Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/DPgeV8e3au317qH7amy_HU3Vmxc.roa
File: DPgeV8e3au317qH7amy_HU3Vmxc.roa (raw, json)
Hash identifier: O/o2D+jWqNAcJkvurBGW3XT4BNpWRii4Q6xy03rhsAU=
Subject key identifier: 0C:F8:1E:57:C7:B7:6A:ED:F5:EE:A1:FB:6A:6C:BF:1D:4D:D5:9B:17
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 018CC8025818E81349209E468B4D72F4F7F3
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/DPgeV8e3au317qH7amy_HU3Vmxc.roa
Signing time: Tue 02 Jan 2024 02:30:45 +0000
ROA not before: Tue 02 Jan 2024 02:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48695
IP address blocks: 92.43.170.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 26 Aug 2024 21:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:58:18:e8:13:49:20:9e:46:8b:4d:72:f4:f7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Jan 2 02:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cf81e57c7b76aedf5eea1fb6a6cbf1d4dd59b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:39:4f:46:a1:8e:e9:37:a9:eb:23:23:b3:
c4:bf:5b:a1:95:07:4b:ce:ce:b4:6b:10:97:6c:3c:
36:68:33:22:0b:e7:4b:ff:b4:f4:11:44:75:d9:da:
69:76:f7:97:47:72:63:6e:5e:e8:42:64:b1:c6:e9:
63:e5:dd:ca:64:08:5a:d5:ea:13:d2:a7:d4:3e:b7:
06:c0:32:e3:9b:27:30:67:47:df:89:b5:51:6c:4a:
18:2b:a6:9b:e7:23:f0:65:47:cd:29:e3:2a:c0:22:
95:cb:fa:67:e8:2e:ef:a6:50:72:8e:99:fd:56:e6:
77:98:a9:83:86:61:30:0b:20:a7:32:82:1a:05:9b:
42:1e:22:4f:79:65:3f:a3:82:5f:f9:3f:75:4b:ef:
9f:e5:2f:9b:55:60:01:bd:46:00:5d:7d:36:75:17:
0a:7e:4e:90:eb:53:56:9f:b6:70:e6:59:d7:17:9a:
cd:5e:6f:67:5f:0f:a4:c9:1a:8b:6d:56:ab:ac:63:
70:83:86:34:4e:8d:4d:38:df:27:d0:05:ca:21:7d:
25:59:94:3f:27:36:83:3a:31:31:16:be:24:1c:8d:
e2:4c:ee:8f:2e:7e:79:9c:0f:ae:3d:75:17:0d:ae:
8b:61:63:fe:0b:75:bd:e0:e7:d4:18:57:d1:ec:74:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:1E:57:C7:B7:6A:ED:F5:EE:A1:FB:6A:6C:BF:1D:4D:D5:9B:17
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/DPgeV8e3au317qH7amy_HU3Vmxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.170.0/23
Signature Algorithm: sha256WithRSAEncryption
67:3f:35:4f:76:e4:3d:48:c0:4a:52:1f:45:60:38:24:a8:0f:
77:b8:e5:9c:49:0c:dd:df:52:91:45:27:21:a9:99:f1:89:48:
dc:ed:e9:df:37:a5:09:d0:50:69:98:7d:e4:97:21:40:be:33:
6d:ae:cc:21:cd:36:6c:cc:7a:22:3e:e1:07:cb:52:74:ba:bc:
17:5f:68:68:55:d9:a0:91:3a:d7:b2:bb:9e:ff:bf:bf:1f:f6:
0c:f1:7b:4b:f9:ab:ec:0d:49:80:f5:da:da:c5:04:d9:22:57:
0c:95:41:78:70:60:6f:83:90:a9:29:91:69:d1:b9:a9:8c:21:
a1:14:0b:4c:4a:62:a8:55:cc:46:cf:82:e4:1a:a9:a1:7f:61:
cb:18:f7:04:84:ee:18:b6:3f:3e:61:78:e7:c5:c8:47:7f:8d:
77:75:6f:8d:3b:60:2e:f9:7b:6f:2a:24:ac:fd:93:65:fc:f8:
fa:06:61:e8:08:88:c8:e5:cf:ef:71:8a:63:46:1d:8a:23:3d:
10:f2:24:11:17:da:af:78:48:1a:f4:64:23:de:e3:ee:82:e4:
ac:41:2c:09:95:ee:25:9f:57:b1:7c:95:8b:ff:b0:df:98:de:
38:64:bc:02:53:59:df:a6:8a:09:bf:71:91:f1:2a:1c:b3:2e:
fe:b8:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 23:41:09 2024 by rpki-client on console-ams.rpki-client.org