Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/gDjdP32rmH-bs0mNJJ48gsK2ZNE.roa
File: gDjdP32rmH-bs0mNJJ48gsK2ZNE.roa (raw, json)
Hash identifier: zBVMPu4SOrSYzVSMeLr8vrF20gGvNr9rHVItR/22h+o=
Subject key identifier: 80:38:DD:3F:7D:AB:98:7F:9B:B3:49:8D:24:9E:3C:82:C2:B6:64:D1
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500B3BA991DD7E07B696C3FE27AB2E9
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/gDjdP32rmH-bs0mNJJ48gsK2ZNE.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215906
IP address blocks: 92.61.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 06:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b3:ba:99:1d:d7:e0:7b:69:6c:3f:e2:7a:b2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8038dd3f7dab987f9bb3498d249e3c82c2b664d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:f2:a3:e8:2e:b3:9f:bb:cd:06:e1:54:d3:
15:9b:80:9f:aa:c4:12:c1:1f:e0:58:bd:5b:e2:97:
e0:c4:20:cc:dd:80:97:10:00:71:48:ae:6e:ca:63:
bd:28:1e:7e:3a:30:36:ba:07:ad:a2:ed:72:4c:c6:
bb:01:94:00:bf:8b:5a:d1:4c:ea:d5:93:53:f3:ae:
0e:43:5c:96:22:c4:71:81:e3:a2:00:f1:bb:39:ae:
a6:7c:1d:79:6b:a3:94:b8:b6:77:8c:3a:0f:ad:3d:
f1:b7:22:55:43:29:52:56:72:4f:d4:3e:ee:f6:a7:
72:8f:1d:9f:33:0b:0d:9b:cb:02:04:34:cc:f9:7b:
db:17:ac:34:cb:cf:65:1b:8c:10:9b:e4:c8:8f:bd:
4b:a2:2f:ac:aa:f5:48:d0:3a:47:94:56:7c:f8:79:
b6:d2:5e:e9:3c:c9:06:0c:db:9f:45:c8:70:e4:fb:
49:26:b6:ef:6f:3f:91:c5:c1:55:de:d7:45:e9:98:
dc:3a:fb:43:42:99:15:31:25:ce:77:96:70:0c:72:
5b:cf:ec:2f:df:1a:00:4c:88:c9:3a:09:e1:6b:1c:
0b:c6:0c:5b:34:66:9d:e0:52:52:da:4c:ee:11:1f:
4d:10:26:6c:f9:e8:a6:10:83:5d:a2:75:d7:89:01:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:38:DD:3F:7D:AB:98:7F:9B:B3:49:8D:24:9E:3C:82:C2:B6:64:D1
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/gDjdP32rmH-bs0mNJJ48gsK2ZNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9f:f6:03:f3:17:b4:78:ef:4a:54:f8:66:42:86:ee:a6:7a:
80:de:77:a0:17:5b:13:b7:64:a5:b2:0e:b1:c9:05:3a:04:d7:
77:6e:55:0b:23:65:62:12:55:da:88:82:20:76:76:82:41:8d:
92:7d:22:c9:e5:91:ee:be:f0:3b:ac:0c:fe:b6:de:bb:c7:77:
e6:6a:a0:aa:c7:86:b5:b4:3b:a0:e0:cf:1e:60:68:bd:94:a0:
ab:bd:71:1f:a8:cd:49:6e:da:55:5a:60:48:21:66:16:80:a1:
e8:30:52:85:20:3f:0d:0a:f3:d7:0b:cb:4e:de:c0:d1:0c:5a:
3a:38:8b:3b:62:c3:84:c4:99:ae:df:fe:98:b7:fb:a5:bf:67:
e1:ad:42:4c:2c:27:6c:b3:73:0e:4b:8d:b8:47:1b:62:b4:25:
ee:e1:00:0f:f3:88:61:e5:57:60:44:cb:39:13:a7:64:c3:8a:
03:23:fb:a6:4e:01:52:4b:0a:01:06:8c:61:a1:98:0a:cf:4c:
8c:0f:de:b8:51:41:83:67:78:33:c7:2b:06:b6:cc:db:0e:e2:
e5:08:b3:df:e2:bf:7b:e1:f3:3e:fc:b2:44:f8:a4:a8:e6:b7:
a8:44:a9:9f:d5:cf:31:7a:6c:ed:e0:7f:d9:d8:7d:6e:a3:bb:
07:fc:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org