Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/wF6D_V6LxAsji1dSbBYsPsNRca8.roa
File: wF6D_V6LxAsji1dSbBYsPsNRca8.roa (raw, json)
Hash identifier: m+rj5acbCEDSHcl1o5Ke+bYxB4q7Iod0ib7oM6Ib4e4=
Subject key identifier: C0:5E:83:FD:5E:8B:C4:0B:23:8B:57:52:6C:16:2C:3E:C3:51:71:AF
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018B9108340ACA4993B7B8329C9933B5F414
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/wF6D_V6LxAsji1dSbBYsPsNRca8.roa
Signing time: Thu 02 Nov 2023 17:15:15 +0000
ROA not before: Thu 02 Nov 2023 17:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24768
IP address blocks: 92.61.97.0/24 maxlen: 24
92.61.105.0/24 maxlen: 24
92.61.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 06:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:08:34:0a:ca:49:93:b7:b8:32:9c:99:33:b5:f4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Nov 2 17:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c05e83fd5e8bc40b238b57526c162c3ec35171af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:e0:69:98:79:12:77:f1:8e:d7:07:a5:ed:
63:16:8a:14:e4:8e:09:a0:b0:87:fd:90:62:a6:3e:
01:d1:c8:2f:48:d4:e6:be:85:70:03:6f:4c:8d:b8:
ce:30:00:a8:51:0f:b2:cd:dd:e1:86:0b:50:21:11:
42:25:a2:4e:0b:a6:fb:a7:85:f3:ff:f4:cc:94:9e:
1e:2d:02:8c:1a:ba:75:6b:2e:aa:24:6e:5b:27:b7:
d0:55:ee:c8:b6:6d:24:b9:d6:ac:73:09:e3:32:2b:
66:8b:4b:94:71:db:ef:d1:dd:ef:39:e5:13:3a:75:
dd:f9:8f:30:e7:88:f8:d9:a2:8d:5d:2f:85:6b:98:
75:09:54:b2:96:8a:f6:7e:39:00:27:a0:0f:83:5b:
c4:ba:4d:b5:d8:3b:0a:ef:76:21:6a:96:1f:7c:fd:
d1:78:82:bc:a0:60:bd:f8:2f:6b:6c:41:b9:9d:7c:
8a:43:33:57:92:03:10:53:3f:9e:32:b5:2e:d3:89:
a5:a3:05:ee:0f:09:b5:c0:b7:e5:4d:d1:6b:58:1d:
47:14:ab:12:cc:a2:22:6a:b9:26:48:79:17:02:ed:
17:e9:a8:31:0a:b7:8c:78:1d:a2:92:81:90:ec:12:
ef:3f:6f:74:51:fb:20:6b:2b:e2:41:4d:6f:79:2c:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5E:83:FD:5E:8B:C4:0B:23:8B:57:52:6C:16:2C:3E:C3:51:71:AF
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/wF6D_V6LxAsji1dSbBYsPsNRca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.97.0/24
92.61.105.0/24
92.61.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2e:6c:cd:65:dc:51:bb:7e:5f:12:67:ea:f8:10:26:69:8b:
75:b4:37:fd:8b:15:62:42:cb:ee:68:72:79:1b:91:1f:64:a8:
88:81:50:ec:ac:fb:4b:db:8e:03:bf:a3:cc:89:55:a8:e1:a3:
d1:d3:3e:db:ef:b3:e7:fa:a5:90:99:f7:b0:d6:ce:7f:33:bf:
39:8f:6f:4f:31:38:a4:80:23:45:ae:94:55:e6:4d:81:24:d6:
05:f2:45:b6:fc:66:8f:63:b9:7a:86:d5:e1:15:db:bb:a5:fa:
3e:6b:d2:23:56:39:5e:39:b6:9b:9c:6b:4e:97:3c:88:30:45:
a6:ac:73:8a:ad:56:c4:d2:72:e7:8f:f5:e0:90:5b:de:ba:e8:
d9:99:f6:fe:d6:77:d5:1f:d6:55:25:da:ae:90:27:a1:17:c4:
13:d6:af:7c:85:7f:0d:77:76:e3:80:35:ec:1d:cb:1b:79:c1:
f7:a8:fe:30:b5:f7:12:da:10:25:13:eb:91:2c:41:7d:92:25:
2d:b1:c5:fc:ba:77:72:76:cb:24:ee:08:09:db:1c:bd:83:11:
e3:a8:89:6b:28:20:a1:43:31:40:e3:07:fd:44:bf:f6:89:cf:
39:a6:99:90:9d:fb:26:0e:fa:7c:2e:6a:8f:2e:c7:ff:8c:94:
80:a0:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org