Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j0wJjL0ywKym88syu9aqoP_rW5w.roa
File: j0wJjL0ywKym88syu9aqoP_rW5w.roa (raw, json)
Hash identifier: 9atVu9f1sdknwjOUCGdbf69st2+44l3WvZgsnJqLjRs=
Subject key identifier: 8F:4C:09:8C:BD:32:C0:AC:A6:F3:CB:32:BB:D6:AA:A0:FF:EB:5B:9C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C542054CC71E972421524BEED5CB6B3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j0wJjL0ywKym88syu9aqoP_rW5w.roa
Signing time: Sun 01 Jan 2023 07:55:30 +0000
ROA not before: Sun 01 Jan 2023 07:55:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398129
IP address blocks: 92.119.148.0/24 maxlen: 32
185.240.217.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:20:54:cc:71:e9:72:42:15:24:be:ed:5c:b6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4c098cbd32c0aca6f3cb32bbd6aaa0ffeb5b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:b7:90:85:e0:bb:9f:cd:90:ba:69:9d:90:
fc:37:72:ac:f6:31:4c:5f:e1:54:b6:09:78:8c:f5:
e7:80:ed:20:96:7b:0e:01:d1:6b:44:2c:2c:b1:bf:
2d:f8:fc:e4:2a:51:f9:4d:ba:83:c3:4e:d3:ad:d0:
4c:2c:3c:50:91:88:82:9e:0f:6e:68:72:e1:77:20:
fe:69:16:64:71:d1:7b:e5:23:e5:04:21:0a:ef:fe:
de:f5:ab:97:23:91:25:5c:2d:f7:c5:b2:ec:c3:41:
6e:e7:21:b3:99:b1:a1:f1:fa:28:a8:e1:8e:98:b8:
15:92:4c:95:49:3b:14:1a:c0:da:b2:db:9c:5d:2e:
7d:a8:d8:01:14:25:12:f1:e1:80:ba:97:fa:8a:a8:
26:da:ad:cd:ca:ed:43:5c:7f:ae:f4:8e:72:f7:6d:
97:6e:90:03:94:d0:50:6c:a5:e0:3e:bc:c3:1e:2f:
e9:71:64:05:2c:af:0f:48:7f:0a:8d:44:38:e1:1c:
23:2c:65:6b:58:de:38:05:f0:93:24:a8:20:14:b4:
bd:a7:0b:d9:79:23:d2:ce:70:84:5a:3a:84:63:99:
ff:c9:6b:91:67:08:49:5d:a7:12:c3:ed:54:f0:fc:
2f:fb:a0:a3:21:16:b7:f5:6f:94:8a:50:f1:e4:73:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:09:8C:BD:32:C0:AC:A6:F3:CB:32:BB:D6:AA:A0:FF:EB:5B:9C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j0wJjL0ywKym88syu9aqoP_rW5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.148.0/24
185.240.217.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a6:11:3b:bc:73:1c:c0:55:70:c4:c7:ff:58:ea:72:72:05:
c0:6f:d9:71:12:a9:de:67:3a:01:69:0b:52:b8:ca:3c:c8:f1:
35:3a:31:25:3a:83:3c:24:d9:4c:87:f9:79:85:ec:aa:99:83:
7c:10:4a:a8:e0:0e:f1:68:ba:28:7d:48:0a:ad:3b:a1:0f:53:
05:b4:f9:50:52:df:c1:ae:e0:8b:4a:d9:f6:1a:15:a2:b2:08:
58:27:dd:63:8c:c0:1f:fc:75:f5:3e:54:88:96:8c:2b:89:3d:
96:5b:8a:58:5c:33:0a:4b:ae:09:ae:85:ca:f7:73:a4:7b:5b:
da:23:2b:77:c7:37:5b:d7:e8:b2:14:40:9a:2f:55:43:f8:2a:
4b:72:b9:85:4b:7f:95:81:08:6b:94:fc:70:ee:56:77:4d:a6:
4e:cb:fc:ea:09:4d:7a:f8:b6:96:a7:85:c7:35:23:d6:dd:07:
16:28:c7:ed:ab:87:0b:de:b0:02:ff:4c:eb:62:03:98:b6:0e:
46:72:38:48:87:9d:1f:77:a7:78:d9:0c:a2:56:35:a6:89:d5:
9f:06:8b:cd:a1:42:13:07:66:32:0a:a8:db:f7:fd:4b:c9:d5:
00:fd:e8:da:52:a7:df:ee:16:6e:02:1e:c4:23:1d:1f:b8:91:
43:68:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org