Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/bqvugHQYvgWc7xEaEJKQ74q9yUU.roa
File: bqvugHQYvgWc7xEaEJKQ74q9yUU.roa (raw, json)
Hash identifier: 6mNRKb5/jfATkczPoRUZpxyu1k6x8S6ipjer32O0ATI=
Subject key identifier: 6E:AB:EE:80:74:18:BE:05:9C:EF:11:1A:10:92:90:EF:8A:BD:C9:45
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 01857139AFC127EFBD44D12B81909CBA2790
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/bqvugHQYvgWc7xEaEJKQ74q9yUU.roa
Signing time: Mon 02 Jan 2023 06:44:44 +0000
ROA not before: Mon 02 Jan 2023 06:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44765
IP address blocks: 92.61.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:af:c1:27:ef:bd:44:d1:2b:81:90:9c:ba:27:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Jan 2 06:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eabee807418be059cef111a109290ef8abdc945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:87:0d:44:a4:6c:60:48:e5:4a:ab:c2:88:
96:23:b6:ef:c3:b5:0f:81:00:da:bc:59:23:4e:80:
13:95:3b:17:f6:8c:1a:c1:5d:f6:9b:3f:ae:63:55:
28:e8:4b:5a:58:1c:51:33:08:88:f7:4d:94:e6:2d:
be:d4:87:72:b1:2b:ee:eb:a0:cc:b8:7d:68:fc:1c:
26:f9:bb:d5:a2:82:41:ba:59:c0:79:84:09:23:ed:
58:64:2d:30:b9:d2:44:33:b5:38:6a:8f:46:ac:97:
ca:17:a2:07:3c:6b:ec:38:53:06:97:9d:c3:95:1d:
45:3d:ed:ef:fc:c4:35:f7:8a:f6:45:af:ad:77:2b:
39:8c:18:bb:5f:81:7b:0b:66:ba:19:e3:c3:b1:58:
c6:ed:ef:61:31:8e:5f:31:64:be:93:3c:c5:7a:5f:
aa:88:89:72:f6:09:84:c6:ff:0c:00:6e:1a:96:06:
18:7a:d1:d3:c9:08:11:98:9f:29:31:b6:ae:78:95:
b0:4b:4a:9e:2d:d9:8b:25:31:72:7c:cf:b4:56:7b:
ff:2f:98:68:81:41:2c:c3:3e:70:5f:82:5a:f4:53:
a8:f0:a8:70:4f:be:f2:c0:cd:d6:c1:7a:d0:03:b0:
ec:1c:80:f1:66:9b:8d:b9:c7:96:5f:ce:fd:8c:b7:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AB:EE:80:74:18:BE:05:9C:EF:11:1A:10:92:90:EF:8A:BD:C9:45
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/bqvugHQYvgWc7xEaEJKQ74q9yUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.60.0/22
Signature Algorithm: sha256WithRSAEncryption
34:4e:f3:b8:f1:e7:cd:46:b8:c5:38:a9:66:60:19:b9:c4:48:
92:eb:9b:f5:3b:42:e9:8f:9b:e4:fc:72:a7:cd:36:40:5b:8f:
80:6b:93:a8:a8:35:e2:a8:45:db:f5:3e:47:51:87:9e:c3:f9:
f2:1e:fa:a8:da:18:71:7d:d5:74:27:3f:47:0b:23:31:9c:62:
ac:e4:55:d9:1d:e8:8b:fc:ed:0a:b3:79:66:a4:1a:e0:5f:37:
2a:28:88:7d:0f:4d:01:22:e4:89:b6:bd:a5:b5:b6:d8:3d:31:
08:27:21:b6:e2:07:c0:a8:76:20:78:14:29:65:63:95:46:ab:
d2:cc:0c:57:b9:e9:e0:99:5c:da:4b:00:58:6a:dd:56:75:37:
e6:ea:ab:32:33:d3:5a:ee:8b:7b:1f:67:49:f2:2d:c9:46:2a:
da:31:af:ba:f4:d4:7d:76:80:b4:c1:82:08:11:c1:4e:02:f9:
f3:2a:2c:a0:a5:34:82:15:90:79:24:60:0d:9a:bd:c9:03:06:
12:0b:32:54:9f:77:99:96:1b:d7:ab:bd:1b:fe:40:9b:66:33:
a9:05:73:76:bf:19:27:47:e2:d6:96:c8:06:c4:db:75:28:83:
84:10:2c:85:1f:de:65:d1:f1:18:36:9d:8e:55:f5:82:18:25:
32:64:14:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:00 2024 by rpki-client on console-ams.rpki-client.org