Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lOCd0xVID8F5YeELBKgd2hPNbGM.roa
File: lOCd0xVID8F5YeELBKgd2hPNbGM.roa (raw, json)
Hash identifier: wpHCMUJ7hQSmqvx5jFkmBc2r2KwhyMaCN12aLwPzJWw=
Subject key identifier: 94:E0:9D:D3:15:48:0F:C1:79:61:E1:0B:04:A8:1D:DA:13:CD:6C:63
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01910E146B06F4C373D8A69DD51409B109A8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lOCd0xVID8F5YeELBKgd2hPNbGM.roa
Signing time: Thu 01 Aug 2024 13:15:04 +0000
ROA not before: Thu 01 Aug 2024 13:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214995
IP address blocks: 92.52.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 06:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:14:6b:06:f4:c3:73:d8:a6:9d:d5:14:09:b1:09:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 1 13:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94e09dd315480fc17961e10b04a81dda13cd6c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:87:ea:e9:2f:45:1e:8b:da:59:16:76:ae:
df:f8:b7:8b:51:b8:77:a0:7d:ca:48:ed:8b:ee:73:
83:8f:08:da:5d:e8:ef:c1:8c:9f:f6:3b:72:f1:20:
80:3e:58:c0:2b:68:c6:04:7a:0a:2a:c7:8b:fd:1c:
d3:3d:f4:06:2c:71:31:75:aa:9a:57:a2:45:49:77:
1a:11:ef:1e:b9:3a:fd:70:af:ff:fa:48:bf:09:97:
bf:4c:d9:96:da:b5:14:8d:5c:8c:d0:68:a0:0b:f2:
cc:18:81:99:cf:0a:e3:38:35:86:6c:56:d5:f0:c8:
cf:0f:4c:ca:ca:1a:bf:c6:5e:95:19:0a:38:30:cd:
de:76:a3:dc:d4:92:84:ad:5e:d3:84:3b:81:cd:bf:
ac:af:1d:f6:cb:9a:a0:0f:0a:80:d1:2f:4a:f5:4c:
ba:bc:01:df:84:a2:23:25:54:1f:1e:9e:91:7b:52:
30:2e:81:c9:13:5e:e9:9d:00:3f:92:a2:9a:3d:1c:
b4:a7:24:aa:e9:b6:71:2e:63:39:25:b2:83:86:40:
b5:54:d7:ba:c5:23:6f:16:21:35:a5:37:0a:fc:dc:
cb:c6:8c:88:3a:32:4d:ab:d5:ad:96:45:24:cf:14:
db:6e:ad:5a:f5:c8:59:5b:4e:d4:d7:0b:e5:a6:ac:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E0:9D:D3:15:48:0F:C1:79:61:E1:0B:04:A8:1D:DA:13:CD:6C:63
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lOCd0xVID8F5YeELBKgd2hPNbGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ae:5e:70:0c:1d:b5:5a:de:55:f5:9b:f8:8d:ce:97:39:ae:
25:cc:6c:95:45:f9:d3:b4:e3:24:5a:19:08:a9:9e:ed:e1:78:
de:93:5e:a5:2b:ad:f0:f0:3e:a3:8e:25:60:a9:d1:96:e0:d7:
54:94:77:3b:5f:5e:dd:c0:64:52:86:f7:1d:f6:c7:24:8a:e9:
62:6a:5d:d2:9b:02:c3:43:89:49:56:03:14:80:74:d6:56:05:
b3:8e:31:c1:d1:cb:6f:94:d1:04:e0:31:7f:0a:6e:62:46:31:
dc:12:db:cd:0d:3d:85:e7:5c:80:02:f0:26:15:58:b5:f9:b2:
95:03:31:6f:71:44:2e:5c:f7:b2:d9:92:08:37:b3:90:c7:99:
30:ae:ea:c4:55:6b:ed:b7:e7:1b:39:b9:54:60:79:d3:af:e4:
1d:3d:08:6a:5c:69:bb:83:05:a4:10:9d:7c:ad:a0:ec:89:f5:
0b:17:37:98:ae:1e:32:be:04:1c:83:79:3f:b5:cf:5f:61:ac:
b7:3f:22:48:8a:c0:5f:80:e2:dd:66:1b:46:82:b4:39:d9:5a:
ab:ab:49:17:07:d0:7d:a4:60:b3:e2:40:3a:7c:4b:06:36:2b:
2f:4a:2d:99:82:ec:4e:1c:b8:2c:92:7d:35:53:f8:d4:46:d0:
38:87:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 09:26:23 2024 by rpki-client on console-ams.rpki-client.org