Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/AVCUR4noe6Hs1km4NtQZrVR55G0.roa
File: AVCUR4noe6Hs1km4NtQZrVR55G0.roa (raw, json)
Hash identifier: W6CUdedVKDpSl9Y9K9/UeIWx32FHsgYGEcGK2p6yw4w=
Subject key identifier: 01:50:94:47:89:E8:7B:A1:EC:D6:49:B8:36:D4:19:AD:54:79:E4:6D
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018BAE2624B600FE1511E1A48E9505DA017E
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/AVCUR4noe6Hs1km4NtQZrVR55G0.roa
Signing time: Wed 08 Nov 2023 08:56:57 +0000
ROA not before: Wed 08 Nov 2023 08:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 92.61.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Nov 2023 15:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:26:24:b6:00:fe:15:11:e1:a4:8e:95:05:da:01:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Nov 8 08:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0150944789e87ba1ecd649b836d419ad5479e46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:b5:04:bc:08:8f:76:ac:24:da:35:47:b3:
73:4b:38:5a:bd:88:10:64:bd:ab:8a:13:5b:eb:95:
88:81:8c:9c:0c:97:95:af:01:90:9c:08:d9:cd:c2:
49:fd:cf:77:c6:ce:fa:dc:d2:1e:16:f5:a6:bc:6c:
a9:2f:45:60:b3:9c:2d:20:b0:b4:35:e0:73:6a:a1:
29:34:68:8d:0b:0f:44:6f:78:7f:6a:91:44:17:08:
c3:e1:42:c6:2d:ab:1f:7e:b5:1a:5b:69:ee:8c:1a:
ee:c5:26:5f:b6:e5:f6:97:e7:ac:0e:99:0e:06:36:
df:f1:49:54:5b:0c:71:c6:1c:53:4a:cc:68:7f:ec:
f1:12:d8:a7:cb:78:14:63:9f:43:4c:71:af:5f:b6:
aa:7f:1b:2f:4d:f9:b2:6e:d5:e1:0b:1a:c9:01:cb:
7c:17:b4:48:21:cb:69:65:a8:d4:0f:d9:d1:03:11:
95:9a:72:20:31:a2:0d:e9:a3:e8:4f:f4:e0:3c:3f:
f0:66:78:bb:a0:81:7c:cd:ff:d6:b3:6d:84:df:e4:
33:03:a0:f0:fa:75:77:db:f7:e1:6b:2b:75:71:f4:
f6:4b:9d:6b:22:a9:09:c8:a0:d7:67:c3:60:4a:7b:
8b:8a:93:8b:c2:41:f0:9c:2f:82:e9:1d:1b:d8:87:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:50:94:47:89:E8:7B:A1:EC:D6:49:B8:36:D4:19:AD:54:79:E4:6D
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/AVCUR4noe6Hs1km4NtQZrVR55G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c8:9e:c7:c0:41:8e:21:53:6e:97:a7:bb:f8:d8:d8:fc:31:
a3:46:ff:03:e6:be:e9:30:38:0f:01:e3:2d:57:82:a6:9e:f7:
07:20:13:74:93:d8:dd:4d:4c:80:47:73:dc:4d:8c:bd:f5:88:
9f:27:9e:61:30:50:d5:d3:0b:9b:59:61:18:71:23:77:58:cb:
ba:e7:d4:bd:f4:cf:10:95:16:44:7f:a0:3a:15:b4:c5:26:b1:
cb:59:8b:c7:20:71:8e:28:64:3a:bf:a4:7f:91:09:d9:82:cb:
32:3b:d0:9c:ff:75:0d:17:11:cd:5c:40:e1:d5:c8:66:a5:7d:
64:c9:95:e7:6f:36:2b:ef:66:9b:38:51:2a:19:37:0d:56:a6:
9f:86:04:69:25:ec:d9:52:3c:d3:c8:99:4e:6a:fe:ea:c5:fa:
64:2f:05:1d:27:10:1c:4f:99:71:08:6a:c8:0a:da:ee:d8:1f:
6c:b0:22:c2:1e:5a:4f:95:23:6a:3a:d6:ac:44:0d:12:c1:ae:
99:74:33:29:5c:0f:7a:0f:60:db:b2:50:78:ab:ec:4e:83:0f:
c9:b8:20:81:87:a4:cc:6c:df:dc:d8:e5:f8:cc:11:cd:df:3e:
c9:61:9d:aa:fa:1c:a7:89:77:64:28:05:18:ff:0b:59:33:ff:
df:52:0b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org