Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Aux13NOQHaPvIOcEcdBkehwT9bs.roa
File: Aux13NOQHaPvIOcEcdBkehwT9bs.roa (raw, json)
Hash identifier: y6JzCfCYgDut3Hq4PSBU1kzTUj+8xDJxM/PrzhqmSeI=
Subject key identifier: 02:EC:75:DC:D3:90:1D:A3:EF:20:E7:04:71:D0:64:7A:1C:13:F5:BB
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7A9B21CCBB9A28035A2F39C18C415
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Aux13NOQHaPvIOcEcdBkehwT9bs.roa
Signing time: Mon 02 Jan 2023 09:54:45 +0000
ROA not before: Mon 02 Jan 2023 09:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197248
IP address blocks: 92.52.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:a9:b2:1c:cb:b9:a2:80:35:a2:f3:9c:18:c4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02ec75dcd3901da3ef20e70471d0647a1c13f5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:5c:64:17:c6:99:53:fc:91:02:36:71:6a:
8e:0a:fc:15:60:a8:97:71:4b:af:54:a8:bb:c9:ac:
28:37:d3:26:e5:cb:c6:6b:ec:9f:37:33:2a:47:77:
b1:c0:62:6c:a6:96:cf:89:6f:c6:32:cc:61:b3:5b:
82:d2:73:a3:4d:de:45:c6:00:28:08:f3:c7:c1:66:
49:14:a8:0c:66:83:9b:86:4b:44:81:04:7c:9f:86:
f9:3b:83:65:23:e0:e2:2b:da:5d:aa:c9:3c:c4:06:
b8:f5:65:2e:56:54:80:82:a2:96:a4:a5:a8:76:bb:
36:f2:75:c7:4a:06:e0:d5:03:48:31:9a:db:a1:b3:
81:ce:0e:5c:7a:2c:35:45:dc:bf:93:1c:f2:9c:8d:
14:6f:2c:e9:de:b4:b2:e2:89:90:2b:62:85:0e:34:
84:62:30:22:f2:da:62:cf:20:ce:7a:c5:74:39:41:
13:c4:9e:42:35:57:03:c7:24:71:13:c3:3b:8c:66:
4e:87:29:74:ce:18:a7:95:f3:32:71:b2:32:36:72:
a9:00:71:3c:b8:d7:f0:05:fc:f6:c7:f8:97:97:90:
41:f3:3c:fe:26:30:c3:33:0f:ff:8a:4b:85:40:05:
fe:f7:af:6d:36:65:d4:5f:8f:76:36:e4:a0:a0:09:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EC:75:DC:D3:90:1D:A3:EF:20:E7:04:71:D0:64:7A:1C:13:F5:BB
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Aux13NOQHaPvIOcEcdBkehwT9bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.223.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9c:01:52:8d:14:bb:c2:60:f5:d6:89:d8:74:60:90:02:31:
b0:33:48:e5:63:13:c2:cc:2a:3e:d4:16:92:bc:40:58:17:29:
be:f7:c9:c9:ce:d8:84:6a:aa:93:14:c7:04:b8:cd:8d:5f:1b:
d1:62:56:8f:e7:73:1a:c6:9e:c1:d5:fb:eb:86:76:bb:38:1a:
c0:5b:43:0f:7f:9c:d5:6e:cc:13:62:05:35:6a:1b:ec:20:03:
6a:8b:f3:6e:44:4b:a5:d9:df:35:c4:00:68:9c:33:dc:8e:8d:
55:bb:b4:76:09:95:9b:88:95:b5:04:e5:3b:5a:e1:98:e6:85:
b9:33:81:6b:c4:7e:3c:4e:49:79:14:51:c3:70:1d:52:1e:4c:
06:61:85:c4:4d:10:ce:b7:fb:af:5a:73:3b:d2:24:76:66:4a:
75:e2:dd:dd:17:a8:00:52:2d:8e:2e:b8:29:22:a7:bf:b4:1a:
73:8a:60:34:9a:54:c1:0f:9d:e4:59:72:02:5b:b5:74:a1:22:
7a:16:ac:a4:01:45:5d:21:3f:d9:e6:c1:c3:bb:87:dc:ad:57:
a8:45:21:2b:21:6f:bb:cd:c7:4e:f6:d5:f5:ed:6e:bb:a7:52:
10:fd:e6:19:e6:78:25:3c:fe:34:ed:ef:8e:2e:7a:f6:9d:66:
65:a4:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:20 2024 by rpki-client on console-fra.rpki-client.org