Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/BtSjeAvLnHETkenzlKSpfyQcHTQ.roa
File: BtSjeAvLnHETkenzlKSpfyQcHTQ.roa (raw, json)
Hash identifier: oW1fSKM4BSoNBWgBMtLVvU3/VTMha967QePvwnjHKMA=
Subject key identifier: 06:D4:A3:78:0B:CB:9C:71:13:91:E9:F3:94:A4:A9:7F:24:1C:1D:34
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 0189FDB06199715446D47B612F5E563BEF66
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/BtSjeAvLnHETkenzlKSpfyQcHTQ.roa
Signing time: Wed 16 Aug 2023 09:32:22 +0000
ROA not before: Wed 16 Aug 2023 09:32:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 92.118.69.0/24 maxlen: 24
92.118.70.0/24 maxlen: 24
92.118.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:b0:61:99:71:54:46:d4:7b:61:2f:5e:56:3b:ef:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Aug 16 09:32:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d4a3780bcb9c711391e9f394a4a97f241c1d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:69:f4:bb:cc:93:35:c5:b7:19:c8:6e:4e:
9b:06:69:f7:10:2b:2f:00:9f:0e:07:a7:ab:9c:ab:
c3:ea:9a:53:9c:f4:b8:ba:60:9a:2c:2c:b4:f0:5c:
9d:37:d9:dd:d7:47:e5:76:48:d0:1c:88:36:e2:1d:
7f:f5:67:29:8d:0a:53:22:78:3d:cc:fe:63:8f:53:
22:42:bf:e1:1a:31:8f:4f:1a:63:85:bf:a2:93:7b:
45:ce:c1:6d:64:e7:11:1c:aa:c1:24:44:cf:0d:48:
35:7a:ab:55:f5:d6:e5:72:3c:95:01:fd:cb:d4:a3:
79:b5:11:4d:ee:07:ac:5a:07:83:f0:50:c1:71:f5:
c6:83:25:a1:b9:ca:ff:64:fe:81:71:3d:df:c3:12:
59:e0:7d:42:7b:42:c7:10:7f:30:ac:55:ef:0b:d7:
d7:03:1b:21:d4:f7:5f:ff:7c:f6:a9:d0:20:a2:28:
34:6a:53:ed:c3:e4:e5:fe:35:25:50:f0:c8:b3:5c:
29:58:1b:7e:fa:4c:ae:bf:96:40:4b:79:a5:d6:59:
8c:b5:22:f5:d9:e6:06:a5:b6:51:dc:b0:0c:ee:1c:
60:47:29:9f:6a:64:14:53:0a:84:01:9e:44:11:44:
51:92:84:c0:bd:a9:e8:fa:fa:aa:c7:0e:0e:ae:96:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:A3:78:0B:CB:9C:71:13:91:E9:F3:94:A4:A9:7F:24:1C:1D:34
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/BtSjeAvLnHETkenzlKSpfyQcHTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.69.0-92.118.71.255
Signature Algorithm: sha256WithRSAEncryption
6c:9f:cb:31:53:ca:f1:a4:fb:1f:6d:14:ba:59:cd:70:b4:e7:
d7:53:01:1f:53:0a:9c:1d:0b:e6:6b:b1:26:40:76:b6:8d:3b:
8b:66:d4:9d:68:21:52:ea:a2:56:f3:c1:15:e4:9b:ed:92:d3:
c3:4b:a5:23:29:0d:46:6f:1f:05:52:cd:99:ea:6a:fe:fc:60:
5e:e6:f2:58:02:39:c4:6d:2a:54:67:b7:da:f0:fd:81:2a:38:
cb:31:fd:3c:16:51:ee:bc:c4:c3:6a:39:2b:d0:73:0f:8b:66:
17:04:1d:f4:6e:6e:7f:27:7e:fc:0a:20:6e:ff:47:38:c8:1d:
58:58:ac:ab:72:8a:4a:bd:15:dd:a2:9b:d6:7f:8e:15:19:c3:
44:a4:0c:dd:fe:54:7d:ea:85:e6:33:da:bc:a3:e6:90:9f:61:
36:d6:6b:c0:62:39:e7:09:a5:17:f6:d3:5b:a1:fc:a3:c8:64:
1e:3f:22:59:07:ef:11:24:6f:b3:a5:e0:bc:93:2d:ce:86:35:
41:92:dd:01:eb:a0:23:ad:1d:55:73:ff:5c:7a:39:94:8f:f5:
a7:c6:9a:9d:32:a4:ee:d6:c3:70:1e:a1:54:fd:6c:6f:f9:57:
63:a7:8a:16:6d:98:ba:ba:62:72:5a:2a:b6:84:db:54:3c:95:
89:e2:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:30 2024 by rpki-client on console-fra.rpki-client.org