Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1-p3i7J_hWOr2v7bZwjTicEKm1m0.roa
File: 1-p3i7J_hWOr2v7bZwjTicEKm1m0.roa (raw, json)
Hash identifier: 0VUqQqCGd74OqO4rsAY+Bc/FtLBb18SoLuI1kwVMUEY=
Subject key identifier: FA:9D:E2:EC:9F:E1:58:EA:F6:BF:B6:D9:C2:34:E2:70:42:A6:D6:6D
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018C0733259CCEB125CE8E7E676EB3636F11
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1-p3i7J_hWOr2v7bZwjTicEKm1m0.roa
Signing time: Sat 25 Nov 2023 15:57:21 +0000
ROA not before: Sat 25 Nov 2023 15:57:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215970
IP address blocks: 92.61.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Nov 2023 06:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:07:33:25:9c:ce:b1:25:ce:8e:7e:67:6e:b3:63:6f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Nov 25 15:57:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa9de2ec9fe158eaf6bfb6d9c234e27042a6d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:21:66:74:b3:96:c8:8b:2e:74:88:87:c3:
ef:72:24:7f:e8:45:de:e4:bc:8e:c4:5d:5e:67:52:
0a:a0:c3:c9:25:23:1b:98:d0:30:11:53:6e:fb:72:
15:8e:f4:5f:04:66:db:9e:75:d1:1c:69:fe:3c:cb:
19:c1:89:6d:f4:26:51:63:49:75:7f:8d:ec:d0:d1:
d5:81:11:6e:84:9c:a9:17:4f:78:b9:35:0e:14:93:
14:45:bf:50:c3:a9:1d:06:99:b4:68:f1:fb:c2:df:
4e:7b:8c:a3:a7:86:33:91:5c:a8:36:00:7d:08:23:
18:cf:bf:c2:af:73:e7:80:5d:49:86:61:76:2c:01:
b1:79:64:a2:27:c9:1f:29:80:12:ab:cc:17:3d:ae:
54:8c:5d:9e:7e:52:41:d4:89:92:e5:45:48:0a:49:
5e:c7:9c:e9:e1:34:d7:35:2e:21:45:14:38:c1:ec:
1f:9d:a0:9a:26:47:6e:2f:60:e5:7f:75:50:c0:99:
c0:55:f2:93:4e:95:fa:2a:33:7f:4a:a2:f5:d7:21:
42:05:e1:3b:bd:c3:ec:7a:3c:8d:e1:e3:34:46:2e:
f2:6b:d1:30:0f:02:a8:62:d4:c9:97:89:1a:b6:d3:
ca:ec:1d:12:fd:04:ba:27:6b:23:98:52:45:7f:b9:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9D:E2:EC:9F:E1:58:EA:F6:BF:B6:D9:C2:34:E2:70:42:A6:D6:6D
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1-p3i7J_hWOr2v7bZwjTicEKm1m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
19:37:25:09:49:18:b3:b2:8a:54:f9:ce:f7:bf:b6:86:70:cc:
b4:32:fa:7a:ba:f2:9d:97:ca:1d:f5:4b:7b:a4:ee:cd:b5:79:
84:14:82:19:c0:9d:a2:9e:4d:88:44:c4:3d:16:64:5b:12:24:
d7:03:65:bf:9a:8c:1c:67:ec:68:1c:92:38:99:f8:40:2c:28:
33:4a:5b:78:0e:2f:c0:cb:79:62:29:68:cd:37:ec:78:d4:23:
5d:bb:2c:69:62:7c:ee:39:2c:eb:81:fb:90:7a:8d:3b:04:78:
94:ac:4d:28:aa:06:53:c1:b1:63:7f:17:59:fc:c4:3f:47:89:
35:9b:5c:42:f1:48:5e:e0:b7:b0:28:f7:74:7b:ee:f3:54:c5:
7e:13:03:9f:a8:bf:05:ef:88:2f:76:70:71:18:43:58:c9:dd:
52:d8:0a:73:21:b2:1f:31:ff:a1:2a:95:c3:6b:9e:3b:11:f9:
92:e6:1f:24:dc:08:ba:09:41:78:af:24:71:c2:f1:0d:93:74:
f8:80:7e:b5:07:fc:dd:2c:34:6d:e5:9e:7b:54:f0:49:7d:67:
2a:fe:7d:a7:83:6a:6c:32:cb:da:0f:dc:6b:d1:c3:de:99:a2:
14:31:3c:b1:f3:6c:78:fb:06:6f:9b:e2:c1:45:b2:5e:9e:6d:
50:31:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org