Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/A2FxC7CFizzpwqLgTXamsrze7Ug.roa
File: A2FxC7CFizzpwqLgTXamsrze7Ug.roa (raw, json)
Hash identifier: KuBR0APpExiQ3o/c+rLALT9vbl8Y/VcClegXouPZJvE=
Subject key identifier: 03:61:71:0B:B0:85:8B:3C:E9:C2:A2:E0:4D:76:A6:B2:BC:DE:ED:48
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01857139BCA1C24EE371D5DA35506CE773CD
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/A2FxC7CFizzpwqLgTXamsrze7Ug.roa
Signing time: Mon 02 Jan 2023 06:44:47 +0000
ROA not before: Mon 02 Jan 2023 06:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208555
IP address blocks: 5.56.132.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bc:a1:c2:4e:e3:71:d5:da:35:50:6c:e7:73:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 2 06:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0361710bb0858b3ce9c2a2e04d76a6b2bcdeed48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:e8:a6:ef:13:7e:ea:33:9a:84:b2:fd:19:
50:32:60:f0:54:fd:aa:50:79:0d:66:cb:95:4a:2f:
2c:17:0f:ff:81:ca:66:9a:8d:90:18:3c:a5:72:cf:
0a:95:f0:47:32:b5:2c:44:17:b1:22:81:2b:10:2f:
5e:7f:9b:91:f1:9b:38:e3:85:f5:20:85:a6:b0:b2:
c7:d4:dd:25:29:b0:69:8b:a1:37:87:fe:12:d9:5b:
ec:15:45:58:d9:3d:99:9f:2b:da:4d:46:e6:45:8d:
bf:2a:63:10:4d:16:01:82:12:91:bc:19:e5:b4:e0:
eb:ef:9f:b8:17:ca:50:a3:e3:ee:d1:65:a5:d5:d4:
7c:83:5e:5f:3e:4a:50:45:8e:8d:81:e4:40:f7:52:
ff:12:66:a0:89:fa:0a:68:68:c0:30:75:c1:f2:7f:
98:b5:5d:00:27:d8:09:d9:d6:d1:2d:31:9e:68:69:
3a:e5:9b:86:6b:df:d2:ca:b3:db:a7:5e:a6:93:4f:
be:08:7f:a3:e8:d7:31:b9:e1:16:9b:04:d3:3a:de:
9f:14:07:48:45:4a:15:54:bb:f6:30:b8:f0:95:45:
26:d5:48:05:7c:50:14:d9:7b:9e:2b:bb:85:96:cf:
c5:04:5b:fb:cb:f8:df:8f:05:68:85:3b:f2:06:15:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:61:71:0B:B0:85:8B:3C:E9:C2:A2:E0:4D:76:A6:B2:BC:DE:ED:48
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/A2FxC7CFizzpwqLgTXamsrze7Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/24
79.143.84.0/24
87.236.209.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:b2:04:ac:c5:b7:d8:04:90:48:fe:61:98:39:21:75:fe:47:
75:04:f2:98:a8:f2:ba:25:06:72:15:0b:70:9d:df:63:83:72:
95:39:a8:ce:bb:87:21:99:dc:b2:5e:d8:66:7d:7f:32:03:e4:
9f:75:38:c1:fc:89:72:8c:dd:f9:1a:96:7f:5b:c2:dd:84:64:
0d:d5:e3:06:cf:a7:70:3d:21:ac:6c:a0:bb:5b:4c:9f:9b:08:
53:97:cd:46:3b:a9:f0:05:61:cb:06:df:27:02:f8:56:91:35:
a0:9c:b7:f2:8e:51:5d:5b:01:f3:b3:25:2e:e1:b5:9f:31:16:
ac:86:55:1c:fe:24:6f:ed:12:12:78:72:4c:e5:ca:65:46:ab:
e3:ed:1d:4f:a7:d8:98:7f:aa:06:0a:fd:05:19:df:94:50:86:
08:80:1a:0d:6d:fd:c4:01:10:6c:3f:ce:8c:41:bc:b2:cd:71:
e5:d0:6e:a4:25:10:3b:99:47:62:4b:c2:74:7c:9f:76:b8:a4:
b1:ac:68:ea:09:38:fa:24:f8:3d:99:66:3c:7d:0f:5b:a5:b5:
4b:4e:9a:7c:5f:ae:74:eb:69:8b:05:f9:1d:da:35:15:9d:ad:
00:06:d0:c0:d0:4e:50:cb:b7:40:43:6a:17:1a:13:8e:e3:74:
9e:a1:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:55 2024 by rpki-client on console-ams.rpki-client.org