7d:73:46:40:88:4a:cb:41:
62:99:10:52:63:a9:22:45:eb:92:a7:a5:e1:68:fb:27:c8:2b:
a4:60:fb:91:d6:52:2a:78:2f:d4:83:64:85:f0:e1:bf:ef:d5:
a8:c9:25:35:ff:03:13:f3:9d:9c:80:57:0c:53:27:79:2c:65:
7c:39:bd:74:6c:05:e0:42:09:b8:41:3b:b3:e7:f2:a4:83:e2:
41:2e:41:29:1c:96:31:4c:82:2c:a1:b4:d6:f1:07:3f:91:e0:
b3:17:19:66:24:53:ee:59:df:ac:7d:46:fd:3a:52:4a:93:12:
03:96:f4:67:85:9a:24:81:30:8c:34:79:f4:a1:f5:85:7b:21:
e0:c5:e4:e9:18:a7:18:a9:c3:51:14:a0:d9:4f:43:2a:99:f2:
8f:af:af:e9:d1:c7:dd:fd:4c:2c:88:e4:51:ca:42:c9:8c:10:
ba:44:76:2b:55:35:0d:a9:12:0d:83:60:b9:a3:8d:3e:da:67:
ff:7c:cf:f2:38:16:09:0c:c2:ae:0b:42:d4:54:30:b8:60:91:
af:13:81:29:19:1c:e3:00:68:43:89:f2:79:aa:86:11:3b:1c:
84:af:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org