Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/DnhuV5Vko-XgUi8yuwPxRQMCQsg.roa
File: DnhuV5Vko-XgUi8yuwPxRQMCQsg.roa (raw, json)
Hash identifier: y1Vd1kUS2JAHyUtKvk7TbCAqDnQ76D+AP20NFEKfugs=
Subject key identifier: 0E:78:6E:57:95:64:A3:E5:E0:52:2F:32:BB:03:F1:45:03:02:42:C8
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 019190A11A0851AC906DF10A788A5279A992
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/DnhuV5Vko-XgUi8yuwPxRQMCQsg.roa
Signing time: Mon 26 Aug 2024 21:39:22 +0000
ROA not before: Mon 26 Aug 2024 21:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48695
IP address blocks: 92.43.169.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
92.43.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:90:a1:1a:08:51:ac:90:6d:f1:0a:78:8a:52:79:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Aug 26 21:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e786e579564a3e5e0522f32bb03f145030242c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:58:6b:d2:40:fd:e2:e3:cb:b3:96:89:fd:
38:09:68:6b:8d:80:e6:b3:89:36:33:80:88:51:1a:
e0:ef:25:c3:5b:6f:20:62:7d:de:0e:33:c8:08:ef:
25:ab:e4:27:97:64:2a:62:9f:a7:d5:4c:ac:ed:c8:
36:a9:94:37:c5:4a:52:72:08:8c:e1:a4:65:f4:ac:
47:3a:7d:d6:70:54:e8:f3:f1:98:a6:a2:1e:1b:a6:
b2:73:15:3d:57:2e:c7:7f:ca:07:3a:c1:0d:0a:39:
85:90:ae:71:e3:af:b9:eb:67:7d:9c:35:26:f1:d3:
34:e0:6c:ab:ff:1b:f6:1d:cf:72:47:b2:da:a2:7a:
5f:f1:32:8c:cb:72:34:1b:58:e9:a2:53:ee:50:82:
0d:4f:a0:a7:16:a7:f6:9b:33:c7:82:fe:b5:67:3b:
7b:cf:c6:a3:c1:02:b4:89:07:d8:a4:01:76:9a:d6:
cc:2e:ff:02:f1:cc:d0:ca:cf:55:0b:89:15:94:f7:
54:12:d1:5a:a2:05:9f:1a:7c:4e:45:64:eb:da:d3:
f0:ea:38:1d:d9:7a:77:c8:4e:db:cc:01:ab:c1:7f:
e5:ad:85:e8:70:3a:57:a9:ab:35:af:4f:22:00:6c:
6f:95:bf:14:e2:c2:c1:5a:9d:f2:0d:11:47:b7:1e:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:6E:57:95:64:A3:E5:E0:52:2F:32:BB:03:F1:45:03:02:42:C8
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/DnhuV5Vko-XgUi8yuwPxRQMCQsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.169.0-92.43.171.255
Signature Algorithm: sha256WithRSAEncryption
31:8e:c5:9b:5c:d2:4f:8a:80:06:a8:1a:5d:57:24:b9:d9:bd:
d4:21:e5:1a:89:d4:3b:71:5f:d4:4b:30:c5:56:e8:28:79:1a:
e2:dc:a3:34:15:0e:f1:cc:5e:18:02:8f:ac:b3:e0:14:43:b9:
59:fd:4d:8e:54:81:38:5e:9a:bc:70:87:d8:ec:5e:16:38:90:
6f:a1:8e:db:17:84:92:cd:cf:b1:c5:b8:4f:6b:27:5a:ef:64:
e0:0b:56:4a:45:fb:c8:ba:81:da:bc:19:5a:63:aa:c9:66:12:
a0:42:63:31:46:39:59:ff:51:fd:cf:7f:83:65:4c:5e:5b:3e:
d1:6d:40:fa:7e:7b:b0:3e:40:5f:75:2f:a3:4f:6a:4d:bc:a3:
53:19:c1:77:61:44:62:45:5a:7e:d7:42:eb:dc:0b:44:2c:46:
3a:ea:fd:f1:65:6e:00:3f:71:ac:c8:d3:22:fb:5b:89:ae:56:
13:d3:92:80:4a:00:59:72:52:c3:ed:2f:cc:8a:bb:ee:eb:bb:
65:77:a2:74:cd:1e:3f:2a:5d:30:54:0f:c4:ad:81:6a:f6:33:
b3:07:a2:c4:f2:ca:5d:38:64:4d:21:d3:3f:5c:72:e3:36:17:
bf:e0:7a:31:9c:6e:ae:c6:55:a2:06:2c:ca:70:d5:5d:6b:78:
26:61:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:59 2024 by rpki-client on console-ams.rpki-client.org